Data privacy statement
This privacy policy applies to Zürichsee-Schifffahrtsgesellschaft AG (ZSG), Mythenquai 333, 8038 Zurich, www.zsg.ch.
With this data protection declaration, we inform you about what data we process from you, what we need this data for and how you can object to the collection of data.
Customer promise
The public transport companies handle your data confidentially.
The protection of your personality and your privacy is an important concern for us, the public transport companies. We guarantee that your personal data will be processed in accordance with the applicable provisions of data protection law.
With the following principles, the public transport companies set an example for the trustworthy handling of your data:
You decide how your personal data is processed.
Within the legal framework, you can refuse data processing or revoke your consent or have your data deleted at any time. You always have the option of traveling anonymously, i.e. without your personal data being recorded.
We offer you added value when processing your data.
Public transport companies use your personal data to offer you added value along the mobility chain (e.g. customized offers and information, support or compensation in the event of disruption). Your data will therefore only be used for the development, provision, optimization and evaluation of our services or for the maintenance of the customer relationship.
Your data will not be sold.
Your data will only be disclosed to selected third parties listed in this privacy policy and only for the purposes explicitly stated. If we commission third parties to process data, they are contractually obliged to comply with our data protection standards.
Below you will find detailed information on how we handle your data.
Table of contents
- Who is responsible for data processing?
- Why do we collect personal data?
- What data is stored and what it is used for?
- Wie lange werden Ihre Daten aufbewahrt?
- Wo werden die Daten gespeichert?
- Welche Daten werden im Zusammenhang mit dem Marketing bearbeitet?
- Welche Rechte haben Sie in Bezug auf Ihre Personendaten?
- Was bedeutet die «gemeinsame Verantwortung»?
- Werden Ihre Daten an Dritte weitergegeben
- Wie werden Tracking Tools eingesetzt?
- Was sind Cookies und wann werden sie eingesetzt?
- Was sind Social Plug-ins und wie werden sie verwendet?
- Anzeigen von Werbung auf unseren Internetseiten und in unseren Apps.
- Datensicherheit.
- Änderungen dieser Datenschutzerklärung.
Who is responsible for data processing?
If you purchase public transport tickets or tickets for adventure boats from ZSG, we are responsible for all data processed in the process. As a public transport company, we are required by law to operate so-called direct services (NDV). For this purpose, certain data is exchanged within the transport companies (TU) and public transport associations as well as with third parties that broker public transport services, and stored centrally in databases operated jointly by all transport companies and public transport associations. We are therefore responsible for individual data processing together with these transport companies and associations. Further information on the individual data processing operations can be found in the section «What does joint responsibility in public transport mean?».
If you have any questions or suggestions regarding data protection, you can contact us at any time at the following address:
Zürichsee-Schifffahrtsgesellschaft AG (ZSG)
Roman Knecht
Mythenquai 333
8038 Wollishofen
ahoi@zsg.ch
Why do we collect personal data?
We are aware of how important it is for you to handle your personal data with care. All data processing is only carried out for specific purposes. These may arise, for example, from technical necessity, contractual requirements, legal regulations, overriding interest, i.e. for legitimate reasons, or from your express consent. We collect, store and process personal data to the extent necessary, for example to manage the customer relationship, distribute our products and provide our services, process orders and contracts, make sales and issue invoices, answer questions and concerns, provide information about our products and services and market them, provide support in technical matters and evaluate and further develop services and products. For more detailed information on which data is processed for which purposes, please read the following sections.
What data is stored and what it is used for
– When using the website www.zsg.ch
When you visit our website, the servers of our hosting provider temporarily store every access in a log file. The following technical data is collected:
- IP address of the requesting computer
- Date and time of access
- Website from which the access was made, if applicable with the search term used
- Name and URL of the retrieved file
- Search queries carried out (timetable, general search function on the website, products, etc.)
- the operating system of your computer (provided by the user agent)
- Browser used by you (provided by the user agent)
- Device type in the case of access via mobile phones
- transmission protocol used
The collection and processing of this data is used for system security and stability and for error and performance analysis as well as for internal statistical purposes and enables us to optimise our website. It also allows us to customise our website for specific target groups, i.e. to provide you with targeted content or information that may be of interest to you.
The IP address is also used to preset the language of the website. In addition, it is analysed together with other data in the event of attacks on the network infrastructure or other unauthorised or abusive use of the website for clarification and defence purposes and, if necessary, used in the context of criminal proceedings to identify and take civil and criminal action against the users concerned.
Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. You can find more information on this in the sections on cookies, tracking tools, adverts and social plug-ins in this privacy policy.
Insofar as the EU GDPR is applicable, our legitimate interest forms the legal basis for this processing of personal data.
In the case of third-party websites linked to our website, we assume no liability for compliance with data protection regulations.
– When using the contact form on the ZSG website
You have the option of using a contact form to get in touch with us. It is mandatory to enter the following personal data:
- Name and first name
- Email adress
We only use this and other voluntarily entered data (such as title, address, telephone number and company) to answer your contact enquiry in the best possible and personalised way. Any voluntary information about how you became aware of our offer will also be used for internal statistical purposes.
Insofar as the EU GDPR is applicable, our legitimate interest and the necessity for contract fulfilment form the legal basis for this processing of personal data
– When registering at www.zsg.ch or reservation.zsg.ch
As part of the ordering process, you have the option of registering for a customer account. We collect the following personal data, whereby mandatory information for opening a customer account is marked with an asterisk (*):
- Email adress (*)
- Password (*)
- Acceptance of the terms and conditions (*)
We collect this information to provide you with an overview of your orders and the contracts concluded with you in this context.
We collect this information to provide you with an overview of your orders and the contracts concluded with you in this context. In this respect, this is data processing for which you have given us your consent. This is the legal basis for data processing. You can revoke your consent at any time with effect for the future (see section 2.8). If you link your customer account with a SwissPass account, changes to your personal data (e.g. change of address) and the services purchased are automatically synchronised and recorded in both accounts. Please also note the following information on data processing in connection with your SwissPass account.
– Newsletter ZSG
If you register to receive the VBZ newsletter, the Genusslinie or for jobs, the following data will be processed for the purpose of sending you the newsletter:
- Name and first name
- Emailadress
We use your data exclusively for sending the newsletter.
Your data will be deleted as soon as you unsubscribe from the newsletter. You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your wish to do so using the contact option provided at the end of this privacy policy.
– When ordering from our webshop
When ordering souvenirs or vouchers via our webshop, you must provide the following data to process the purchase:
- Name and first name
- Adress (street, postal code, city and country)
- Email adress
- Payment information
- Phone number (optional)
We collect, process and use your personal data exclusively for the processing of the purchase, including any subsequent warranty claims.
We store personal data for as long as is necessary for processing the purchase in the VBZ webshop, but for no longer than 10 years after the purchase has been completed.
– Ticket purchase Unique Cruises
When ordering souvenirs or vouchers via our webshop, you must provide the following data to process the purchase:
- Name and first name
- Adress (street, postal code, city and country)
- Email adress
- Payment information
- Phone number (optional)
We collect, process and use your personal data exclusively for the processing of the purchase and the journey, the dispatch of tickets, customer information in the event of cancellation of the event and as a means of contact in the event of late arrival.
We store personal data for as long as is necessary to process the purchase, but for no longer than 10 years after the journey has been completed.
– Lost and found
If you have lost or found something and call the lost property office, we will process the following data from you.
- Name and first name
- Adress (street, postal code, city and country)
- Email adress
- Payment information
- Phone number (optional)
- Type of lost item and date, time and place of loss
– Social Media
We maintain a Facebook fan page, an Instagram and a Twitter account to communicate important information and interact with our customers. We comply with data protection regulations on our social media channels. We process all data voluntarily provided by customers (e.g. comments, photos or messages) in order to respond to your request.
We have no control over how the operators of the platforms (Facebook, Twitter and Instagram) handle your data. We therefore ask you to observe the following data protection declarations:
How long weil your data be stored?
We only store personal data for as long as is necessary,
- to provide services that you have requested or for which you have given your consent, to the extent specified in this privacy policy.
- to use the tracking services mentioned in this privacy policy within the scope of our legitimate interest.
We retain contractual data for as long as required by statutory retention obligations. Retention obligations that oblige us to retain data result from accounting and tax regulations. If we no longer need this data to provide the services for you, the data will be blocked. This means that the data may then only be used to fulfil our retention obligations.
Where is the data stored?
Your data is generally stored in databases within Switzerland. In some cases listed in this privacy policy, however, the data will also be passed on to third parties based outside Switzerland. If the country in question does not have an adequate level of data protection, we ensure through contractual arrangements with these companies that your data is adequately protected by these companies.
What data is processed in connection with marketing?
