Privacy policy

1. Controller

The controller for the processing of personal data via this website is:

Company

Santec Systems AG

Address

Weihermattstrasse 86, CH-5000 Aarau, Switzerland

Email

info@santec-ag.ch

Phone

+41 62 822 78 78

For questions about data protection, please contact us at the address above. There is no statutory obligation for us to appoint a data protection officer.

2. Legal basis

We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP). Where the EU General Data Protection Regulation (GDPR) applies — for instance to visitors from the EEA — we also comply with its requirements.

We only process data that we need to operate the website and the configurator (section 6), answer enquiries and run application procedures. We do not sell personal data and we do not carry out profiling for advertising purposes.

3. Visiting the website

Each time you visit, your browser transmits technical information to our server. This arises for operational reasons and is required to deliver the pages:

• IP address of the requesting device
• date and time of access
• address requested and volume of data transferred
• browser type, operating system and referring page

The forms on this website are rate-limited against abuse: your IP address is counted in memory for 60 seconds for this purpose and then discarded. No lasting analysis of user behaviour takes place on this website; for the configurator, see section 6.

4. Contact and callback forms

If you write to us using the contact form, the message window or the callback request, we process the data you provide: first name and surname, email address, telephone number and your message.

This information is delivered as an email to a Santec Systems AG mailbox and retained there for as long as handling your enquiry and any statutory retention obligations require. Delivery is handled via Microsoft 365 (Microsoft Graph), see section 8.

5. Job applications

Through the application form you can send us your name, email address, telephone number, a LinkedIn profile, a message and file attachments such as a CV, references and diplomas.

We use this data solely for the application procedure concerned. It is passed to the responsible people in management and human resources. If no employment relationship arises, we delete the documents once the procedure is complete — unless you expressly agree to longer retention for future positions.

To make typing easier, the form queries company names from the Swiss commercial register (Zefix). The search term you enter is transmitted to the federal Zefix service.

6. Configurator

At konfig.santec-ag.ch we operate an online configurator for track lighting systems. It runs on a server of Santec Systems AG, and this privacy policy applies to it as well. In addition to the technical information described in section 3, we process the following there:

• Requests: the details entered in the request form (company, first and last name, project reference, email address, phone number, remarks), your plan with its bill of materials and — if you imported one — the floor plan. The request is stored on our server. You receive a confirmation by email, and our mailbox receives a notification of the new request; both are sent via Microsoft 365 (see section 8). To prepare a quotation, we transfer the details to our enterprise resource planning system (plentymarkets by plentysystems AG, Germany). We keep requests for as long as handling them and statutory retention obligations require.
• Signing in with your shop account: your email address and password are passed to our online shop for verification and are not stored in the configurator. Once signed in, you see the bill of materials and the prices of your customer class. A request then takes company, name, email address and phone number from your customer account and is linked to it.
• Shared plans: anyone who shares a plan receives a short link. For this we store the plan (tracks, parts and their arrangement) on our server without any details about you; it is kept so that the link continues to work.
• Access log: while the configurator is open and you are working with it, the page reports to our server about every 30 seconds. We store your IP address, date and time, the duration of active use, browser and operating system, the address of the referring website, the configurator pages you open and the actions you trigger there: sharing a plan and how, opening a shared plan, AR view, bill of materials, request, signing in and out including failed sign-in attempts. If you are signed in with your shop account, we assign the IP address to that account (customer number and name); one account can therefore have several IP addresses. Nothing is stored on your device for this log.

The access log serves to analyse and improve the use of the configurator, to support signed-in customers with their plans and requests, and to detect misuse such as repeated failed sign-ins. We base this processing on our legitimate interest. Only a few authorised employees can view it, and the view is additionally protected by a separate password. Entries, including the assignment of IP addresses to customer accounts, are deleted automatically after 90 days.

The configurator only sets technically necessary cookies: one for signing in with your shop account (valid for 12 hours), one that remembers that you no longer want to see the planning hints (valid for 1 year) and — for employees only — cookies for the internal administration area.

On Android devices, the AR view opens the Google Scene Viewer app (Google Ireland Limited). For this we briefly make the 3D model of your plan available on our server, from where the app retrieves it. The model contains no details about you and is deleted after two hours at the latest.

7. Cookies

This website sets no cookies for advertising, reach measurement or analytics. Only technically necessary cookies are used:

• Language choice: stores the selected language (German, English, French) so that the site appears in the same language on your next visit. Lifetime around 400 days.
• Login: only in the internal editorial area at /login. This cookie maintains the session of logged-in employees and is deleted on sign-out.

You can delete or block cookies in your browser at any time. The language will then be determined afresh on each visit.

8. Third-party services

We use the following services to operate this website. Technical information, in particular your IP address, may reach the respective provider:

• Microsoft 365 / Microsoft Graph (Microsoft Corporation): delivery of form and application emails to our mailboxes.
• Google reCAPTCHA (Google Ireland Limited): protects the forms against automated abuse. Google receives information about your device and your behaviour on the form page.
• Google Maps (Google Ireland Limited): embedded maps of our locations on the Contact and About pages. The map loads only when the relevant page is opened.
• plentyONE (plentysystems AG, Germany): product images, data sheets, installation instructions and photometric files are loaded from the plentyONE content network.
• unpkg (Cloudflare, Inc.): delivery of the software library for the 3D view of luminaires.
• Zefix (Swiss Federal Office of Justice): company search in the application form.

We embed no advertising networks, no social media tracking pixels and no analytics tools such as Google Analytics.

9. Disclosure abroad

The services named in sections 6 and 8 may transfer data to countries outside Switzerland and the EEA, in particular to the United States. We base such transfers on the European Commission’s standard contractual clauses and on the safeguards recognised by the Swiss Federal Data Protection and Information Commissioner.

10. Data security

The website is delivered exclusively over an encrypted connection (HTTPS). Only those employees who need it for their work have access to data submitted through forms. We take appropriate technical and organisational measures against loss, misuse and unauthorised access.

11. Your rights

Within the scope of applicable law you have the right:

• to request information about the personal data we process
• to have inaccurate data corrected
• to request deletion of your data, unless a retention obligation prevents it
• to object to the processing
• to request your data in a common format
• to withdraw consent you have given at any time

Please contact info@santec-ag.ch for this. We may request proof in order to verify your identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

12. Changes

We adapt this privacy policy when the processing of personal data or the services used change. The version published on this page at the time applies.