Privacy Policy

1. Controller

The controller responsible for processing personal data in connection with this website and the services of SwiTech Solution is:

See the imprint for further provider details. I have not appointed a data protection officer, as there is no legal obligation to do so; please send requests directly to the address above.

2. Scope

This privacy policy applies to:

• visiting and using the website switech-solution.com (including subpages and language versions)
• contact, inquiry and beta waitlist forms
• email correspondence, including workflow inquiries via the «Request Pricing» buttons
• the initiation and performance of consulting and automation services
• where applicable, the use of beta products (e.g. SwiCromAI), unless separate privacy information applies

It is addressed to visitors from Switzerland and other countries. Additional information for people in the EU, the EEA and the United Kingdom is provided in section 16, and for people in the United States in section 17.

Third-party websites and services (e.g. LinkedIn, Instagram, Calendly) are governed by their own privacy policies.

3. Principles

I process personal data in line with the principles of the FADP and the GDPR, in particular:

• Lawfulness, good faith and transparency
• Purpose limitation — only for stated purposes or purposes evident from the context
• Proportionality / data minimisation — only as much as necessary
• Accuracy — corrections when informed of inaccuracies
• Storage limitation — deletion once the data is no longer needed
• Data security — appropriate technical and organisational measures

4. Data I process

4.1 Information you provide

• First and last name
• Company / organisation (if provided)
• Email address
• Content of your message / inquiry / subject
• Information you voluntarily share in consulting or project conversations (processes, tools, goals)

4.2 Confirmation in the form

When submitting a form, you confirm via a required checkbox that you are at least 18 years old and have read this privacy policy. This confirmation is stored together with the version of this privacy policy and the time of submission (see section 18).

4.3 Technical data when visiting the website

• IP address
• Date and time of access
• Pages / files accessed
• Referrer URL (if transmitted)
• Browser type, browser language, device and operating system

This data is typically recorded in the hosting provider's server log files.

4.4 No sensitive data

I do not request sensitive personal data (e.g. health data, religious or political views, biometric data). Please do not submit such data through the forms.

5. Purposes

I process personal data for the following purposes:

• Providing and operating the website, including showing it in your language
• Answering contact, workflow and service inquiries
• Managing the SwiCromAI beta waitlist and contacting you about it
• Initiating, performing and following up on consulting and automation services
• Communication within existing or prospective business relationships
• Documenting the age confirmation and acknowledgement of this privacy policy
• Security, abuse and spam prevention, and technical error analysis
• Compliance with legal obligations (e.g. record retention)
• Establishing, exercising or defending legal claims

Data is only used for marketing (e.g. newsletters) with your explicit consent; I currently do not operate a newsletter. I do not make automated individual decisions and do not create profiles for advertising.

6. Legal bases

Under the Swiss FADP, processing personal data is permitted if it complies with the processing principles; where necessary, I rely on a justification (Art. 31 FADP). Where the GDPR or UK GDPR applies, the following legal bases under Art. 6(1) GDPR apply:

7. Website & technical data

When you visit this website, technical access data required to deliver the pages and operate the infrastructure is processed by me or by my hosting provider as a processor.

This website is hosted by Netlify (Netlify, Inc., San Francisco, USA). Netlify delivers the pages through a global server network and processes the technical access data listed above, in particular your IP address. Netlify is certified under the EU-U.S. Data Privacy Framework (including the UK Extension) and the Swiss-U.S. Data Privacy Framework. Details: Netlify Privacy Statement.

The free PDF resources can be downloaded without registration. No additional personal data is collected; only the usual technical access data is processed.

The website uses your browser's language setting to decide whether to show the German or English version. No personal data is sent to me for this; the evaluation takes place locally in your browser.

These log data are not combined with other data sources to create advertising profiles.

8. Contact & waitlist forms (Formspree)

For the contact and beta waitlist forms I use Formspree (Formspree, Inc., USA) as a processor. When you submit a form, the data you enter is transmitted to Formspree and forwarded to me.

