Privacy Policy

For the provision, stable operation, and secure delivery of our website, we use the infrastructure of an external web hosting provider. All personal data collected when visiting or using our website (such as IP addresses as part of automatic network communication or data actively entered by you in forms) is processed and stored on the systems of this service provider.

The use of the external hoster is based on our legitimate or overriding interest pursuant to Art. 6 (1) (f) GDPR (or Art. 31 (1) FADP). Our legitimate interest lies in the technically error-free, stable, high-performance, and secure provision of our online offer.

The recipient of the data is netcup GmbH, Daimlerstrasse 25, 76185 Karlsruhe, Germany. Data-protection-compliant processing is guaranteed by a concluded contract on order processing (AVV) pursuant to Art. 28 GDPR or the specifications of the Swiss FADP; the service provider processes the data strictly in accordance with our instructions. The data is stored exclusively in certified data centers within Germany (European Union). Since our company is based in Switzerland, administrative access to these servers is carried out by us from Switzerland. This cross-border data flow is legally secured by the official adequacy decision of the EU Commission for Switzerland. A further transfer to unauthorized third parties or to insecure third countries (such as the USA) does not take place via the hosting.

The data remains on the hoster's servers until the purpose for the data processing no longer applies (e.g., after an inquiry from the contact form has been processed). Automatically collected system data (server log files) is - as described in the separate section on log files - stored for up to 30 days and then fully automatically deleted or anonymized, unless a specific security incident makes longer storage necessary for evidence purposes.

The processing of your data on the server structures of our partner is neither legally nor contractually required. However, it is a mandatory, automatic part of Internet protocol communication. As soon as your browser initiates a connection to our domain, the server processes this data before the actual website content is delivered. Displaying and using the website without this infrastructural processing is technically impossible, which is why no prior opt-out can be set up.

If you send us a message via our contact form, we process the data you enter there, in particular your name, email address, telephone number, company name, the selected topic, your preferred contact language, the project category, the planned timing, and your message. The purpose of the processing is the proper processing of your request, contacting you, and clarifying any follow-up questions.

If your request serves the preparation of a contract or the performance of an existing contract, the legal basis is Art. 6 (1) (b) GDPR (or Art. 31 (2) (a) FADP). In all other cases, processing is based on our legitimate or overriding interest in an efficient and rapid response to customer inquiries pursuant to Art. 6 (1) (f) GDPR (or Art. 31 (1) FADP).

For the technical delivery of your contact request, we use an external email delivery service. The data you enter in the form is transmitted encrypted to our server infrastructure and, from there, automatically sent as an email to one of our internal collection addresses. The delivery service processes the message content only transiently for the purpose of delivery; the configured processing region is Germany (EU), so that processing takes place within the EU. The recipient of the data in this respect is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The email is then received in our contact mailbox, which we operate via an external provider of email services; the recipient of the data here is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The retrieval and processing of your message is carried out by us at our registered office in Switzerland; this cross-border data flow is secured by the official adequacy decision of the EU Commission for Switzerland. Both providers are companies with a US parent company, which means access from an unsafe third country cannot be entirely ruled out. The legal and technical protective measures we have taken for this purpose (data processing agreements, the EU-U.S./Swiss-U.S. Data Privacy Framework, and Standard Contractual Clauses) can be found in the section “International Data Transfers (Third-Country Transfers)” of this privacy policy.

Your contact request is received as an email in our contact mailbox and remains there until the purpose for storing the data no longer applies (e.g., after your request has been fully processed) or you request us to delete it. The email delivery service does not store the message content permanently; processing there is limited to the period technically required for delivery. Mandatory statutory provisions - in particular commercial or tax retention periods for business contracts or resulting correspondence - remain unaffected.

The provision of your data is completely voluntary. Without providing your name and a valid email address, however, we cannot technically accept or reply to your request.

We use the Google Tag Manager on our website. This is a technical management system that itself does not set cookies and does not create independent user profiles. It serves exclusively as a tool to centrally control other analysis and statistical tools (such as Google Analytics 4). In order for the service to be loaded, your browser must establish a technical connection to Google, whereby your IP address is transmitted to Google.

The Google Tag Manager is only loaded on our website after you have given us your explicit and voluntary consent via our consent banner. The legal basis is therefore your consent pursuant to Art. 6 (1) (a) GDPR (or Art. 31 (1) FADP).

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As a subsidiary of Google LLC (USA), it cannot be excluded that data will be transferred to the servers of the parent company in the USA and stored there. Detailed information on this third-country transfer and the technical and contractual security guarantees taken by us can be found centrally in the section “International Data Transfers (Third-Country Transfers)” of this privacy policy.

