Privacy Policy

The protection of your personal data and privacy are important to us. You can be sure that we will handle your data with care and ensure a high level of data security.

This Privacy Policy provides information on how and why we at the Marti Group (hereinafter: “Marti”) process personal data.

Our overview “In a nutshell” provides you with an introduction. We then provide more detailed information. Please click on the individual headings to learn more.

If you provide us with personal data relating to other people (e.g. family members, details of work colleagues), please ensure that they are aware of this Privacy Policy, and only share their personal data with us if you are permitted to do so and the data is correct.

Depending on your relationship with us (e.g. website visitor or job applicant) different sections will be relevant to you. Below you will find brief information on the key points relating to our data processing:

• Purposes of processing
  In principle, we use and process personal data to fulfill our contractual and statutory obligations.
• Disclosure to third parties
  Within the scope of our business activities we are dependent on transmitting, and sometimes obligated to transmit, certain data to specific third parties. However, under no circumstances do we sell your data.

We also naturally provide you with more detailed information on our processing.
You can now learn about where you can find which information.

2.1  Processing of personal data in general
If you are interested in the general aspects of the various processing carried out at Marti, you will find the relevant information in sections 4-8 of this Privacy Policy:

• In section 4 you can find out which categories of people are affected by our data processing and get an overview of the categories of personal data we process.
• In section 5 you can find the various purposes of processing at Marti.
• In section 6 you can learn which legal basis we use to support our processing.
• In section 7 you can find information on third parties we disclose personal data to.
• In section 8 you can find out how long we generally retain personal data.

2.2 Processing of specific personal data
In addition to the general information that can apply to all our processing, this Privacy Policy provides further information relating to specific processing or categories of people. We provide information in the relevant sections about which personal data we process for which purposes and about any specific disclosures to third parties.

• If you rent one of our rental properties, are interested in buying or selling a property, and would like to find out about data processing in the context of our real estate business, please consult section 10.
• If you are applying for a job vacancy and would like to find out about data processing in the context of our candidate management, please consult section 11.1.
• If you are a visitor to our website and would like to find out about data processing in the context of our website, please consult section 11.

The Marti Group is a family business anchored in tradition and strong values. Founded in Switzerland as a small family business around 100 years ago, the Marti Group now operates 80 Group companies from every sector of the construction industry.

Each Group company is a controller, as referred to in data protection legislation, and insofar as it processes personal data (e.g. on its website or on the basis of a business relationship) is responsible for certain processing.

Which Group company is responsible for the processing of your personal data is determined by which company of the Marti Group you are/have been in contact with, or which website you have visited.

You can find the identity and contact details of the respective controller on its website.

When you visit this website, the controller, as referred to in data protection legislation, responsible for any resultant processing of your personal data is

Marti Technik AG 
Lochackerweg 2 
3302 Moosseedorf, Schweiz 
Tel. +41 31 858 33 88

If you have any questions about the handling of your personal data, please do not hesitate to contact our data protection office.

3.1 Representative in the EU
Our EU representative, as referred to in the GDPR, is:
Raphael Casanova, Marti Dienstleistungen AG, Seedorffeldstrasse 21, 3302 Moosseedorf, Switzerland

Marti primarily processes personal data relating to the following categories of data subjects:

• business customers, service providers, and suppliers and/or their contacts
• tenants of our properties and premises
• current and retired employees
• visitors to our website(s), in particular job applicants
• visitors to our premises
• contacts at authorities

We process personal data that you provide to us, we collect about you or we have received from third parties. In addition to the personal data mentioned in sections 9 and 10, the most important data is:

• contact and identification data (this includes for example first and last names, mailing address, telephone number, or e-mail address)
• financial data (this includes for example details of the recording of payment for a service procured/provided, a bank or postal account, debt enforcement proceedings, and the collection of payments)
• contract data (his includes for example details of a service procured/provided and payment, details of the respective construction project or order processing)
• communication data (this includes for example physical or electronic correspondence with Marti)
• data in connection with applications for a job vacancy or rental property (this includes for example testimonials and/or letters of application, cover letters, certificates of employment, references, or extracts from the debt enforcement register)
• data in connection with legal disputes

