We are very pleased about your interest in the hostettler group. Data protection is of great importance to the organiser, hostettler ag, a company of the hostettler group. In general, use of the website www.karriere.hostettler.com (hereinafter: “hostettler”) is possible without providing any personal data. However, if you would like to make use of special services offered by our company via our website, the processing of personal data may be required.

We are committed to handling your personal data responsibly. Therefore, we consider it self-evident to comply with the Swiss Federal Act on Data Protection, the related ordinance, and any other applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR).

In this privacy policy, we inform you about the most important aspects of data processing at hostettler and about the data protection rights you are entitled to. This privacy policy covers the collection of personal data both online and offline, including personal data that we have received from various sources, for example from the different companies of the hostettler group, our contractual partners, customers, suppliers, business partners, websites, apps, social networks of third parties, and events.

You will first find our overview “Data Protection: Summary”, which is intended to provide you with a brief overview of the most important key points of our data processing activities. Afterwards, we provide you with more detailed information.

Please note that this privacy policy does not contain a final and comprehensive description of our data processing activities, and certain matters may be governed in whole or in part by specific privacy policies or general terms and conditions (with or without reference to them in this privacy policy).

1 Controller
The controller within the meaning of data protection law is:

hostettler AG
Haldenmattstrasse 3
CH-6210 Sursee
Email: info@hostettler.ch

1.1 Data Protection Officer
The contact details of our data protection officer are:

Data Protection Officer hostettler group
Haldenmattstrasse 3
CH-6210 Sursee
Email: privacy@hostettler.com

2 Data Protection: Summary
Below, we provide you with a condensed overview of the most important key points of our data processing activities. Of course, we also provide you with more detailed information. You will find these immediately afterwards.

2.1 Personal Data Processed
We use personal data that you provide to us, that we collect about you, or that we receive from third parties. The most important types include:

Contact and identification data
Personal information
Contract data
Financial data
Interaction and usage data
Website information

2.2 Purposes of Processing
We process personal data primarily to fulfil our legal and contractual obligations.

2.3 Disclosure to Third Parties
In the course of our business activities, we rely on, and in some cases are required to, transfer certain data to specific third parties. Under no circumstances do we sell your data.

2.4 Location of Processing
We generally process personal data in Switzerland or in an EU/EEA country, or in another country that provides an adequate level of data protection.

3 Data Protection in Detail
3.1 Personal Data Processed by Us
hostettler processes various personal data. This includes, in particular, personal data:

that we receive in the context of our business relationships from customers, potential customers, interested parties, service providers, suppliers, business partners or other persons involved in the business relationship
the collection of which we are required to carry out by law or contract
that we collect when you use our website
that we receive from authorities and other third parties (address dealers, credit agencies)

Depending on the type of relationship, we process personal data about you such as:

Contact and identification data such as first name, last name, address, email address, telephone number
User account information such as username, password, user account number
Contract data such as type of contract, contract content, type of products and services, consumption groups, consumption types, forecast data, applicable general terms and conditions, contract start, contract duration, billing data
Financial data such as account information, payment information, payment history, average revenue, creditworthiness data, income, purchasing power
Metadata from telecommunications traffic such as telephone number, value-added service numbers, date, time and duration of the connection, type of connection, location data, IP address, device identification numbers such as MAC address
Interaction and usage data: correspondence, preferences and target group information, device type, device settings, operating system, software, information arising from the assertion of rights
Website information: IP address, cookie information, browser settings, frequency of visits to the website, duration of visits, search terms, clicks on content, referring website

3.2 Purposes for Which We Process Personal Data and Legal Basis
We use the personal data we collect primarily to conclude and process contracts with our customers and business partners.

We also rely on the processing of personal data for the procurement of products and services from our suppliers and subcontractors. If you work for a customer or business partner, you may also be affected by this processing in that function.

