Privacy and data protection policy

1. Introduction

This privacy and data protection policy describes the rules applicable to information processed by Indigo Suisse SA, a limited company incorporated under Swiss law, having its registered office at rue de Genève 31, CH-1003 Lausanne, identification number CHE-376.721.926 (hereinafter referred to as the “Company”), in its capacity as data controller.

Use of the https://www.park-indigo.ch/ website (hereinafter referred to as the “Site”) requires acceptance by the user (hereinafter referred to as the “User”) of this Privacy Policy and the Cookie Policy.

This Policy sets out how we process personal data collected by the Company. The User is invited to read this document carefully in order to know and understand our practices regarding the processing of the User’s personal data by the Company.

 

2. Data controller

The data controller is Indigo Suisse SA, rue de Genève 31, 1003 Lausanne, Switzerland.

Tel. : +41 21 329 0616

Email : indigo.dpo.ch@group-indigo.com

The representative of the data controller in the European Union is: Ronan Pichard.

 

3. Glossary

Cookies: A cookie is a small text file containing information that is downloaded to the User’s computer or mobile device when he or she consults a website or mobile application; they are used to recognize the User’s terminal when he or she accesses a previously used website or application again.

Personal Data: means any information relating to an identified or identifiable natural person.

Partners: Refers to service providers and subcontractors involved in the provision of the Service.

Social Networks: refers to the social networks on which we are present, namely : Twitter, Facebook, Instagram, LinkedIn.

Services: refers to the services marketed by the Company and available on the Site.

Site: refers to the Internet site published by the Company and available at the following address: https://ch.parkindigo.com/

Terminal: refers to the hardware equipment (computer, smartphone, tablet, etc.) that you use to consult or view the Site.

 

4. Protection of your Personal Data

4.1 What Personal Data do we collect?

We may collect the following information about you:

4.1.1 Data that you voluntarily communicate to us as part of our Services

We collect the Personal Data that you voluntarily communicate to us via a contact form or collection form on the Site, prior to or as part of the execution of the Services (for example, the purchase of a subscription). This includes the following data (mandatory data on the form concerned is followed by an asterisk (*)):

  • Full name (*)
  • Company name (*)
  • Email address (*)
  • Postal address (*)
  • Telephone (*)
  • Vehicle registration (*)
  • Message for our attention

The compulsory or optional nature of the Data you provide us with is also indicated at the time of collection by an asterisk (*).

4.1.2 Personal Data that we automatically collect when you use our Services and purchase services

We also collect and process the following Personal Data relating to the execution of the contract, the follow-up of the customer relationship, the transactions carried out and the payment of our invoices:

  • Transaction number
  • Type of service
  • Price
  • Place, date and time of purchase
  • Terms of payment
  • Unpaid balances (apparent in invoices)

4.1.3. Personal Data that we collect automatically when you use the Site

When you use our Site, our access provider’s servers temporarily record each session in a log file. The following technical data is collected.

  • IP address of requesting computer
  • Access date and time
  • Internet page that immediately preceded the connection and, if applicable, the keyword searched.
  • Name and URL of consulted file
  • Searches performed (schedule, general site search function, products, etc.)
  • Your computer’s operating system (provided by the user agent)
  • Browser used (provided by user agent)
  • Device type for cell phone access
  • Transfer protocol used

4.1.4 Personal data we automatically collect when you use our car parks

Indigo processes personal data when a customer enters car park and his or her license plate is read and associated with a parking ticket (hourly customers), or with a means of access (subscriber customers).

This process optimizes the management of hourly customers by associating the license plate with the parking ticket (determination of parking time, particularly in the event of lost or stolen ticket).

For subscribers, the combination of license plate and means of access (usually a badge) ensures contactless entry and exit. For this category of customer, the legal basis for processing personal data from license plate reading is the performance of the rental contract, and ensures access to our car parks in accordance with the applicable conditions of use.

License plate data is stored for 24 hours, then anonymized in a short cycle (entry with exit) or for a maximum of 31 days in the case of a short cycle (entry without exit). Subscriber data is retained for 6 months.

We would also like to inform you that all our car parks are under video surveillance to protect people and property.