If you consent, we will use your customer data (name, gender, date of birth, address, customer number, e-mail address), your performance data (data on services purchased such as season tickets or individual tickets) and your click behaviour on our websites or in e-mails that you have received from us for marketing purposes. With regard to the evaluation of click behaviour, please also note the section on tracking tools.
Please also note the information on the right to object to the analysis of click behaviour in the section on tracking tools.
What rights do you have in relation to your personal data?
You have the following rights in relation to your personal data:
- You can request information about your stored personal data.
- You can request that your personal data be corrected, supplemented, blocked or deleted. Blocking takes the place of erasure if there are legal obstacles to erasure (e.g. statutory retention obligations).
- If you have set up a customer account, you can delete it or have it deleted.
- You can object to the use of your data for marketing purposes.
- You can revoke your consent at any time with effect for the future.
- You can request the transfer of your data.
To exercise your rights, simply send a letter by post to:
Zürichsee-Schifffahrtsgesellschaft AG (ZSG)
Roman Knecht
Mythenquai 333
8038 Wollishofen
ahoi@zsg.ch
If you would like information or deletion of your personal data under public transport data protection law, you can contact SBB in writing. The request for information or deletion should be sent to the following address: SBB AG, Legal & Compliance, Data Protection Office, Hilfikerstrasse 1, 3000 Bern 65.
You also have the right to lodge a complaint with a data protection authority at any time.
What does «joint responsibility» in public transport mean?
ZSG is responsible for processing your data. As a public transport company, we are obliged by law to provide transport services together with other transport companies and associations (‘direct transport’, Art. 16 and 17 of the Passenger Transport Act). In order to make this possible, data that originates from contacting you or from your purchased services, for example, is passed on at national level within the National Direct Transport (NDV), an association of over 240 transport companies (TU) and public transport networks. The individual transport companies and networks are listed here.
The data is stored in the central database NOVA (network-wide public transport connection), which is managed by SBB on behalf of the NDV and for which we are responsible together with the other companies and associations of the NDV. NOVA is a technical platform for the sale of public transport services. It contains all the central elements for the sale of public transport services, such as the customer database. The scope of access to the shared databases by the individual transport companies and associations is governed by a joint agreement. The forwarding of data and its processing by the transport companies and associations in connection with centralised storage is limited to the following purposes:
– Provision of the transport service
To ensure that your journey runs smoothly, your travel and purchase details are forwarded within the NDV.
– Contract processing
We process this data for the establishment, administration and processing of contractual relationships.
– Maintaining customer relations and support
We process your data for purposes related to communication with you, in particular to respond to enquiries and assert your rights and to identify and provide you with the best possible support in the event of concerns or difficulties across the entire public transport network, as well as to process any claims for compensation.
– Ticket control and revenue protection
Customer and season ticket data is required and processed to secure revenue (checking the validity of travelcards or discount cards, debt collection, combating abuse).
Incidents of travelling without a valid or partially valid ticket can be recorded via the national fare evasion register.
– Revenue distribution
The Alliance SwissPass office, managed by ch-integral, fulfils the legal mandate defined in the Swiss Passenger Transport Act to collect travel data for the correct distribution of revenue. The office acts as the mandate holder for revenue distribution in national direct transport on behalf of the companies that are members of the NDV.
– Identification as part of the authentication of the SwissPass login (SSO)
For services that you purchase using the SwissPass login, the data is then stored in the central customer database (NOVA). To enable single sign-on (SSO) (one login for all applications that offer use of their services with the SwissPass login), the aforementioned login, card, customer and service data are also exchanged between the SwissPass central login infrastructure and us as part of the authentication process.
– Joint marketing and market research activities
In addition, the data collected when purchasing public transport services is also processed for marketing purposes in certain cases. If you have given your consent and your data is processed or you are contacted for this purpose, this will generally only be carried out by the transport company or association from which you purchased the corresponding public transport service. Processing or contacting by the other transport companies and networks participating in the NDV will only take place in exceptional cases and under strict conditions, and only if the evaluation of the data shows that a particular public transport service could provide added value for you as a customer. An exception to this is processing and contacting by SBB. SBB manages the marketing mandate for NDV services (e.g. GA travelcard and Half-Fare travelcard) on behalf of NDV and can contact you regularly in this role. We also process your data for market research, to improve our services and for product development.
– Further development of public transport systems with anonymous data
We analyse your data anonymously in order to be able to further develop the overall public transport system in line with your needs.
