Privacy Policy
Last updated: April 2026
1. Data Controller
The data controller is:
ElaraTeq Sagl
Carrale di Mezzo 10
6533 Lumino, Switzerland
Company No.: CHE-251.226.490
Email: contact@elarateq.ch
2. Scope
This privacy policy applies to the website elarateq.ch and all related subdomains. It describes what personal data we collect, how we use it, and what rights you have regarding your data. This policy complies with the Swiss Federal Act on Data Protection (nFADP/nDSG) and the EU General Data Protection Regulation (GDPR).
3. Automatically Collected Data
When you visit our website, the server automatically records the following technical information:
- IP address (anonymized)
- Browser type and version
- Operating system
- Pages visited and date/time of access
- Referring website (referrer)
- Volume of data transferred
This data is used exclusively to ensure the technical operation of the website, security, and for aggregate statistical analysis. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
4. Cookies and Local Storage Technologies
Our website uses cookies and similar technologies (localStorage) to ensure the website functions properly and, with your consent, for analytical purposes.
| Name | Type | Duration | Purpose |
|---|---|---|---|
| PHPSESSID | Session cookie | Session | User session management |
| _csrf_token | Technical cookie | Session | CSRF attack protection |
| cookieConsent | localStorage | Permanent | Stores cookie preferences |
| cookieConsentDate | localStorage | Permanent | Cookie consent date |
| lang | localStorage | Permanent | Site language preference |
Analytics cookies (Google Analytics) are only activated with your explicit consent via the cookie banner. You can change your preferences at any time via the "Manage Cookies" link in the website footer.
5. Voluntarily Provided Data
When you use our contact form, we collect the following data:
- Name (required)
- Email address (required)
- Phone number (optional)
- Company name (optional)
- Subject (optional)
- Message (required)
- Service of interest (optional)
We also collect technical data associated with the submission (IP address and User-Agent) for security and abuse prevention purposes. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in security (Art. 6(1)(f) GDPR).
6. Legal Bases for Processing
The processing of your personal data is based on the following legal grounds:
- Consent (Art. 6(1)(a) GDPR / Art. 31(1) nFADP): for analytics cookies and marketing communications.
- Contractual/pre-contractual performance (Art. 6(1)(b) GDPR): to respond to your inquiries via the contact form and to provide our services.
- Legitimate interest (Art. 6(1)(f) GDPR): for the technical operation of the website, security, and abuse prevention.
7. Purposes of Processing
- Responding to inquiries submitted via the contact form
- Providing and improving our services
- Anonymous statistical analysis of website usage (only with consent)
- Ensuring website security and preventing abuse
- Fulfilling legal obligations
8. Google Analytics
Our website is configured to use Google Analytics, a web analytics service provided by Google LLC. Google Analytics is activated only with your explicit consent via the cookie banner. When activated, Google Analytics uses cookies to analyze website usage. The information generated is transmitted to Google servers in the United States. We use IP anonymization, so your IP address is truncated within the EU/EEA before transmission. You can revoke your consent at any time via "Manage Cookies" in the website footer.
9. Google Fonts
Our website uses Google Fonts, a web font service provided by Google LLC, for uniform font display. When you visit a page on our site, your browser loads the necessary fonts directly from Google's servers. In this process, your IP address is transmitted to Google. For more information, see Google's privacy policy: policies.google.com/privacy.
10. Third-Party Processors and Data Recipients
Your data may be shared with the following service providers who act as processors on our behalf:
- Infomaniak Network SA (Switzerland) — Website and data hosting. Data remains in Swiss data centers.
- Google LLC (USA) — Google Fonts (font loading) and Google Analytics (only with consent).
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg/USA) — Payment processing via the PayPal link on the website.
We do not sell or share your personal data with third parties for marketing purposes.
11. International Data Transfers
Some of our processors are located outside Switzerland and the EU/EEA, particularly in the United States. In such cases, data transfers are safeguarded by:
- EU Standard Contractual Clauses (SCCs)
- EU-US Data Privacy Framework (DPF) for certified providers
- Appropriate safeguards under Art. 46 GDPR and Art. 16 nFADP
12. Data Retention Periods
- Contact form data: 2 years from the inquiry
- Server logs: 90 days
- Analytics cookies (Google Analytics): 14 months
- localStorage data: until manually deleted by the user
- Contractual data: 10 years (Swiss legal retention obligations)
13. Your Rights
Under the nFADP and GDPR, you have the following rights:
- Right of access: obtain information about the personal data we process.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data, subject to legal retention obligations.
- Right to restriction: request restriction of processing in certain circumstances.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interest.
- Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise your rights, contact us at: contact@elarateq.ch
14. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with:
FDPIC — Federal Data Protection and Information Commissioner
Feldeggweg 1, CH-3003 Bern
Website: www.edoeb.admin.ch
EU/EEA citizens may also contact the data protection authority in their country of residence.
15. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. These include: SSL/TLS encrypted connection, hosting in certified Swiss data centers (Infomaniak), restricted data access, and regular software updates.
16. Changes to This Policy
We reserve the right to update this privacy policy at any time. The current version is always available on this page. We encourage you to review it periodically.
17. Contact
For questions about this privacy policy or the protection of your data, contact us:
ElaraTeq Sagl
Carrale di Mezzo 10, 6533 Lumino, Switzerland
Email: contact@elarateq.ch