4.2 Data sent to us by our Partners

We may receive Personal Information about you from our Partners.

4.3 Other Personal Data processing frameworks

We also collect and process the necessary Personal Data:

  • loyalty-building, prospecting, research, surveys and promotional activities,
  • the organization and smooth running of games, lotteries and other commercial and promotional operations, such as the date of participation, the answers provided and the nature of the prizes offered.

5. What do we use your Personal Data for?

Your Personal Data is collected and processed to enable you to access and use the Services.

It is also processed for the following purposes:

  • managing your requests to exercise your rights as described below;
  • performance of the Service and management of commercial relations, customer service, etc;
  • the management of your messages on our Site, as well as on our pages hosted on the Social Networks;
  • verification of transactions and, more generally, the fight against fraud;
  • management of overdue payments and litigation ;
  • personal safety and the protection of property and installations (e.g. vandalism) and the prosecution of abuses (e.g. unpaid parking).
  • the organization of competitions, commercial lotteries or other promotional operations;
  • studies, surveys, loyalty-building, prospecting and sales promotion campaigns;
  • statistics, analyses and marketing/sales studies;
  • carrying out commercial solicitation and prospecting operations;
  • performing technical operations on our databases (qualification, enrichment, de-duplication, etc.).

6. What are the legal bases for processing Personal Data?

We process your Personal Data for the aforementioned purposes, depending on the situation, based on the following legal bases:

  • The processing of Personal Data is necessary for the performance of a contract with you;
  • You have given your consent to the processing of your Personal Data;
  • The processing of Personal Data is necessary for the performance of a legal obligation; or
  • We have a legitimate interest in processing the Personal Data we collect in order to achieve the purposes described in Article 5 above.

7. Retention of Personal Data

We only process and store your Personal Data for as long as is necessary for the purpose of the processing in question or if there is another legal basis (e.g. legal retention periods).

Personal data relating to the management of our contractual relationship will thus be kept for ten years from the end of the contract, which corresponds to the legal limitation period. In the event of legal proceedings, data will be kept for the duration of the proceedings.

Personal data relating to prospective customers is kept for three years from the date of collection and your consent. At the end of this period, the Company may contact you again to find out whether you wish to continue receiving commercial solicitations. Failing this, we will irreversibly delete or anonymize your Personal Data.

Your IP address will be retained for one year after your visit to the Site, after which it will be scrambled and your entire visit will become irreversibly anonymous.

Concerning recordings of your telephone calls received or made, the calls we record are kept for three months from the date of their occurrence.

Video surveillance recordings made in our car parks are kept for a maximum of 96 hours, provided no harm to person or property is detected within this period.

8. Who will receive your Personal Data?

We may communicate your Personal Data to the following persons and/or entities:

  • Group employees.
  • Duly authorized service providers and subcontractors (in particular technical service providers, payment services, analytical solutions). The Company may temporarily and securely transfer to service providers and subcontractors certain Personal Data which are necessary, in particular, for the operation, animation and maintenance of our Site, to ensure the sending of emails that you have chosen to receive, and/or the execution of Services, the proper processing of your order, the realization of the service, and to carry out satisfaction surveys. When Personal Data is communicated to service providers and subcontractors, we ensure that they present sufficient guarantees as to the implementation of appropriate technical and organizational measures so that the processing meets legal requirements and guarantees the protection of the rights of the persons concerned.
  • The Company may temporarily and securely transfer to third parties certain Personal Data that are necessary for the operation, animation and maintenance of our Site, to ensure the sending of emails that you have chosen to receive, and/or the execution of Services, the proper processing of your order, the realization of the service, and to carry out satisfaction surveys, etc. The Company may also transfer to third parties certain Personal Data that are necessary for the operation, animation and maintenance of our Site, to ensure the sending of emails that you have chosen to receive, and/or the execution of Services, the proper processing of your order, the realization of the service, and to carry out satisfaction surveys, etc.
  • Subject to your express prior consent, we may also transmit all or part of your Personal Data, in aggregate or non-aggregate form, to commercial partners, who may use it for their own purposes, in particular for commercial purposes and/or direct advertising.