Marti processes personal data for a variety of purposes. The most important ones are:

• Construction business:
  Information on the purposes of processing within our construction business can be found in section 9.
• Property management:
  Information on the purposes of processing in relation to the rental and purchase/sale of property can be found in section 10.
• Website(s):
  Information on the purposes of processing on our websites can be found in section 11.
• Procurement of products and services:
  We also rely on the processing of personal data when purchasing products and services from our suppliers and subcontractors. If you work for a customer or business partner, your personal data may also be affected in this capacity.
• Jobs at Marti:
  If you apply for a job with us, we require your details to process your application. Details of data processing in relation to job applications can be found in section 11.1.
• Video surveillance:
  In order to control access to our premises and protect our employees and other people as well as to safeguard data or secrets belonging to or entrusted to us, we use closed-circuit television cameras and other IT, building and installation security measures (e.g. access controls, visitor lists, network and e-mail scanners, recording of telephone calls) at various sites.

The following regularly serve as the legal basis for processing your personal data:

• your consent for processing personal data, which you may revoke at any time (for example, the use of cookies on our websites)
• conclusion or performance of a contract with you or your preliminary request to do so (where you, for example, commission us with a construction project)
• consideration of interests (for example to guarantee information security or performance of tasks carried out in the public interest), which you may object to in certain circumstances
• a legal obligation (for instance social security legislation or for the retention of accounting-related documents by us), which may also be taken into account as part of a consideration of interests

We also disclose personal data to third parties within the context of our business activities and for all the purposes mentioned in sections 5, 9, 10 and 11, provided this is permitted and indicated, whether it be because these third parties are processing the data for us (contracted data processing), because they use them for legitimate purposes, or it is required by law (disclosure of personal data). This involves in particular:

• service providers, including data processors, IT service providers, suppliers, and business partners
• authorities
• companies of the Marti Group
• banks and payment service providers, debt enforcement agencies
• official bodies and courts

In some cases these recipients are in Switzerland, but they can be anywhere in the world. You must in particular take into account the fact that your data may be transmitted to any of the countries in which the Marti Group is represented by Group companies, branch offices or other offices (https://www.marti.com/ch_en/locations) as well as to other European countries and the USA, where our service providers are located (e.g. Microsoft, Google, AWS, and others). Marti ensures that the applicable data protection provisions are complied with in each case. If we transmit data to a country in which there is no appropriate statutory level of data protection, we require the recipient to take appropriate measures to protect personal data (e.g. by agreeing to EU standard contractual clauses Standard contractual clauses for controllers and processors in the EU/EEA (europa.eu);cross-border transfer of personal data (admin.ch), taking other precautions, or based on grounds of justification).

In principle, we process your personal data for as long as required for the respective purpose. If there are statutory retention obligations beyond this period, the personal data concerned is stored for the duration of the retention obligation. Once the retention obligation has lapsed we check whether there is any further processing requirement. If there is no longer a requirement, your data is deleted.

If we store data based on a contractual relationship with you, this data will continue to be stored for as long as the contractual relationship is in place and at the longest for the duration of any statutory limitation periods for possible claims by us or for as long as statutory or contractual retention obligations exist.

Backup systems protect all data held by the Marti Group from cyber risks. The retention period for backups is a maximum of 180 days after the last backup of a data record. Access to the backup systems and the saved data contained therein is reserved for a specified group of people. The technology logs every access to and every action in the backup systems in a transparent manner

Marti has expertise in various areas of construction, such as civil engineering and road construction, underground structures, building and reconstruction, and in maintenance and renovation. You can find out which data we process in section 4.

