Privacy Policy

01 Controller and scope

[Review by a Swiss legal professional before launch]

This Privacy Policy explains how personal data is processed when you visit this website or contact us. The controller responsible for data processing is [LEGAL_NAME], [OWNER_NAME], sole proprietorship (Einzelfirma), [STREET], [POSTCODE CITY], Switzerland. Email: hello@eudaetechnologies.com.

We process personal data in accordance with the revised Swiss Federal Act on Data Protection (nDSG / revDSG, in force since 1 September 2023) and its ordinance. Where the EU General Data Protection Regulation (GDPR) applies to visitors in the EU or EEA, we also comply with it; the rights described below apply accordingly.

02 What data we process and why

We process as little personal data as possible. Depending on how you use the website, this may include: technical data that your browser sends when you visit a page (such as IP address, date and time, page requested, browser type); the details you enter in the contact form (name, email address, company, area of interest, message); and the details you provide when you book a call (name, email address, chosen time and any notes).

We use this data only to provide and secure the website, to answer your enquiry, to prepare and hold the meeting you have booked and, if we work together, to prepare and perform a contract. We do not use your data for advertising, do not sell it and do not create profiles. We do not make automated individual decisions within the meaning of Art. 21 nDSG, and we protect personal data with appropriate technical and organisational measures.

For visitors subject to the GDPR, the legal bases are Art. 6(1)(b) GDPR (steps prior to entering into a contract) for enquiries and bookings, and Art. 6(1)(f) GDPR (our legitimate interest in a secure, functioning website) for server logs. [Verify whether an EU representative under Art. 27 GDPR is required.]

03 Contact form (Web3Forms)

When you submit the contact form, the data you entered is transmitted to Web3Forms, a form-processing service that we use as a processor. Web3Forms forwards the message to our email inbox, which is hosted by [EMAIL_PROVIDER, COUNTRY] [verify]. The data is sent only to answer your enquiry.

Web3Forms is operated by [OPERATOR, COUNTRY] and processes data on servers that may be located outside Switzerland, including in the United States [verify]. Web3Forms [stores submissions for RETENTION PERIOD / does not store the content of submissions] [verify]. [Verify whether data is processed in India or another country without Swiss adequacy recognition; if so, standard contractual clauses are required.]

We keep your enquiry and our correspondence in our email system for as long as needed to deal with it, and delete it at the latest [12 months] after the last contact unless a contract follows or a legal retention obligation applies.

04 Booking a call (Cal.com)

To book a call we use Cal.com, provided by Cal.com, Inc., United States. No connection to Cal.com is made when you load our website. Data is only transmitted to Cal.com when you click a “Book a call” link and are taken to the booking page.

On the booking page, Cal.com processes the details you enter (name, email address, chosen time, notes) and technical data in order to schedule the meeting and send confirmations. Cal.com acts as our processor for this booking data [verify]. Booking details are synchronised with our calendar ([CALENDAR_PROVIDER]) and the meeting takes place via [VIDEO_TOOL] [verify]. Cal.com’s own privacy policy also applies to its booking page [verify whether EU data hosting is selected for the account].

05 Hosting and server logs (Cloudflare Pages)

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., United States, which delivers the pages through a global network of data centres. When you visit the website, Cloudflare processes technical data such as your IP address, the requested page, the time of the request and your browser type in server logs.

This processing is necessary to deliver the website securely and protect it against misuse and attacks. Cloudflare acts as our processor; log data is retained only for a short period in accordance with Cloudflare’s policies [verify current retention period].

06 No cookies, no tracking

This website does not use cookies, analytics or tracking tools, and it does not load fonts, scripts or other content from third parties when you open a page. [Verify before launch: Cloudflare Web Analytics, Bot Fight Mode and challenge pages are disabled, and the contact form uses no captcha; otherwise disclose the strictly necessary security cookies or third-party script involved.]

If you switch between the light and dark theme, your choice is stored locally in your browser (localStorage) so that it is remembered on your next visit. This setting never leaves your device and is not sent to us or anyone else. You can delete it at any time by clearing your browser’s site data.

07 Disclosure of data abroad

Some of the service providers named above (Web3Forms, Cal.com, Cloudflare, our email and calendar providers) are based in, or process data in, the United States or other countries outside Switzerland.

Software engineering for our projects is carried out by an independent subcontractor based in Spain (EU), [SUBCONTRACTOR_NAME], [CITY], Spain, who acts as our processor (Art. 9 nDSG) under a written data processing agreement [verify that the agreement is signed]. The subcontractor receives enquiry and project data only where needed to answer your request or carry out a project, and is bound to the same confidentiality and data protection obligations as we are.

We disclose personal data abroad only where the Swiss Federal Council has recognised the destination country as providing adequate data protection (this includes EU and EEA countries and, for certified companies, the United States under the Swiss–US Data Privacy Framework), or where appropriate safeguards are in place, in particular the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC), or where a statutory exception applies [verify the certification status of each provider].

08 Retention

We keep personal data only for as long as necessary for the purpose for which it was collected. Enquiries that do not lead to a contract are deleted at the latest [12 months] after the last contact. Contract and accounting records are kept for the statutory retention period of ten years under Swiss law.

09 Your rights

Under the nDSG you have the right to request information about whether and which personal data we process about you (right of access), to have incorrect data corrected (rectification), to have your data deleted or its processing restricted, and to receive data you have provided to us in a common electronic format or have it transferred to another controller (data portability). You may also object to processing and withdraw any consent you have given, with effect for the future.

If you believe that we process your data unlawfully, you can report this to the Swiss Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch) or bring a claim before the civil courts. Visitors from the EU or EEA can also lodge a complaint with the data protection authority in their country.

10 Contact for privacy requests

For any question about data protection or to exercise your rights, please write to hello@eudaetechnologies.com or to [LEGAL_NAME], [OWNER_NAME], [STREET], [POSTCODE CITY], Switzerland. We may ask for proof of identity before answering a request. We generally respond within 30 days.

11 Changes to this policy

We may update this Privacy Policy when our website, services or the legal requirements change. The current version published on this page applies. The date of the last update is shown at the top of this page.