In addition, we process personal data about you and other persons, insofar as permitted and as we deem appropriate, also for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

Providing and developing our events, services and website and other platforms on which we are present
Communication and processing of inquiries (e.g. via contact forms, email, telephone, media inquiries)
Advertising and marketing (including organising events, competitions), insofar as you have consented to the use of your data / have not objected (if we send advertising to you as an existing customer, you may object at any time and we will then place you on a blacklist for further advertising mailings)
Market research, media monitoring
Assertion of legal claims and defence in connection with legal disputes and official proceedings
Prevention and investigation of criminal offences and other misconduct (e.g. internal investigations, data analyses to combat fraud)
Ensuring the operation of our business, in particular IT, our website and other platforms

If you have given us consent to process your personal data for specific purposes, we will process your personal data within the scope of and based on that consent, insofar as we have no other legal basis and we require such a basis. You may withdraw your consent at any time; however, this does not affect any processing that has already taken place. You may send your withdrawal by email or by post to the (email) address stated in section 1.1.

3.3 Third Parties to Whom We Disclose Personal Data
In the course of our business activities and for the purposes mentioned above, we may also disclose personal data to third parties where permitted and appropriate, either because they process it on our behalf (data processing by order) or because they wish to use it for their own purposes (data disclosure). This includes in particular:

Service providers, including processors
IT service operators (e.g. web hosting providers, email delivery service providers, online tools)
Suppliers
Companies of the hostettler group
Partners within the YAMAHA Switzerland distribution network
YAMAHA Motor Europe N.V.
Authorities
Insurance companies
Banks and payment service providers
Authorities and courts

Some recipients are located in Switzerland, others abroad. In particular, you must expect your data to be transferred to other countries in Europe and to the USA, where some of the IT service providers we use are located. If we transfer data to a country that does not have an adequate statutory level of data protection, we require the recipient to take appropriate measures to protect personal data (e.g. by agreeing to the EU standard contractual clauses, the current version available here, other safeguards, or based on legal justification grounds).

3.4 Duration of Data Processing
We process personal data for as long as it is necessary to fulfil our contractual obligations or otherwise for the purposes pursued with the processing, for example for the duration of the entire business relationship (from initiation to processing and termination of a contract) and beyond that in accordance with statutory retention and documentation obligations.

It is possible that personal data will be retained for the period during which claims may be asserted against us and insofar as we are otherwise legally obliged to do so or legitimate interests require it (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above purposes, it will generally be deleted or anonymised.

4 Visiting Our Website
As a rule, you can use our website without providing information about your person. Excluded from this are areas and services that naturally require your name, address, or other personal information, e.g. orders via our online shop.

4.1 Server Log Files
When you visit our website, our servers temporarily store every access in a log file, the so-called server log files.

These include, for example, your IP address, the date and time of your visit, the name of the file accessed, access status (successful, partial, unsuccessful etc.), the web browser and operating system used, and other similar information, which serve to defend against threats in the event of attacks on our IT systems.

Before we store your IP address, it is anonymised and is not combined with other data. No personal evaluation is carried out and no connection is made between your personal data in the server log files and any other personal data that may exist about you.

This processing is based on our legitimate interests and serves the purpose of correctly displaying our website and its content and services, ensuring traffic, optimising our website and offers, ensuring the stability and security of our systems, and enabling the investigation, defence and prosecution of cyberattacks, spam and other unlawful actions, as well as enforcing related claims.

We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection to provide the website, deletion takes place once the respective session ends.

For website hosting, we may use services from third parties in Switzerland and abroad, who carry out the above processing on our behalf.

4.2 Contact
On our website, you have the option to contact us by email or telephone. Your information will be stored for the purpose of processing your request, handling it, and for the case of follow-up questions, and will not be passed on to unauthorised third parties without your consent. This also applies to requests submitted by post.

You may object to this data processing at any time. Please send your objection to the email address specified in section 1.1 and we will review your request. In such a case, your contact request will not be processed any further.