8.1 Data processed

• Contact form: first name, last name (optional), email, subject (optional), message
• Waitlist: name, company, email
• Confirmation «at least 18 and privacy policy read», including the version of this policy
• Technical metadata of the submission (e.g. time, IP address, spam check)

Required fields are marked with *. Providing data is voluntary, but without the required fields I cannot process your inquiry or sign-up. To prevent spam, each form contains a check field that is invisible to humans.

8.2 Purpose

Processing and answering your inquiry, or adding you to the beta waitlist and informing you about the beta launch. You can withdraw your waitlist sign-up at any time by email.

8.3 Transfer to the USA

Formspree processes data in the USA. Formspree is currently not certified under the Data Privacy Framework but, according to its own information, relies as a processor on the European Commission's Standard Contractual Clauses (SCCs), which are also recognised by the Swiss FDPIC. Details: Formspree Privacy Policy and Formspree Security.

Alternatively, you can contact me directly by email at info@switech-solution.com. The «Request Pricing» buttons on the workflows page open your own email program; no data is transmitted via the website.

9. Services, consulting & scheduling

Intro calls, quotes and automation projects may involve further personal data (e.g. names of contact persons, process descriptions, access or system information you provide).

• I process this data only to perform the contract and deliver the project.
• Access to client systems only takes place by agreement and to the extent necessary.
• If I process third-party personal data on behalf of a client, we conclude a separate data processing agreement where required.

Additional information may apply to product-related processing in SwiCromAI (after the beta launch).

9.1 Scheduling via Calendly

I use Calendly (Calendly, LLC, USA) for booking intro calls. The «Book a free call» button is a simple link that opens Calendly's booking page in a new tab. No Calendly code is loaded on this website and no Calendly cookies are set here.

When you book an appointment, the data you enter on the booking page (e.g. name, email address, chosen time and any details about your request) is processed by Calendly and made available to me to prepare and hold the call. Calendly's privacy notice, including its cookie settings, applies on the booking page: Calendly Privacy Notice.

Calendly processes data in the USA and states that it is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks; should this basis cease to apply, Calendly's data processing addendum provides for Standard Contractual Clauses. If you prefer not to use Calendly, you can request an appointment by email at info@switech-solution.com or via the contact form.

10. Cookies, local storage & opt-out signals

This website uses no tracking or marketing cookies, no analytics tools and creates no usage profiles.

Technically necessary information is stored locally in your browser (local storage or session storage). This includes your language choice (German/English), confirmation of the cookie notice and, for the current session only, whether you hid the notice bar on mobile devices. This information never leaves your device and you can delete it in your browser at any time.

Fonts and icons are served directly from this website. No content is loaded from third-party servers (e.g. Google Fonts or CDN providers).

Global Privacy Control (GPC) and «Do Not Track»: I respect these browser signals. Since this website involves no tracking and no selling or sharing of personal data, there is nothing additional to switch off. Should I use analytics or marketing tools in the future, I will inform you here, obtain your prior consent where required and treat GPC signals as a valid opt-out.

11. Recipients & processors

Personal data may be disclosed to the following categories of recipients:

• Netlify (website hosting)
• Formspree (form processing)
• Calendly (scheduling of intro calls)
• Email providers for receiving and sending messages
• IT and support providers, where engaged
• Authorities and courts, where I am legally obliged or where necessary to protect legal claims

Processors only process personal data on my instructions. Data processing agreements are in place where required and offered by the provider. I do not sell, rent or trade personal data.

12. International transfers

Some service providers process data outside Switzerland and the EEA, notably in the USA. The USA is considered to provide an adequate level of data protection only for companies certified under the Data Privacy Framework. Depending on the provider, transfers rely on:

• Netlify: certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks
• Calendly: certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks (according to Calendly); additionally Standard Contractual Clauses
• Formspree: the European Commission's Standard Contractual Clauses

Where none of these safeguards apply, data is only transferred if necessary to conclude or perform a contract with you, or with your explicit consent. For people in the EU/EEA: Switzerland benefits from an adequacy decision of the European Commission.

