Privacy policy

This policy describes which personal data we process when you visit this website, for what purpose, and what rights you have. The Swiss Federal Act on Data Protection (nFADP) applies, and the GDPR where relevant.

Controller

TODO legal: insert the full company name and address of the controller (identical to the imprint).

What data we process

We collect only what is needed to run the site and answer your enquiry:

• Contact form details: name, company, email address, optional phone number, the interest you selected and your message.
• Server log data generated technically on each request (IP address, timestamp, page requested, browser type).
• Anonymous usage statistics (Vercel Web Analytics): aggregated page views, referrer, country and device type. No cookies, no tracking across other websites, and your IP address is not stored.

Purpose and legal basis

• Answering your enquiry and preparing a contract (Art. 6(1)(b) GDPR).
• Secure and stable operation of the website (legitimate interest, Art. 6(1)(f) GDPR).
• Anonymous, cookieless audience measurement with no personal data (legitimate interest, Art. 6(1)(f) GDPR). No consent is required for it.

Hosting and processors

The website and the applications we build are hosted in Switzerland or in the European Union. Data processing agreements are in place with every processor.

• Audience measurement: Vercel Web Analytics, a service of Vercel Inc., USA. No cookies, no IP addresses stored; what is collected is aggregated page views, referrer, country and device type.
• TODO legal: list the remaining service providers by name (hosting, email delivery, scheduling) with their respective locations.

Cookies and audience measurement

This website sets no analytics or marketing cookies. Which is also why there is no cookie banner. Technically necessary storage happens only where a feature needs it, such as remembering your language choice.

For audience measurement we use Vercel Web Analytics, a service of Vercel Inc., USA. The service sets no cookies, does not track you across other websites and stores no IP address. It collects aggregated page views, referrer, country and device type; no individual can be identified from that.

Only aggregate information is collected: page viewed, referrer, approximate country, device type and browser. There is no tracking across websites, and the data is never sold to third parties or used for advertising.

Retention

We keep enquiries for as long as needed to handle them and to meet statutory retention obligations, after which they are deleted or anonymised.

TODO legal: define concrete retention periods.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A request to the address below is enough. You also have the right to lodge a complaint with the competent supervisory authority (Switzerland: FDPIC; Germany: the authority of your federal state).

Data security

Transmission is encrypted end to end (TLS). Access is limited to the people who need it for their work. On request, our applications are tested for vulnerabilities by our partner Cytadel.

Changes

We update this policy when our processing changes. The version published on this page is the one that applies.

Contact

Questions about data protection or your rights? Write to hello@elevateurbox.com.