The processing of your data is governed by the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). We use the terms “data”, “personal data” and “personal information” interchangeably.
1. Controller
ELVADATA AG
Schützenstrasse 10
CH-3052 Zollikofen
Email info@elvadata.ch
2. Contact for data protection questions
For questions about your personal data and to exercise your rights, contact us at datenschutz@elvadata.ch.
3. Principles and legal bases
We process personal data only to the extent necessary for the purposes described below. Where processing is based on your consent, we inform you separately; you can withdraw your consent at any time with effect for the future.
Where the GDPR applies, we rely on Art. 6(1)(a) (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) and (f) GDPR (legitimate interests, such as the secure and stable operation of this website).
4. Visiting this website
This website is delivered via the platform of Vercel Inc. (USA). When a page is accessed, technically necessary data is processed: IP address, date and time, the page requested, the previously visited page, and browser and operating system. We need this data to deliver the website and to ensure its security and stability.
Fonts and program libraries are hosted on our own server; no data is transmitted to Google Fonts or other providers to display them.
5. Cookies and browser storage
For some functions we store small entries in your browser’s local storage. They are technically necessary and do not leave your device:
- Your language choice and whether you have closed the notice about another language version.
- Your choice in the cookie settings; it is valid for 12 months.
- Whether you have hidden the chat assistant’s greeting.
We only use cookies and similar technologies for analytics and marketing (section 9) if you agree to this in the cookie banner. You can change your choice at any time via “Cookie settings” in the footer of every page. You can also block or delete cookies in your browser; some functions may then not be fully available.
6. Chat assistant “Elva”
The chat assistant’s answers are generated directly in your browser from the questions and answers on this website. Your input is neither transmitted to us or to third parties nor stored.
7. Contacting us
If you contact us via the enquiry form, by email or by phone, we process the information you provide (for example name, company, email address, phone number and your message), including the communication metadata, to answer your enquiry and to prepare a possible collaboration.
The enquiry form on this website transmits your details in encrypted form to a function on the Vercel platform (section 3) and from there by email via a Google mail server to our mailbox. No third-party form service is involved, and the details are not stored on the website. We do not send an automated confirmation; we reply to you personally.
8. Newsletter
If you subscribe to our newsletter, we process your email address and any further details you provide in order to send you information about our services, events and news. This is based on your consent. You can unsubscribe at any time via the link in every issue or by emailing us.
9. Analytics and marketing services
To evaluate the use of our website, improve our services and measure our advertising, we use the following services with your consent. The providers use cookies or similar technologies for this purpose. Google services are provided by Google Ireland Limited or Google LLC (USA); data may be transferred to Google servers in the USA.
Google Analytics and Google Firebase
Google Analytics evaluates how our website is used, for example which pages are visited, how long a visit lasts and how visitors find us. For apps we may use Google Firebase. We receive the evaluations in aggregated form; we do not link them to your name or other information you have given us.
DashThis
We use DashThis by Moment Zero (Canada) to compile evaluations from our analytics and advertising services into reports. This involves processing aggregated usage data.
Google Ads conversion tracking and remarketing
If you reach our website via a Google ad, a cookie is set that expires after 30 days. This tells us how many people visited certain pages after clicking on an ad; we do not receive any information that could identify you personally. With remarketing, Google can show you our ads on other websites based on your visit to our site.
Google Marketing Platform
The Google Marketing Platform helps us to evaluate the use of the website and to show you relevant advertising. To this end, a pseudonymous identifier is assigned to your browser via a cookie; Google uses it to record which ads were displayed and clicked and assigns interest categories to your browser.
Google Places API
When you enter addresses, we may show suggestions from Google Places. For this purpose your input and technical data are transmitted to Google; the Google Maps terms of use apply.
You can withdraw your consent at any time in the cookie settings. You can also deactivate personalised advertising in your Google ad settings. More information: Google privacy policy, privacy at Firebase, DashThis terms, Google Maps terms of use.
10. LinkedIn
We have a presence on LinkedIn. If you visit our page there or interact with our posts, the LinkedIn privacy policy applies.
11. Links to other providers
Among other things, the website links to TeamViewer (remote support), to my elvadata (existing client access) and to job advertisements on jobs.ch. As soon as you open such a link, the privacy policy of the respective provider applies.
12. Disclosure to third parties
We only disclose personal data to the extent necessary for the purposes described: to service providers acting on our behalf (such as hosting, analytics, advertising and newsletter dispatch), to partners we involve in providing our services, to third parties in the context of a restructuring or sale of our company or parts of it, and to authorities where we are legally obliged to do so.
13. Transfers abroad
Some service providers are based or have servers outside Switzerland, in particular in the USA (Vercel, Google, LinkedIn). Where a recipient country does not provide adequate data protection, we base the transfer on the safeguards provided for by law, in particular standard contractual clauses or a certification of the recipient under the Swiss-U.S. or EU-U.S. Data Privacy Framework, or on a statutory exception such as your consent.
14. Retention
We delete personal data as soon as the purpose of the processing has been fulfilled and no statutory retention obligations remain.
15. Data security
We protect your data against loss, unauthorised access, misuse and alteration with technical and organisational measures that we review regularly. The website is transmitted in encrypted form (HTTPS). Our information security management system follows the requirements of ISO 27001.
16. Your rights
Within the scope of applicable law, you have the right to
- request information about which of your data we process,
- have incorrect data corrected,
- request erasure or restriction of processing,
- object to processing,
- receive your data in a common format or have it transferred to another controller
- and withdraw consent at any time.
To do so, contact datenschutz@elvadata.ch. You also have the right to lodge a complaint with a supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).
17. Changes
We will update this privacy policy if our processing or the legal requirements change. The version published here applies. This policy is available in German, English and French; the German version is authoritative.