– Client information
For group trips, we will inform you via SMS about your group reservation and any delays or cancellations. You can decide for yourself whether you would like to receive these notifications when you book a group trip.
Is your data passed on to third parties?
Your data will not be resold by us. Your personal data will then only be passed on to selected service providers and only to the extent necessary for the provision of the service. These are IT support service providers, issuers of subscription cards, shipping service providers (such as Swiss Post), service providers who are commissioned to allocate transport revenue to the participating transport companies (in particular in the course of creating so-called distribution keys in accordance with the Swiss Passenger Transport Act), our hosting provider (see section ‘Use of website’) and the providers mentioned in the sections on tracking tools, social plug-ins and advertisements. With regard to service providers based abroad, please also note the information in the section ‘Where is your data stored’.
In addition, your data may be passed on if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from the relationship with you.
Our legitimate interest forms the legal basis for the data processing mentioned here.
Your personal data will not be disclosed to other third parties outside the public transport sector. The only exceptions (to the extent described below) are SwissPass partners and companies that have been authorised by the public transport companies to broker public transport services on the basis of a contractual agreement. These intermediaries will only receive access to your personal data if you wish to obtain a public transport service through them and have given them your consent for access. Even in this case, they will only have access to your data to the extent necessary to determine whether you already have tickets or travelcards for the planned travel period that are relevant to your journey and the service you require from the third party. The legal basis for this data processing is therefore your consent. You can withdraw your consent at any time with effect for the future (see section 2.8).
If you use offers from a SwissPass partner using your SwissPass, data about any services you have purchased from us (e.g. a GA travelcard, Half-Fare travelcard or regional railcard) may be transmitted to the SwissPass partners in order to check whether you can benefit from a specific offer from the SwissPass partner (e.g. discount for GA travelcard holders). In the event of loss, theft, misuse, forgery or replacement of a card after the purchase of a service, the partner concerned will be informed. This data processing is necessary for the fulfilment of the contract for the use of the SwissPass and is therefore based on this legal basis. Further information can be found in the privacy policy on swisspass.ch and the privacy policy of the respective SwissPass partner.
How are tracking tools used?
We use the web analysis services of Google (Alphabet Inc.) for the purpose of demand-oriented design and continuous optimisation of our websites, apps and emails. Our legitimate interest forms the legal basis for the data processing described below.
– Tracking auf Internetseiten
We use the web analysis services of Google (Alphabet Inc.) for the purpose of demand-oriented design and continuous optimisation of our websites, apps and emails. Our legitimate interest forms the legal basis for the data processing described below.
- Navigation path that a visitor takes on the website
- Time spent on the website or subpage
- Subpage on which the website is left
- Country, region or city from where access is made
- End device (type, version, colour depth, resolution, width and height of the browser window)
- Returning or new visitor
- Browser type/version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server enquiry
The information is used to analyse the use of the website.
– Tracking when sending e-mails
When sending e-mails, we use e-mail marketing services from third parties. Our emails may therefore contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1×1 pixel, invisible graphic that is associated with the user ID of the respective email subscriber.
For each newsletter sent, there is information on the address file used, the subject and the number of newsletters sent. It is also possible to see which addresses have not yet received the newsletter, to which addresses the newsletter has been sent and which addresses have failed to receive the newsletter. In addition, the opening rate, including information on which addresses have opened the newsletter and which addresses have unsubscribed from the newsletter mailing list, can usually be discussed.
The use of corresponding services makes it possible to analyse the information listed above. In addition, click behaviour can also be recorded and evaluated. We use this data for statistical purposes and to optimise the content of our news. This enables us to better tailor the information and offers in our emails to the individual interests of the respective recipient. The tracking pixel is deleted when you delete the email.
If you would like to prevent the use of the web beacon in our emails, please set your email programme so that no HTML is displayed in messages, if this is not already the case by default.
The information is used to analyse the use of the website.
– Google Analytics
Unsere Internetseite nutzt Google Analytics, einen Webanalysedienst der Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA respektive der Google Iland Limited, Gordon House Barrow St, Dublin 4, Irland. Google Analytics verwendet Methoden, die eine Analyse der Nutzung der Internetseite ermöglichen, wie zum Beispiel Cookies (siehe unten «Was sind Cookies und wann werden sie eingesetzt?»). Die durch ein Cookie erzeugten Informationen über Ihre Nutzung dieser Internetseite, wie oben aufgeführt, werden an Server von Google, einem Unternehmen der Holding Gesellschaft Alphabet Inc., in die USA übertragen und dort gespeichert. Dabei wird die IP-Adresse durch die Aktivierung der IP-Anonymisierung («anonymizeIP») auf dieser Internetseite vor der Übermittlung innerhalb der Mitgliedsstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum beziehungsweise der Schweiz gekürzt. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte anonymisierte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. In diesen Fällen stellen wir durch vertragliche Garantien sicher, dass Google ein ausreichendes Datenschutzniveau einhält.
