Data Privacy Policy

Data Protection Overview

General information

The information shown below will give you a simple overview about what happens with your personal data when you visit our website. Personal data are all data that can personally identify you. Please see the data privacy notice listed under this text for more detailed information about data privacy.

Data collected on our website

Who is responsible for data collection on this website?

The data on this website are processed by the website operator. The operator‘s contact details are shown in the legal notice for this website.

How do we collect your data?

For one, your data will be collected when you provide them to us. This may include data entered into a contact form.

Other data is automatically collected by our IT systems when you visit our website. In particular, this includes technical data (e.g. internet browser, operating system or time of page access). These data are automatically collected as soon as you access our website.

For which purposes do we use your data?

Part of the data is collected to guarantee that we can make our website available without any errors. Other data may be used to analyse your user behaviour.

HEROS does not sell personal data to third parties and HEROS does not buy personal data from third parties.

Which rights do you have regarding your data?

You have the right to receive information about origin, recipient and purpose of your stored personal data without any charge to you. Furthermore, you have a right to request correction, blocking or deletion of this data at any time. Please contact us at the address shown in the legal notice at any time if you have further questions about data privacy. Furthermore, you also have a right to file a complaint with the competent regulatory authority.

Under certain circumstances you also have the right to restrict the processing of your personal data. Please see the section “Right to restriction of processing” in our data privacy notice for more details.

Analysis tools and third-party provider tools

When visiting our website, statistical analyses may be made of your surfing behaviour. This happens primarily using cookies and so-called analytics programs. The analysis of your surfing behaviour is usually anonymous, and the information cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you in this data privacy policy about how to exercise your options to object.

General Information and Mandatory Information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various pieces of personal data will be collected. Personal information is any data that can be used to personally identify you. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Information about the data controller

The controller for data processing on this website is:

HEROS Helvetic Rolling Stock GmbH
Marktgasse 15
4310 Rheinfelden
Telephone: +41 61 813 39 48
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

The controller is the natural person or legal entity that solely or jointly with others makes decisions about the purposes and methods for the processing of personal data (e.g. names, email address, etc.).

Revoking your consent to data processing

Many data processing operations can only be carried out with your express consent. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to object to data collection in special cases and to direct mail advertising (Art. 21 GDPR)

If the data is processed based on Art. 6 para. 1 lit. e or f GDPR, you have the right, at any time, for reasons arising from your particular situation to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which a processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can identify compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing for the purpose of enforcing, pursuing or defending legal claims (objection according to Art. 21 para. 1 GDPR).

If your personal data is processed for direct mail advertising purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail advertising. If you object, your personal data will then no longer be used for the purpose of direct mail advertising (objection according to Art. 21 para. 2 GDPR).

Right of appeal to the competent supervisory authority

In the case of violations of the GDPR, the affected persons have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another person in charge, this will only be done to the extent technically feasible.

SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties without decrypting them.

Information, blocking, deletion and correction

You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time to the extent permitted by applicable law. You can contact us at any time at the address shown in the legal notice if you have any further questions related to personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address shown in the legal notice. The right to restrict processing exists in the following cases:

  •  If you contest the accuracy of your personal data stored with us, we usually need time to investigate the matter. For the duration of the   investigation, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was / is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you do need it to exercise, defend or assert legal claims, you have the right to request a restriction on the processing of your personal data instead of deletion.
  • If you have objected to processing pursuant to Art. 21 para. 1 GDPR, a consideration must be made between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data may only be processed – with the exception of storage – with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State.

Objection against advertising emails

We herewith object to the use of contact data published within the scope of our legal notice obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

Data Collection on our Website


Some of the internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.

Cookies which are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimized provision of its services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these will be treated separately in this data protection declaration.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  •  Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data are not combined with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website – for this purpose the server log files must be recorded.

Enquiries by email, phone or fax

If you contact us by email, phone or fax, your enquiry including all related personal data (name, enquiry) will be stored for the purpose of processing the enquiry. We will not pass on this data without your consent.

This data is processed based on Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or the implementation of precontractual measures. In all other cases they are processed based on your consent (Art. 6 para. 1 lit. a GDPR) and / or our legitimate interests (Art. 6 para. 1 lit. f GDPR), since we have a legitimate interest in effectively processing the enquiries we receive.

The data sent to us via contact enquiries will remain with us until you ask us to delete them, revoke your consent to storage or the purpose for the data storage no longer applies (e.g. when the processing of your enquiry has been completed). Mandatory statutory provisions, especially statutory retention periods, are not affected.

Analysis Tools and Advertising

Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is stored.

Matomo cookies remain on your device until you delete them.

The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.

The information generated by the cookies about your use of this website will not be disclosed to third parties. You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website.

If you do not agree with the storage and use of your data, you can disable this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. If you delete your cookies, this will mean that the opt-out cookie will also be deleted. You will then need to reactivate it when you return to our site if you wish your activity not to be tracked.