The Google Tag Manager itself does not store personal data permanently. The processing of your IP address is transient for the pure technical connection setup and retrieval of the service.

The provision of your consent is voluntary. If you refuse consent, the Google Tag Manager will not be loaded; this will not result in any disadvantages for you when using the website.

Insofar as you have given your consent, we use Google Analytics 4 for statistical evaluation and range measurement of our website. In the process, data about your user behavior is recorded via cookies or device identifiers (e.g., pages called up, duration of visit, click paths, your approximate location, and technical details about your browser and end device). We have activated IP anonymization by default, so that your IP address is shortened by Google within Switzerland or the EU/EEA before a data transfer takes place.

Processing is carried out exclusively on the basis of your explicit consent via our consent banner pursuant to Art. 6 (1) (a) GDPR (or Art. 31 (1) FADP).

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As a subsidiary of Google LLC (USA), it cannot be excluded that data will be transferred to the servers of the parent company in the USA and stored there. Detailed information on this third-country transfer and the technical and contractual security guarantees taken by us can be found centrally in the section “International Data Transfers (Third-Country Transfers)” of this privacy policy.

The data transmitted by us to Google at user level and event level (e.g., clicks) is set to be deleted automatically and permanently on Google's servers after 14 months.

Provision is voluntary. You can withdraw your consent at any time with effect for the future via the 'Cookie Settings' in the footer of our website.

Where you have given your consent, we use Google Ads to measure whether a visit that originated from one of our ads subsequently leads to a contact request. When you click an ad, Google appends a click identifier (GCLID) to the destination address; this is stored on your device in first-party cookies whose names begin with _gcl_ (_gcl_aw, _gcl_au), as well as in _gac_*. If you then successfully submit our contact form, our website reports to Google that a conversion took place at this point. Only this fact is transmitted, together with the click identifier – not the details you entered into the form, and not your name, email address or phone number.

The Google Ads tag is only loaded after you have given us your explicit and voluntary consent to the “Marketing” category via our consent banner. Until then, the advertising signals of Google Consent Mode remain set to “denied” and no cookie is set. The legal basis is therefore your consent pursuant to Art. 6 (1) (a) GDPR (or Art. 31 (1) FADP).

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As a subsidiary of Google LLC (USA), it cannot be excluded that data will be transferred to the servers of the parent company in the USA and stored there. Detailed information on this third-country transfer and the technical and contractual security guarantees taken by us can be found centrally in the section “International Data Transfers (Third-Country Transfers)” of this privacy policy.

These cookies are stored on your device for 90 days and are then deleted automatically. You can remove them at any time via your browser settings or withdraw your consent in our cookie settings.

Giving your consent is voluntary. If you refuse consent, the Google Ads tag will not be loaded; this will not result in any disadvantages for you when using the website or when we process your request.

In order to offer you an uncomplicated online appointment booking, we embed the reservation function of Google Calendar. In order to protect your privacy, this service is deactivated by default. Only when you actively request the calendar via the corresponding button (two-click solution), the technical resources (scripts, stylesheets) of Google are loaded. In the process, Google processes your IP address. If you use the function for appointment booking, we process the data you enter (first and last name, email address, as well as your preferred appointment and the reason for the meeting) for the purpose of automated booking and coordination of the appointment.

Consent (Art. 6 (1) (a) GDPR / Art. 31 (1) FADP): Loading the external resources and the associated transmission of your IP address to Google takes place exclusively on the basis of your active consent (click on the activation button). Performance of a contract and pre-contractual measures (Art. 6 (1) (b) GDPR / Art. 31 (2) (a) FADP): The subsequent processing of your appointment data entered in the form serves the implementation of pre-contractual measures (scheduling) or the performance of an existing contract.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As a subsidiary of Google LLC (USA), it cannot be excluded that data will be transferred to the servers of the parent company in the USA and stored there. Detailed information on this third-country transfer and the technical and contractual security guarantees taken by us can be found centrally in the section “International Data Transfers (Third-Country Transfers)” of this privacy policy.

Your entered appointment data remains in our internal calendar until the purpose of the data storage no longer applies (e.g., after the appointment has been successfully held) or you request us to delete it. Statutory retention obligations remain unaffected. The loading of Google resources takes place for the duration of your current browser session.

The use of the online calendar is voluntary. If you do not wish to activate the external service, you can of course also arrange appointments conventionally by email or phone.