The information is used to analyse the use of the website, to compile reports on the activities on the website and to provide further services associated with the use of the website and the Internet for the purposes of market research and the needs-based design of the website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. According to Google, under no circumstances will the IP address be associated with other data relating to the user.
Users can prevent Google from collecting the data generated by the cookie and relating to the use of the website by the user concerned (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
What are cookies and when are they used?
Cookies are small files that are stored on your computer or mobile device when you visit or use one of our websites. Cookies store certain settings about your browser and data about the exchange with the website via your browser. When a cookie is activated, it can be assigned an identification number that identifies your browser and allows the information contained in the cookie to be utilised. You can set your browser so that a warning appears on the screen before a cookie is saved. You can also choose not to take advantage of personal cookies. Certain services cannot be used in this case.
We use cookies to carry out an evaluation of general user behaviour. The aim is to optimise our digital presence. These should be made easier to use and the content more intuitive to find. They should be organised and structured in a more comprehensible way. It is important to us to make the digital presence user-friendly in line with your needs. This enables us to optimise the website by providing targeted content or information on the website that may be of interest to you.
Most web browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies:
If you deactivate cookies, you may not be able to use all the functions of our website. Our legitimate interest forms the legal basis for the data processing described.
What are social plug-ins and how are they used?
You can use the social plug-ins listed below on our website:
- Facebook; Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
- Instagram, Instagram Inc. (Kalifornien, USA)
- YouTube, YouTube LLC (Kalifornien, USA)
- LinkedIn, LinkedIn Inc. (Kalifornien, USA)
Social plug-ins are used to make our website more personalised. The plug-ins are deactivated on our website by default and therefore do not send any data to the social networks. You can activate all plug-ins by clicking on the ‘Activate social media’ button (so-called 2-click solution). The plug-ins can of course be deactivated again with one click.
If the plug-ins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you visit our website. The content of the plug-in is transmitted directly from the social network to your browser, which integrates it into the website.
By integrating the plug-ins, the respective provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted directly from your browser to a server of the provider (usually in the USA) and stored there. We therefore have no influence on the scope of the data that the provider collects with the plug-in.
If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plug-ins, the corresponding information is also transmitted directly to a server of the provider via the social network.
Displaying advertising on our websites and in our apps.
We use third-party providers (ad servers) to display advertisements on our websites and in our apps. When a user visits our websites and apps, a request is sent to the ad server when the page is loaded. To ensure that advertisements for products and services that interest you or are more relevant to you are displayed, we share the following information with the ad server as part of the request:
- Profile data (age, place of residence, and gender)
- Travel data (departure location, departure time, departure date, departure day of the week, arrival location, arrival time, arrival date, arrival day of the week, travel class)
- Approximate GPS coordinates
- Unique User ID (for the use of ad frequency, post-click tracking, and cookie targeting)
- IP adress
- Browser- und Betriebssysteminformationen
- Device manufacturer and device model
The ad server checks for each ad-hoc request whether a suitable campaign is available and then delivers specific, non-specific, or no ads at all, depending on the load and randomly. No historical data is collected, nor are names, phone numbers, or email addresses shared. The information listed above is never transmitted to the advertiser but is used solely for the one-time delivery of ads and is not stored for further use. In the app settings, under “Additional Settings,” you can control the display of advertisements. The described data processing is based on our legitimate interest as the legal basis.
Data security
We employ appropriate technical and organizational security measures to protect your personal data stored with us from manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We also take internal company data protection very seriously. Our employees and the external service providers we commission are obligated to maintain confidentiality and comply with data protection regulations.
We take reasonable precautions to protect your data. However, transmitting information over the internet and other electronic means always carries certain security risks, and we cannot guarantee the security of information transmitted in this way.
Last update: September 2024
Kontakt
Zürichsee-Schifffahrtsgesellschaft AG (ZSG)
Braucht es hier noch einen kleinen Text? Lorem ipsum Lorem ipsum Lorem ipsum Lorem ipsum Lorem ipsum Lorem ipsum .
