Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is:
ElaraTeq Sagl
Carrale di Mezzo 10
6533 Lumino, Switzerland
Company No.: CHE-251.226.490
Email: contact@elarateq.ch

2. Scope

This privacy policy applies to the website elarateq.ch and all related subdomains. It describes what personal data we collect, how we use it, and what rights you have regarding your data. This policy complies with the Swiss Federal Act on Data Protection (nFADP/nDSG) and the EU General Data Protection Regulation (GDPR).

3. Automatically Collected Data

When you visit our website, the server automatically records the following technical information:

  • IP address (anonymized)
  • Browser type and version
  • Operating system
  • Pages visited and date/time of access
  • Referring website (referrer)
  • Volume of data transferred

This data is used exclusively to ensure the technical operation of the website, security, and for aggregate statistical analysis. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and Local Storage Technologies

Our website uses cookies and similar technologies (localStorage) to ensure the website functions properly and, with your consent, for analytical purposes.

Name Type Duration Purpose
PHPSESSID Session cookie Session User session management
_csrf_token Technical cookie Session CSRF attack protection
cookieConsent localStorage Permanent Stores cookie preferences
cookieConsentDate localStorage Permanent Cookie consent date
lang localStorage Permanent Site language preference

Analytics cookies (Google Analytics) are only activated with your explicit consent via the cookie banner. You can change your preferences at any time via the "Manage Cookies" link in the website footer.

5. Voluntarily Provided Data

When you use our contact form, we collect the following data:

  • Name (required)
  • Email address (required)
  • Phone number (optional)
  • Company name (optional)
  • Subject (optional)
  • Message (required)
  • Service of interest (optional)

We also collect technical data associated with the submission (IP address and User-Agent) for security and abuse prevention purposes. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in security (Art. 6(1)(f) GDPR).

6. Legal Bases for Processing

The processing of your personal data is based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR / Art. 31(1) nFADP): for analytics cookies and marketing communications.
  • Contractual/pre-contractual performance (Art. 6(1)(b) GDPR): to respond to your inquiries via the contact form and to provide our services.
  • Legitimate interest (Art. 6(1)(f) GDPR): for the technical operation of the website, security, and abuse prevention.

7. Purposes of Processing

  • Responding to inquiries submitted via the contact form
  • Providing and improving our services
  • Anonymous statistical analysis of website usage (only with consent)
  • Ensuring website security and preventing abuse
  • Fulfilling legal obligations

8. Google Analytics

Our website is configured to use Google Analytics, a web analytics service provided by Google LLC. Google Analytics is activated only with your explicit consent via the cookie banner. When activated, Google Analytics uses cookies to analyze website usage. The information generated is transmitted to Google servers in the United States. We use IP anonymization, so your IP address is truncated within the EU/EEA before transmission. You can revoke your consent at any time via "Manage Cookies" in the website footer.

9. Google Fonts

Our website uses Google Fonts, a web font service provided by Google LLC, for uniform font display. When you visit a page on our site, your browser loads the necessary fonts directly from Google's servers. In this process, your IP address is transmitted to Google. For more information, see Google's privacy policy: policies.google.com/privacy.

10. Third-Party Processors and Data Recipients

Your data may be shared with the following service providers who act as processors on our behalf:

  • Infomaniak Network SA (Switzerland) — Website and data hosting. Data remains in Swiss data centers.
  • Google LLC (USA) — Google Fonts (font loading) and Google Analytics (only with consent).
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg/USA) — Payment processing via the PayPal link on the website.

We do not sell or share your personal data with third parties for marketing purposes.

11. International Data Transfers

Some of our processors are located outside Switzerland and the EU/EEA, particularly in the United States. In such cases, data transfers are safeguarded by:

  • EU Standard Contractual Clauses (SCCs)
  • EU-US Data Privacy Framework (DPF) for certified providers
  • Appropriate safeguards under Art. 46 GDPR and Art. 16 nFADP

12. Data Retention Periods

  • Contact form data: 2 years from the inquiry
  • Server logs: 90 days
  • Analytics cookies (Google Analytics): 14 months
  • localStorage data: until manually deleted by the user
  • Contractual data: 10 years (Swiss legal retention obligations)

13. Your Rights

Under the nFADP and GDPR, you have the following rights:

  • Right of access: obtain information about the personal data we process.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your data, subject to legal retention obligations.
  • Right to restriction: request restriction of processing in certain circumstances.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest.
  • Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at: contact@elarateq.ch

14. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with:

FDPIC — Federal Data Protection and Information Commissioner
Feldeggweg 1, CH-3003 Bern
Website: www.edoeb.admin.ch

EU/EEA citizens may also contact the data protection authority in their country of residence.

15. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. These include: SSL/TLS encrypted connection, hosting in certified Swiss data centers (Infomaniak), restricted data access, and regular software updates.

16. Changes to This Policy

We reserve the right to update this privacy policy at any time. The current version is always available on this page. We encourage you to review it periodically.

17. Contact

For questions about this privacy policy or the protection of your data, contact us:
ElaraTeq Sagl
Carrale di Mezzo 10, 6533 Lumino, Switzerland
Email: contact@elarateq.ch