Privacy policy

Controller

SAN Digital Solutions GmbH, c/o Denis Aaren San, Sonnenrainweg 10, 9032 Engelburg, Switzerland. For questions about data protection and for your requests, write to datenschutz@sandigitalsolutions.com.

Visiting the website

The website is hosted by Nine Internet Solutions AG, Badenerstrasse 47, 8004 Zurich, in data centres in the Zurich region. Each visit processes technically necessary information: IP address, date and time, the page requested, the page visited before, and details of browser and operating system.

We need this information to deliver the website, keep it running securely and detect attacks. It is not combined with other data and is deleted automatically by the host after a short time. Under the GDPR, the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Contact form and e-mail

When you write to us through the form, we receive your name, your e-mail address, your company and phone number if you give them, how you would like us to reply, and your message. The information is sent encrypted (TLS) to our web server, encrypted there immediately with OpenPGP and delivered to us by e-mail in that form; only we can read it.

Sending and the mailbox run on Proton Mail by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Proton stores data in Switzerland or Germany. The same applies if you e-mail us directly.

To protect the form against abuse, the server keeps your IP address in memory for 10 minutes; it is not stored for this purpose. In addition, your browser solves a small computing task while you fill in the form, which slows down spam programs. It comes from our own server, without cookies and without third-party services.

We use your information only to answer your enquiry and, where appropriate, to send you a quote. We use your phone number only to call you back about your enquiry. Under the GDPR, the legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Customers and assignments

If your enquiry leads to an assignment, we manage contact details, quotes, contracts and invoices with bexio by bexio AG, Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland. bexio stores the data in data centres in Switzerland. Under the GDPR, the legal bases are the performance of the contract (Art. 6(1)(b) GDPR) and statutory retention obligations (Art. 6(1)(c) GDPR).

Cookies and consent

We only set cookies the website needs to work. We use nothing for statistics, advertising or social media. If you choose a colour scheme, your browser stores that choice locally; it is not sent to us.

To manage consent we use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. When the page loads, your browser fetches a script from Cookiebot. Cookiebot processes your shortened IP address, date and time, browser and device details, the address requested, a random identifier and your choice. Your choice is stored as proof and remembered in a cookie for up to 12 months. You can change or withdraw it at any time under "Cookie settings" in the footer.

Technically necessary information may be stored on your device without consent (in Germany Section 25(2) TDDDG). We keep proof of your consent because we are required to (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). The following overview from Cookiebot lists the individual cookies:

No other services

The website does not embed analytics services, advertising networks, social media elements or content from other platforms. Fonts, images and videos are served from our own server.

Disclosure and transfers abroad

We do not sell data. We pass it only to the service providers named here, who process it on our behalf, or to authorities where the law requires it.

Outside Switzerland, data is processed only in Germany (Proton) and Denmark (Cookiebot). According to the Swiss Federal Council, both countries provide an adequate level of data protection. For visitors from the EU: the European Commission recognises Switzerland as providing an adequate level of data protection.

Retention

We keep personal data only as long as the purpose requires or the law demands. Enquiries that do not lead to an assignment are deleted once they are dealt with, at the latest after 12 months. Records of assignments that form part of the accounts and accounting vouchers are kept for ten years under Art. 958f of the Swiss Code of Obligations.

Data security

The website is only reachable encrypted (HTTPS), and enquiries from the form are additionally encrypted with OpenPGP. Beyond that, we take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

Your rights

You can ask for information about your data, have it corrected or deleted, object to its processing and request a copy of your data in a common format. Under the GDPR you can also request restriction of processing and withdraw consent at any time with effect for the future. To do so, write to datenschutz@sandigitalsolutions.com. We may ask for proof of your identity.

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with the data protection authority of your country.

You are not obliged to give us any data. Without your name, e-mail address and message, however, we cannot answer your enquiry. We do not make automated individual decisions.

Changes

We update this policy when our processing changes. The version published here applies.