Your personal data will be deleted as soon as the matter you requested has been resolved. This is the case when the circumstances indicate that the relevant matter has been conclusively clarified and no statutory retention obligations prevent deletion.

4.3 Cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your device (laptop, tablet, smartphone etc.) via your browser. They help make our website more user-friendly and effective and make your visit as pleasant as possible. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

Most of the cookies we use are so-called session cookies. These are automatically deleted when you log out or close your browser. Other cookies remain stored on your device beyond the respective usage process and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they are addressed separately in this privacy policy.

The legal basis for processing your personal data using cookies depends on whether we ask for your consent. If so, and you consent to the use of cookies, the legal basis is your consent. Otherwise, processing is based on our legitimate interests (e.g. to ensure the security of our website).

Regardless of whether processing is based on consent or legal authorisation, you can withdraw your consent at any time or object to the processing of your data via cookie technologies.

To manage cookies and similar technologies (tracking pixels, web beacons etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found here: https://devowl.io/de/rcb/datenverarbeitung.

You can change your cookie settings and preferences at any time and withdraw any consent given with effect for the future. To do so, open our cookie banner again and adjust the settings.

Alternatively, you can configure your browser so that it informs you about the setting of cookies and you allow cookies only in individual cases or exclude them entirely. However, please note that you may then not be able to use all functions of our website.

More detailed information about the cookies used, in particular their purposes, can be found in our cookie banner.

4.4 Google Services
Based on your consent, we use various services of Google LLC (USA) or, if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Ltd. (Ireland) (“Google”). For the processing of personal data when using “Google Maps”, Google LLC is always responsible. We use the following Google services on our websites:

Google Tag Manager
Google Analytics
Google Maps
Google Fonts

Further information about the individual services can be found below.

Google uses technologies such as cookies, browser web storage and tracking pixels that allow an analysis of your use of our website. The information generated may be transferred to a Google server in the USA or to other countries and stored there. Information on Google data centre locations can be found here.

We use tools provided by Google that, according to Google, may process personal data in countries where Google or its subcontractors have facilities. In its “Data Processing Addendum for Products where Google is a Data Processor”, Google promises an adequate level of data protection by relying on the EU standard contractual clauses.

Google is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Further information about processing by Google and privacy settings can be found in Google’s privacy policy and privacy settings.

You may withdraw your consent to the use of individual Google services on our website at any time with effect for the future by adjusting your selection accordingly in the cookie banner.

4.4.1 Google Tag Manager
Our website uses Google Tag Manager. Google Tag Manager enables efficient management of website tags. Website tags are placeholders embedded in the source code of a website to, for example, integrate frequently used website elements such as code for web analytics services. Google Tag Manager triggers other tags that may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags implemented via Google Tag Manager.

Further information can be found in the Google Tag Manager terms of use.

4.4.2 Google Analytics
For the purpose of analysing our website and its visitors and for marketing and advertising purposes, we use the web analytics service Google Analytics.

Google Analytics uses cookies stored on your device (laptop, tablet, smartphone etc.) that enable an analysis of your use of our website. This allows us to evaluate user behaviour and use statistics and reports to make our offer more attractive.

We use the User-ID function. With User-ID, we can assign one or more sessions (and activities within these sessions) a unique, permanent ID and analyse user behaviour across devices.

We use Google Signals. This collects additional information about users who have enabled personalised ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics, IP anonymisation is activated by default. This means that your IP address is shortened by Google within Switzerland or the EU/EEA before transmission. Only in exceptional cases is the full IP address transferred to a Google server and shortened there.

Google uses this information to evaluate your use of our website, compile reports on website activity, and provide other services related to website use and internet use. According to Google, the IP address transmitted by your browser is not merged with other Google data.

When visiting our website, your user behaviour is recorded as events (such as page views, interactions, or click path), as well as other data such as approximate location (country and city), technical information about your browser and devices, and the referrer URL (which website / advertising medium you came from).

The data collected via Google Analytics is automatically deleted after X months.