If the User wishes to access the Site via a connection service provided by our commercial partners, their confidentiality policies are also enforceable against you. The Company has no control over the collection or processing of data by our commercial partners on their own sites.

  • In the event that the Company or all or part of its assets are acquired by a third party, the Personal Data in its possession will, where appropriate, be transferred to the new owner.
  • Finally, we may be legally obliged to disclose your Personal Data to the competent authorities. For example, in the event of legal proceedings or an order from a public authority.

Personal Data is communicated solely for the purpose for which it was collected. Under no circumstances do we sell or rent your Personal Data to third parties for marketing purposes.

9. Transfer of your Personal Data abroad

As part of the performance of the Services, we may transfer some of your Personal Data to third parties, in a secure manner, for the purposes defined above, to companies located in countries outside Switzerland and/or the European Union. We undertake to implement all appropriate safeguards to ensure the security of such transfers.

Consequently, you are informed that for the above-mentioned purposes, your Data may be transferred outside Switzerland and the European Union in the following manner:

We will only transfer your Personal Data outside Switzerland or the EU if adequate data protection is ensured.

In particular, we assure you that we take appropriate measures and guarantees to maintain a level of confidentiality and security of your Personal Data within the framework of such transfers, by requiring in particular that all our subcontractors and service providers implement all appropriate technical and organizational measures, on an ongoing basis, in order to secure the Data processed and thus ensure them an adequate level of protection.

10. Social networking

We are present on Social Networks, and notably have our dedicated pages on LinkedIn, Instagram and Twitter.

We remind you that access to these Social Networks requires your acceptance of their contractual conditions, which include provisions relating to the Personal Data Regulations for processing carried out by them.

To learn more about the protection of your Personal Data when browsing these Social Networks, we invite you to consult their respective privacy policies, available at the links below:

11. Cookies

A cookie is a small text file containing information which is deposited on your terminal when you consult a website or mobile application; they are used in particular to recognize your terminal when it accesses a previously used website or application again. Cookies are often used to enable or improve the operation of sites, as well as to provide us with certain technical information.

We use cookies to improve your online experience and to better understand how you use the Site. Cookies also enable us to better target online advertising to your interests.

Cookies may be stored on your terminal for varying periods of time. Some cookies are “session cookies”, meaning that they are only present as long as your browser is open. They are automatically deleted when you close your browser. Some cookies are “permanent cookies”, which means that they are retained when you close your browser. These cookies enable us to recognize your Terminal when you open your browser to browse our Site again.

11.1 What are cookies used for on our Site?

11.1.1 The cookies we issue

Subject to your settings, when you connect to our Site, we may install various Cookies on your Terminal.

These are :

  • Necessary cookies”: these are essential to provide you with the Services available on our Site and to use some of their functionalities, in particular to access certain secure areas (Personal Account). Without these cookies, the tools required to meet the needs of the Service (creation of and access to Personal Account, registration of bank details) could not be provided.
  • technical cookies”: these are used throughout your browsing experience, to facilitate navigation and perform certain functions. They enable us, for example, during the period of validity of the Cookie concerned, to memorize the answers entered in a form, to recognize the browser of your Terminal, or even your preferences with regard to the language or presentation of our Site.

The cookies we issue are used for the purposes described in article 3.3 of this Policy, subject to the settings made by you, which result from the parameters of the browser software used when you visit our Site.

Your consent to the various cookies placed on our Site is valid for a maximum of thirteen (13) months. Once the thirteen (13) months have expired, we will ask for your consent again when you connect to our Site. You can also manage your cookies at any time by clicking here.

11.1.2 Cookies issued by our Partners

Due to third-party applications integrated into our Site, certain Cookies may be issued by our Partners, enabling them, during the period of validity of their Cookies, to collect browsing information relating to browsers consulting our Site.

These are :

  • Third-party or social network integration cookies: these cookies are used to integrate third-party functionalities on our Site. Cookies in this category may be set by third parties and include, but are not limited to, cookies set by social networks.

You can prevent the collection of information about you via these third-party cookies at any time by clicking on the corresponding links (see “Your choices concerning cookies” below).

