Privacy Policy

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, we rely on the legal bases listed in section 9.

We only use optional analytics and advertising services if you have consented beforehand.

This website runs on Firebase App Hosting by Google (Google Cloud). The servers are located in a data centre in the Netherlands (region europe-west4).

When you visit the website, connection data is processed for technical reasons, in particular your IP address, time of access, page requested, referrer and browser information. We need this data to deliver the website and keep it secure. It is only kept for as long as necessary for these purposes.

When you contact us via the contact form, we process the following information:

• name and email address
• company (optional)
• your message
• the selected topic and the page from which you submitted the form

• Purpose: We use this information solely to respond to your enquiry.
• Transmission: Your message is delivered by email via Microsoft Azure Communication Services (data location Switzerland) to our Microsoft 365 mailbox.
• Retention: We delete the data once it is no longer needed to handle your enquiry, at the latest after 2 years, unless a statutory retention obligation applies.

If you have consented to analytics and advertising, we report the successful submission of the form as an event to Google Analytics and Google Ads (see sections 6 and 7). Only the selected topic is included, not your name, email address or message.

On your first visit we ask whether you allow optional analytics and advertising services. Without your consent, neither Google Analytics nor Google Ads is loaded and no related cookies are set.

We store your choice in your browser's local storage (entry "swai-cookie-consent", 180 days). After that, we ask you again.

You can change or withdraw your consent at any time with effect for the future, via "Cookie settings" at the bottom of every page or directly here: Cookie settings

With your consent, we use Google Analytics 4 to understand how our website is used, for example which pages are visited, where visitors come from and how many contact requests we receive. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, USA.

Google Analytics sets the cookies "_ga" and "_ga_<ID>" with a lifetime of up to 2 years. It processes usage data such as pages visited, time on site, device and browser information and approximate region. Google Analytics 4 does not store IP addresses. Usage data is kept in Google Analytics for no longer than 14 months.

With your consent, we use Google Ads (provider as in section 6). This lets us measure whether a visit came from one of our ads and led to a contact request (conversion tracking). It also allows us to show ads to visitors of our website later on other websites in the Google advertising network (remarketing).

For this, the cookie "_gcl_au" (lifetime 90 days) is set. Google may also use cookies on its own domains (e.g. google.com, doubleclick.net) and link the data to your Google account if you are signed in. You can also turn off personalised ads in your Google settings.

• Google Privacy Policy
• Google My Ad Center

We manage our blog posts with the content management system Builder.io (Builder.io, Inc., USA). Images in blog posts are loaded directly from Builder.io's content delivery network, which means your IP address is transmitted to Builder.io for technical reasons. We have turned off Builder.io's analytics and tracking features.

Where the GDPR applies, we process personal data on the following bases:

• Google Analytics and Google Ads: your consent (Art. 6(1)(a) GDPR)
• Contact form: pre-contractual steps or our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR)
• Hosting, server log files and delivery of blog images: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR)

We do not sell personal data. Personal data is only shared with the service providers named above, who process it on our behalf (for Google Ads, partly also under Google's own responsibility), and with authorities where we are legally required to do so.

Personal data may be transferred to the EU (including Ireland and the Netherlands) and to the USA. According to the Swiss Federal Council, EU member states provide an adequate level of data protection. Google LLC and Microsoft Corporation are certified under the Swiss-U.S. Data Privacy Framework. Transfers to Builder.io, Inc. are based on standard contractual clauses.

You have the following rights. An email to the address below is enough to exercise them.

• Right of access: You can request information about the personal data we process about you.
• Right to rectification: You can request the correction of inaccurate data.
• Right to erasure: You can request the deletion of your data.
• Right to object: You can object to the processing of your personal data.
• Withdrawal: You can withdraw any consent you have given at any time (see section 5).
• Right to data portability: You can request your data in a common electronic format.
• Right to complain: You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The website is only served over an encrypted connection (HTTPS).

We update this privacy policy when our data processing or the legal requirements change. The version published on this page applies.