Data Protection Declaration of SIX
This Data Protection Declaration (hereinafter “Declaration”) explains how SIX1 collects, uses and discloses (hereinafter referred to together as “processes”) personal user data (hereinafter “Personal Data”) of visitors to this website (hereinafter “User”), and the means by which this is done. The Declaration also describes how SIX safeguards the confidentiality of the Personal Data processed.
The User agrees to SIX processing Personal Data in accordance with the Declaration. Legal or contractual duties to maintain confidentiality to which SIX is subject in relation to the User's Personal Data are not affected by this Declaration.
SIX may amend the Declaration unilaterally at any time. The most recent version is published online by SIX.
1. Type of collected Personal Data
SIX processes Personal Data about the User when they access the websites of SIX or when they request or use products or services offered by SIX. On the one hand, SIX processes Personal Data (e.g. name, gender, address, e-mail address, telephone or fax number) which the User provides via a website of SIX, in particular when they register for a product or service or when they sign up for an e-mail newsletter. On the other hand, the webserver at SIX automatically records details of the User's visit (e.g. IP address, originating website, pages viewed, date, time spent).
Cookies particularly serve the following purposes:
- save the User's preferred language and country settings
- perform a statistical analysis of the number of users and of their usage habits
- improve the loading speed of the individual pages
The User can control cookie specifications via their browser settings. The relevant browser options and instructions on use can generally be found in the browser manual or help file. If the User rejects, blocks or deactivates cookies, this may restrict the availability of the services offered via the website. In addition, parts of the website may not work correctly under certain circumstances.
3. Web analysis
SIX analyses how its websites are used with the help of third-party analysis tools, such as Google Analytics (hereinafter “Analysis Service Providers”). SIX assumes no responsibility or liability for any data processed by Analysis Service Providers.
Detailed information on this can be found at http://tools.google.com/dlpage/gaoptout?hl=en
and http://www.google.com/intl/en/analytics/privacyoverview.html (general information on Google Analytics and data protection).
Data processing by HubSpot and storage at third-party companies take place in the United States. All companies involved in the United States are certified under the EU-US Privacy Shield.
More information can be found at http://www.hubspot.com/security.
5. Usage and protection of Personal Data
By processing Personal Data according to this Declaration, SIX is able to improve the quality of its products and services.
Personal Data is processed for the following purposes in particular:
- technical management as well as research and further development of websites
- user administration and marketing
- user information on the services and products rendered by SIX, provided the User has given their consent for this
The User authorizes SIX to transmit Personal Data to employees, agents or other third parties within or outside the country where the User lives in order to provide services and for the purposes indicated above. Employees, agents and other third parties which have access to Personal Data are required by SIX to ensure compliance with all applicable data protection provisions. SIX protects Personal Data with appropriate physical, electronic and process-related security measures, such as firewalls, personal passwords, encoding and authentication technologies.
SIX reserves the right to disclose Personal Data to regulatory and supervisory authorities, as well as, pursuant to this Declaration, to Analysis Service Providers. In so doing, SIX will comply at all times with applicable regulations, laws, court orders or official requests.
6. Information on processed Personal Data
Persons whose Personal Data is processed within the scope of this Declaration have the following rights:
- to receive information on whether SIX may save Personal Data and what form this Personal Data may take (which categories of data, recipients or categories of recipients, retention periods for Personal Data or criteria governing retention periods)
- to receive a copy of the Personal Data
- to request the rectification of Personal Data if it is incorrect
- to request the deletion of Personal Data
- to request restrictions on processing Personal Data
- to receive Personal Data in a structured, accessible and machine-readable format
- to submit an objection to processing, especially for the purpose of direct advertising
The rights specified above may be denied or restricted if the interests, rights and freedoms of third parties take precedence or if processing is necessary to establish, exercise or defend legal claims of SIX.
Queries in relation to processing Personal Data are to be directed to the Data Protection Officers of SIX:
SIX Group Ltd
The websites of SIX may contain hyperlinks to other websites which are not operated or monitored by SIX. Third-party websites are not subject to this Declaration. SIX is not responsible for their content or how they handle Personal Data.
8. Social media buttons
Functions (plugins) of third-party providers or social media platforms (Facebook, Twitter, Google+, etc.) are embedded into the websites of SIX. These plugins enable the User to share content on the social networks mentioned. The interfaces are deactivated by default when the website is accessed. This means that no Personal Data is transmitted to the respective third-party providers without intervention on the part of the User. Once the User has activated the interfaces, data (incl. also Personal Data) is automatically transmitted to the relevant third-party providers by the plug-ins. If the User is simultaneously logged in to the network of the respective third-party provider when they visit the website, the third-party provider can assign the visit to the User's network account. SIX has no influence on this. The purpose and scope of such a form of data collection and the further processing and usage of Personal Data are outlined in the data protection guidelines of the individual social networks. Users can also obtain information there on rights and settings options in relation to protecting their privacy.
9. Responsible SIX Unit
10. Right to withdraw consent in respect of data protection
Anyone affected by the processing of Personal Data can withdraw their consent to this effect at any time. This must be done in writing or by e-mail to the Data Protection Officer of SIX.
Last updated on: 26 January 2018
 For the purpose of this declaration “SIX“ refers tot he following legal entity, including subsidiaries and branches thereof.