The issue and use of Cookies by these Partners are subject to their own privacy protection policies. We inform you of the purpose of the cookies we are aware of and of the means available to you to make choices with regard to these cookies.

11.2 Your choices concerning cookies

You can choose whether or not to accept cookies. However, refusing cookies will not allow you to benefit from all of our Site’s functionalities.

You can define your preferences with regard to cookies using the cookie acceptance tool available on the Site “Managing your cookie preferences”, or by modifying your browser settings so that cookies from our Site cannot be placed on your Terminal. To do this, you must follow your browser’s instructions (generally available in the Help, Tools or Browser Edition sections):

Below you will find a list of the cookies we deposit on your device via our Site. By clicking on these links you will be redirected to the partners’ websites, their practices and the choices they offer you regarding cookies:

Necessary cookies
These cookies are essential for the correct use of the websites and their main functionalities, so they cannot be deactivated.
Name Supplier Purpose Expiration Type Link
__cf_bm Vimeo.com This cookie is used to distinguish robots from humans 1 day HTTP cookie https://vimeo.com/cookie_policy
_cfvuid Vimeo This cookie is used by Vimeo as part of their integrated services on websites. 24 months HTTP Cookie https://vimeo.com/cookie_policy

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. This service is provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

reCAPTCHA is used to check whether data entered on our website (e.g. on a contact form) has been entered by a user or by an automated program. To do this, reCAPTCHA analyzes the site visitor’s behavior according to various characteristics. This analysis starts automatically as soon as the website visitor enters the site. For the analysis, reCAPTCHA evaluates various pieces of information (for example, the IP address, the length of time the visitor has been on the website or the mouse movements made by the user). The data collected during the analysis will be transmitted to Google.

reCAPTCHA analyses take place completely in the background. Site visitors are not informed that such analysis is in progress.

Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
For more information on Google reCAPTCHA and Google’s privacy policy, please visit the following links: https: //www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/ android.html

More information on cookies can be found on the CNIL website.

You can also access an online cookie management tool. This will enable you to manage the cookies placed on your electronic terminals. To do so, click on the following link: cookie manager.

12. Personal data of minors

The Services are intended for adult customers. Accordingly, the Company does not intend to collect Personal Data from minors under the age of 18.

However, in the event that, without our knowledge, such Personal Data has been collected and processed without obtaining the authorization of the holder of parental responsibility for the minor in question, we will take all necessary steps to delete such Personal Data as soon as possible.

If you have parental responsibility for a minor under the age of 16 and are aware that we have collected and processed data concerning him or her, please contact us at: indigo.dpo.ch@group-indigo.com

13. What are your rights regarding your Personal Data?

 

13.1 Withdrawal of your consent to the processing of Personal Data

Some Personal Data processing operations are only possible with your consent. You may revoke your consent at any time by sending us a simple e-mail. Such revocation does not affect the lawfulness of the data processing carried out up to the time of revocation.

13.2 Access, rectification and deletion

In accordance with the legal provisions in force, you have the right at any time to be informed of and to have access, free of charge, to the data stored about you, its origin, recipient and purpose of processing, as well as, where applicable, the right to correction, blocking and deletion. However, we will only delete your personal data if we are not required to keep all or part of it for commercial or legal purposes (e.g. to provide after-sales service for services you have ordered, or if we are required by law to keep copies of certain accounting documents).

If you have any queries, please send them by post or e-mail, making sure that you can be identified unequivocally, to : Ronan Pichard, Indigo Suisse SA, rue de Genève 31- 1003 Lausanne.

13.3 Appeals to the supervisory authority

In the event of a data protection violation, you have the right to appeal to the Federal Data Protection Commissioner (http://www.edoeb.admin.ch).

14. Updating of the Privacy and Personal Data Protection Policy

The Company may update this Privacy Policy at any time. We advise you to consult this page regularly for any changes or updates to our Privacy Policy.

15. Contact

For any question, comment or complaint aimed at improving our Privacy Policy, the User may contact the Company by post Indigo Suisse Holding – Rue de Genève 31 – 1003 Lausanne or by email indigo.dpo.ch@group-indigo.com:

Updated 04/03/2024