13. Retention

I only store personal data for as long as necessary for the stated purposes or required by law. Guidelines:

• Contact inquiries including age confirmation: until resolved and then for a reasonable follow-up period (typically up to 12 months), unless an ongoing business relationship or longer retention is required
• Beta waitlist: until the end of the respective beta phase or until you withdraw your sign-up; at the latest once it is clear that no admission will follow
• Contract / project data: for the duration of the business relationship and thereafter in line with statutory retention periods (in Switzerland up to 10 years for accounting records, Art. 958f Swiss Code of Obligations)
• Server logs: according to the host's settings, typically a few days to weeks

14. Data security

I take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, in particular:

• encrypted transmission of the entire website via HTTPS / TLS
• security headers (including a Content Security Policy) against injection of third-party content
• access restrictions and strong authentication for mailboxes and systems
• careful selection of service providers

Absolute security cannot be guaranteed on the internet. Please do not send particularly sensitive data by unencrypted email unless agreed otherwise. Where required by law, I report data security breaches to the competent supervisory authority and inform affected persons.

15. Your rights (Switzerland)

Under the Swiss FADP you have, within the legal framework, in particular the following rights:

• Access to information on whether and which personal data I process about you
• Rectification of inaccurate data
• Erasure, unless statutory or overriding reasons for retention apply
• Data portability of certain data in a common electronic format
• Objection to certain processing
• Withdrawal of consent with effect for the future

An informal email to info@switech-solution.com is sufficient to exercise your rights. I may request reasonable proof of identity and usually respond within 30 days.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

16. Supplement for people in the EU/EEA and the United Kingdom (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies to the processing of your data (e.g. because you are in the EU/EEA or the UK and send me an inquiry), the following additional information applies:

16.1 Your rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR)
• Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR)
• Complaint to a data protection supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement (Art. 77 GDPR). A list of authorities is available from the European Data Protection Board; in the UK, the ICO is responsible.

16.2 Obligation to provide data

Providing your data is not required by law or contract. However, without the required fields in the forms, I cannot process your inquiry or sign-up.

16.3 Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

16.4 Representative in the EU / UK

I have not appointed a representative under Art. 27 GDPR or the UK GDPR, as I only occasionally process data of people in the EU and the UK, there is no large-scale processing of special categories of data, and the processing is unlikely to result in a risk to the rights and freedoms of the data subjects (Art. 27(2)(a) GDPR). You can contact me directly at any time.

17. Supplement for people in the United States (CCPA/CPRA and other states)

SwiTech Solution is a small Swiss sole proprietorship and, by its own assessment, does not currently meet the thresholds of the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) or comparable laws of other US states. Nevertheless, I disclose the following information and grant the rights described voluntarily.

17.1 Categories, sources and purposes

• Identifiers: name, email address, IP address
• Professional information: company / organisation
• Internet and network activity: technical access data (server logs)
• Content of your communications: messages and inquiries

Sources are you (forms, email, scheduling) and your browser when visiting the website. Purposes are described in section 5 and retention in section 13. Data is only disclosed to the service providers listed in section 11 for business purposes.

17.2 No selling and no sharing

I do not sell personal information and do not share it for cross-context behavioral advertising («sale» or «sharing» within the meaning of the CCPA/CPRA). I do not engage in targeted advertising and do not use sensitive personal information to infer characteristics. Global Privacy Control signals are honored (see section 10).

17.3 Your rights

You may request to know what personal information I process about you and request its correction and deletion. You will not be discriminated against for exercising these rights. Requests can be sent by email to info@switech-solution.com, including through an authorized agent. I will verify your identity in a reasonable manner and usually respond within 45 days.

17.4 Children (COPPA)

This website is not directed to children under 13, and I do not knowingly collect data from children under 13. In any case, the forms may only be used by people aged 18 or over (see section 18).

18. Minimum age 18

My services are aimed at businesses and adults. The contact and waitlist forms may only be used by people who are at least 18 years old. You confirm this via a required checkbox before submitting.

In line with data minimisation, I do not verify age with identity documents. If I become aware that a person under 18 has submitted data to me, I will not continue to respond to the inquiry and will delete the data promptly. Parents and guardians can contact me about this at any time.

19. Changes to this privacy policy

I may update this privacy policy when processes, services or legal requirements change. The version published on this page with the stated date applies. Where material changes require consent, I will obtain it again.

20. Privacy contact