9.1 For what purposes do we process personal data?
In connection with our construction business we use the personal data we collect primarily to:

• fulfill our contractual obligations
• provide our business customers with technical advice according to the construction project
• exercise rights of recourse vis-à-vis a liable third party
• maintain statistics
• develop new products and further develop existing ones, which may involve determining key figures on the use of services, capacity utilization figures, development of ideas for new processes, technologies
• comply with statutory obligations to provide information or report to courts and authorities and to fulfill official instructions
• maintain a secure, efficient and profitable business operation

10.1 What personal data do we process?
Marti owns various properties which it rents out or sells.

If you are an existing tenant or are interested in one of our rental properties or in buying or selling a property and would like to register your interest, we process the personal data that you provide to us, we collect about you or have received from a third party. In addition to that mentioned in section 4, this primarily includes:

• contact and identification data (this includes for example date of birth, gender, marital status, OASI number, nationality)
• financial data (this includes for example details of income and professional circumstances, debt enforcement proceedings, or collection of payments)
• contract data (this includes for example details of security provided, property to be rented/purchased, rent and ancillary costs, number of people in the household, or condition and fixtures of the property)

10.2 For what purposes do we process personal data?
In connection with our real estate business, we use the personal data we collect primarily:

• to receive and consider contact requests and applications from persons interested in renting or purchasing
• to record the condition and fixtures of the rental property
• to fulfill the rental contract, in particular billing the rent and ancillary costs
• to meet repair and maintenance obligations in respect of rental properties
• in relation to tenants behavior when using the rental property, if required e.g. breaches of contract and behavior that may result in damage
• in the event of legal disputes
• for statistical purposes (e.g. reporting)
• to fulfill the purchase agreement

10.3 Do we disclose personal data to third parties?
We also disclose personal data to third parties within the context of our business activities and for the purposes mentioned above, provided this is permitted and indicated. In addition to the recipient categories mentioned in section 7, this involves:

• tradespeople as well as experts and the respective building insurer and liability insurer of the property
• property management companies
• energy supply companies
• other tenants at their request in order to meet legal claims (e.g. by allowing inspection of all original documents and consumption recordings on which the relevant annual statements are based)

Under data protection law, automated individual decisions, i.e. purely computer-based and without the involvement of a data subject, must be indicated as such. Automated individual decisions of this type may be made depending on the process.

We identify such automated decisions. You may also exercise the rights under section 14 in relation to this automated individual decision-making.

Technical and organizational measures protect data from being accessed by unauthorized third parties for fraudulent use and criminal purposes. To this end, the Marti Group has implemented appropriate technical and organizational measures. These include in particular:

• directives governing the handling of personal data
• security training for IT users
• the operation of technical protection, early detection, defense and recovery systems
• ensuring effective access controls in respect of premises, facilities, data processing systems, and the data itself
• access restrictions in accordance with the need-to-know principle by means of individual access rights
• use of personal user accounts
• contingency plans and recovery processes are in place
• reviewing the effectiveness of the measures

The stream of your digitally transmitted data is SSL-encrypted between the web browser and the web server. As a result, it is protected from unauthorized access by third parties. If you send us data via e-mail, the data transmission may not be encrypted. It should be noted that data is generally stored unencrypted.

Within the framework of the data protection law applicable to you and to the extent provided therein, you have the right to information, correction, deletion, the right to object to our data processing as well as to the release of certain personal data for the purpose of transmission to another agency. You may also revoke consent if our data processing is based on your consent.

If we inform you about an automated decision (section 12), you have the right to request a review of the respective decision by a natural person.

However, please note that we reserve the right to assert the restrictions provided for by law on our part if we are obligated to retain or process certain data, have an overriding interest in it (insofar as we may refer to it), or need it in order to assert claims.

We informed you about the option to revoke your consent in section 6. Please note that the exercise of these rights can be in conflict with contractual agreements and that this may have consequences such as premature termination of the contract or cost consequences. We will inform you in this regard in advance, where this is not already contractually regulated.

The exercise of such rights generally requires that you clearly prove your identity (for example, by a copy of your identity card, where your identity otherwise is not clear or cannot be verified). To exercise your rights, you can contact us at the address specified in section 3 (data protection office).

The Marti Group’s range of services is continuously expanding. For this reason or because of other changes in circumstances, this Privacy Policy may be amended at any time without prior notice or communication. The current published version shall apply.

The third-party links provided are to assist you in searching for more information and may change. It is therefore possible that sites are no longer available.

Please note the Imprint section.