You can prevent the collection and transmission of data generated by cookies and related to your use of the website (including your IP address) to Google, as well as processing by Google, by installing the Google Analytics opt-out browser add-on. If you want to object to interest-based advertising by Google, you can use the settings and opt-out options provided by Google.

An overview of data usage in Google Analytics and measures taken by Google to protect your data can be found in Google Analytics help pages.

Further information on the terms of use of Google Analytics and Google’s data protection can be found in the respective documents.

4.4.3 Google Maps
We use Google Maps to integrate interactive maps on our website.

When you access a page on which Google Maps is embedded, Google Maps will set a cookie. This cookie is generally not deleted when you close the browser but expires after a certain period unless you delete it manually beforehand.

Using Google Maps may result in information about your use of our website (including your IP address) being transferred to a Google server in the USA and stored there. Google may store this data as user profiles for the purpose of tailoring services, advertising and market research. If you are logged into Google, your data will be assigned directly to your account. If you do not want this, you must log out beforehand.

If you do not agree with the processing of your information, you can deactivate Google Maps by disabling JavaScript in your browser. However, this may also affect other functions of our website.

Further information can be found in the Google Maps terms of use and Google’s privacy policy.

4.4.4 Google Fonts
To display our content correctly and in an appealing way across different browsers, we may use script and font libraries to display fonts. Google Fonts are transferred to your browser cache to prevent multiple loading. If your browser does not support Google Fonts or blocks access, our website content will be displayed in a standard font.

Accessing script or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible, although currently unclear if and for what purposes, that the operator (in this case Google) collects data.

We do not collect personal data through the integration of Google Fonts.

You can object to data processing by Google Fonts by disabling JavaScript execution in your browser or installing a JavaScript blocker. Please note that this may lead to limitations in the functionality of the website.

Further information about Google Fonts can be found in the Google Fonts FAQ and in Google’s privacy policy.

4.1 Meta Pixel
Based on your consent, we use Meta Pixel on our website if you have your habitual residence in the EEA or Switzerland. Meta Pixel is a service provided by Meta Platforms Ireland Ltd. (Ireland). The parent company is Meta Platforms Inc. (USA) (“Meta”). Instagram is also a Meta service.

Information generated by the Meta Pixel may be transferred to a Meta server in the USA and processed in countries where Meta or its subcontractors maintain facilities. According to Meta’s processing terms, the “Meta Data Transfer Addendum” applies for the transfer of European data. Meta promises to ensure an adequate level of data protection by relying on EU standard contractual clauses.

Meta is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Meta Pixel enables Meta to identify visitors to our online offers as a target audience for displaying ads (so-called “Facebook” or “Instagram Ads”). We therefore use Meta Pixel to show our ads only to users who have shown interest in our online offers or who have certain characteristics (e.g. interests in specific products based on visited pages), which we transmit to Meta (“Custom Audiences”).

We also use Meta Pixel to ensure that our Facebook and Instagram ads match users’ potential interests and are not intrusive. In addition, Meta Pixel helps us measure the effectiveness of ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking an ad (“conversions”).

We also use the additional feature “Automatic Advanced Matching”. In this context, data such as telephone numbers, email addresses, dates of birth or postcodes are sent to Meta in encrypted form, if you have provided these data to us. This allows us to increase the number of attributed conversions and expand our custom audiences. Further information can be found in Meta’s help section.

We also use the “Custom Audiences from File” method. This allows us to upload customer information such as email addresses, telephone numbers, and names in encrypted form to Meta. Meta can then determine whether someone should be added to our advertising audience. This helps ensure ads are shown only to users who may be interested in our information and services. Further information is available in Meta’s help section.

Meta processes data in accordance with its data policy, which also contains information about Facebook and Instagram ads.

Through the use of cookies, Meta may recognise you in the Facebook or Instagram member area and optimise ad performance, e.g. by providing ads tailored to target groups. This requires that you have a Facebook and/or Instagram account and are logged in. If you are not a member of Facebook or Instagram, you are not affected by this processing.

