Privacy policy

Which services we use

• Google Analytics 4
• Google Tag Manager
• Cloudflare Turnstile (on the support form)
• Cloudflare (CDN, Pages hosting)

Contact information

If you have any questions or concerns about the protection of your data by us, you can contact us at any time using the contact form. Responsible for the data processing that takes place via this website is

What data we collect from you and from whom we receive this data

We primarily process personal data that you transmit to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:

• Identification data you submit via the support form (first name, last name)
• Contact data (email address)
• The license tier you selected (Free, Signals Premium, Autotrade)
• Content of your support request (subject and message text)
• Online identifiers (e.g. cookie identifiers, IP addresses, device and browser characteristics)
• Usage data collected by our analytics service when you have given consent (pages visited, events triggered, approximate location derived from IP)
• Bot-prevention signals collected by Cloudflare Turnstile when you submit the support form (IP address, browser characteristics, interaction patterns — no third-party cookies and no cross-site tracking)

We do not collect master data such as date of birth, postal address or phone number through this website.

Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We pay attention to transparent and proportionate processing. If, in exceptional cases, we are unable to comply with these principles, data processing may still be lawful because there is a justification. In particular, the following grounds for justification may apply:

• Your consent
• The performance of a contract or pre-contractual measures
• Our legitimate interests, unless your interests prevail

How can you withdraw your consent?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another justification. You can withdraw your consent at any time by sending an e-mail to the address given in the legal notice. Data processing that has already taken place is not affected by this.

In which cases can we pass on your data to third parties?

Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). The categories of recipients are as follows:

• Consulting companies (legal advice, taxes, etc.)
• IT service providers (web hosting, support, cloud services, website design, etc.)
• Providers of tracking, conversion and advertising services

We ensure that these third parties and our affiliated companies comply with the requirements of data protection and treat your personal data confidentially. We may also be obliged to disclose your personal data to authorities.

Visit our social media channels

We may have embedded links to our social media channels on our website. You can see this in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels. In this case, the social media providers are informed that you have accessed their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the providers.

Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide. If the level of data protection does not correspond to that in Switzerland, we will carry out a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link:

commission.europa.eu/publications/standard-contractual-clauses…

How long do we store your data?

We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected. Data that we store when you visit our website is stored for twelve months. An exception applies to analysis and tracking data, which may be stored for longer. We store contract data for longer, as we are obliged to do so by law. In particular, we must store business communications, concluded contracts and accounting documents for up to 10 years. If we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

How do we protect your data?

We will store your data securely and take all reasonable measures to protect your data from loss, access, misuse or alteration. Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your inquiries to companies affiliated with us. Your data will also be treated confidentially in these cases. Within our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser.

What rights do you have?

Right to information

You can request information about the data we have stored about you at any time. Please send your request for information together with proof of identity to us. You also have the right to receive your data in a commonly used file format if we process your data automatically and if:

• you have given your consent to the processing of this data
• you have provided data in connection with the conclusion or execution of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party. The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons or because we require more detailed information from you. You will be informed of the extension in good time, at least in text form.

Deletion and correction

You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to store it unchanged or if your request conflicts with a legal permission. Please note that exercising your rights may conflict with contractual agreements and may have a corresponding impact on the performance of the contract (e.g. premature termination of the contract or cost consequences).

Legal process

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner:

edoeb.admin.ch

Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on this website; you will not be informed separately.

Provision of the website and creation of log files

What information do we receive and how do we use it?

When you visit, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for system administration, statistical, backup or tracking purposes. These are

• The name of your internet service provider
• Your IP address (if applicable)
• The version of your browser software
• The operating system of the computer used to access the URL
• The date and time of access
• The website from which you visit
• The search terms you used to find the URL

Why are we allowed to process this data?

This data cannot be assigned to a specific person and is not merged with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is absolutely necessary for the operation of the website; you therefore have no option to object to this.

Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). GA4 uses cookies and similar technologies to help us understand how visitors interact with the website (pages visited, events triggered, approximate location derived from IP, device and browser characteristics). GA4 truncates IP addresses by design before any storage, so your full IP address is not stored. We have configured GA4 with Google Consent Mode v2: until you accept analytics cookies in our cookie banner, GA4 only receives anonymous, cookie-less signals; once you consent, full analytics measurement is enabled. The data generated may be transmitted to and stored on Google servers in the USA, safeguarded by the EU standard contractual clauses. You can withdraw your consent at any time by changing your selection in the cookie banner, and you can additionally install the Google Analytics opt-out browser add-on at: tools.google.com/dlpage/gaoptout

Google Tag Manager

We use Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Tag Manager is a tag management system that allows us to manage measurement and marketing tags through a single interface. The Tag Manager itself does not set any cookies and does not collect any personal data on its own. It only delivers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been carried out at domain or cookie level — for example, by withdrawing your consent in our cookie banner — it remains in place for all tracking tags that are loaded via Google Tag Manager. Further information is available at: policies.google.com/privacy

Cloudflare Turnstile

We use Cloudflare Turnstile on our support form to protect against spam and automated submissions. The service is provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare"). Turnstile is a privacy-preserving alternative to traditional CAPTCHA challenges: it does not set third-party cookies, does not track visitors across websites, and does not display targeted advertising. Turnstile analyses passive signals (e.g. IP address, browser characteristics, interaction patterns, and Cloudflare's threat reputation data) to determine whether the form is being submitted by a real person or by automated processing. The data collected in this context is automatically transmitted to Cloudflare upon use of the support form. The legal basis for this processing is our legitimate interest in preventing abuse of our support form. Further information is available at: cloudflare.com/privacypolicy

Cloudflare (CDN and Pages hosting)

This website is hosted on Cloudflare Pages and delivered through Cloudflare's global content delivery network (CDN). The service is provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) and its European subsidiaries. When you access the website, data such as your IP address, the date and time of access, the browser you are using, the operating system and the requested resources is automatically processed by Cloudflare for the purpose of delivering the website to your device, mitigating attacks (DDoS protection), and ensuring availability. Cloudflare acts as a processor on our behalf on the basis of a data processing agreement. Cloudflare operates a globally distributed network with European edge locations; where data is transferred to Cloudflare entities outside Switzerland or the EU/EEA, the transfer is safeguarded by the EU standard contractual clauses. Further information on Cloudflare's data protection practices is available at: cloudflare.com/privacypolicy