General information on Meta’s use of data, your rights and options to protect your privacy can be found in Meta’s data policy. Specific information and details about Meta Pixel and how it works can be found in Meta’s help centre.

If you want to object to Meta Pixel tracking and the use of your data for Facebook or Instagram ads, you can do so in the advertising settings of Facebook or the privacy settings of Instagram. You must be logged in for this.

If you do not have a Facebook or Instagram account, you can also object to cookies used for reach measurement and advertising via the opt-out pages of the Network Advertising Initiative and additionally on the US website YourAdChoices or the European website Your Online Choices.

You may withdraw your consent to the use of Meta Pixel and the use of your data for Facebook and Instagram advertising at any time with effect for the future by adjusting your selection accordingly in the cookie banner.

4.2 Social Media Presence
We maintain social media profiles on Facebook and Instagram.

The data you enter on our social media profiles is published by the social media platform and is never processed by us for other purposes. However, we reserve the right to delete content if necessary. We may communicate with you via the social media platform.

The legal basis is your and our legitimate interest in exchanging with each other in this way.

Please be aware that the operator of the social media platform uses web tracking methods. We have no influence over this tracking, and it may also take place regardless of whether you are logged in or registered.

Further details on data processing and your rights and settings options to protect your privacy, as well as your right to object to profiling by the provider, can be found in the privacy policy of the respective provider:

Facebook
Meta Platforms Inc. (USA) / Meta Platforms Ireland Ltd. (Ireland)
Privacy policy

Instagram
Meta Platforms Inc. (USA) / Meta Platforms Ireland Ltd. (Ireland)
Data policy

4.3 Links to Third-Party Websites
Some links on this website lead to third-party websites. These are no longer under hostettler’s control. hostettler therefore assumes no responsibility for the accuracy, completeness or legality of the content and linking on such websites or any offers, products or services contained there. Use of linked websites is at your own responsibility.

4.4 Photos and Videos
Please note that photos and/or video recordings are taken at our events to document and promote the events, including for printed products (e.g. brochures) and on our digital channels (e.g. website, social media).

By participating in one of our events, you acknowledge that you may be captured in recordings of the event atmosphere or situation as an incidental element. If you do not wish to be photographed or filmed, please inform the photographer or camera team immediately on site.

You also have the right to request the later removal of a photo or video if you find it on our website or in other media and do not agree with its publication, insofar as this is technically possible. Please contact us at the email address mentioned in section 1.1.

Please note: For technical reasons, it cannot be excluded that photos or videos may be redistributed by third parties, in whole or in part, via websites (downloads, screenshots etc.).

5 Data Security
We implement technical and organisational security measures to protect your personal data against manipulation, loss, destruction, or access by unauthorised persons.

Our security measures also include encryption of your personal data. All information you enter online is transmitted via an encrypted transmission path. This ensures that it cannot be viewed by unauthorised third parties at any time.

Our security measures are continuously improved in line with technological developments.

Our employees and commissioned service providers are obliged to maintain confidentiality and comply with data protection regulations. Access to your personal data is only granted to the extent necessary.

6 Your Rights
You generally have the right to access, rectification, deletion, restriction, data portability, objection to processing, and withdrawal of consent with regard to your personal data.

However, please note that we reserve the right to invoke statutory restrictions, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (where we may rely on this), or require it to assert claims.

Please note that exercising these rights may conflict with contractual arrangements and may have consequences such as early termination of the contract or resulting costs. We will inform you in advance if this is not already regulated contractually.

If you believe that the processing of your personal data violates data protection law, or that your data protection rights have otherwise been violated, you may also file a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

Exercising your rights generally requires that you clearly prove your identity (e.g. by providing a copy of an identity document, if your identity is otherwise unclear or cannot be verified). To assert your rights, please contact us at the email address specified in section 1.1.