Privacy Policy

Zurich Digital Solutions GmbH (hereinafter "ZDS", "we" or "us") is the controller within the meaning of Art. 5 lit. j of the Swiss Federal Act on Data Protection (nDSG) and Art. 4 No. 7 GDPR for the processing of personal data described in this Privacy Policy.

This Privacy Policy applies to all personal data processed through our website at www.zurichds.com, including pages and sub-pages, as well as through direct communications (e-mail, telephone, contact forms) with ZDS.

This policy does not apply to third-party websites that may be linked from our site. We recommend reviewing the privacy policies of any third-party sites you visit.

1. Website usage data (automatically collected)

When you visit our website, our server automatically records certain technical data:

• IP address (anonymised after collection)
• Browser type and version
• Operating system
• Referring URL
• Date and time of access
• Pages visited and duration of visit

This data is processed solely for the purpose of ensuring the technical operation of the website and improving user experience. It is not linked to your identity.

2. Contact form and enquiry data

If you contact us via the contact form or by e-mail, we process the following data:

• Name and surname
• E-mail address
• Company name (if provided)
• Message content
• Any additional information you voluntarily provide

3. Cookies and tracking technologies

We use technically necessary cookies to operate this website. For details, please refer to our Cookie Settings page.

We process your personal data on the following legal bases:

• Contract performance (Art. 6 para. 1 lit. b GDPR; Art. 31 para. 2 lit. a nDSG): Processing necessary to perform a contract with you or to take pre-contractual steps at your request.
• Legitimate interests (Art. 6 para. 1 lit. f GDPR; Art. 31 para. 1 nDSG): Processing for our legitimate interests in operating and improving this website and communicating with prospective clients, provided your interests do not override ours.
• Consent (Art. 6 para. 1 lit. a GDPR; Art. 31 para. 1 nDSG): Where we have obtained your explicit consent for specific processing activities (e.g. analytics cookies, newsletter).
• Legal obligation (Art. 6 para. 1 lit. c GDPR): Where processing is required to comply with a legal obligation applicable to ZDS.

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law:

• Technical log data: Deleted or anonymised after 30 days.
• Contact enquiries: Retained for up to 3 years after last communication, unless an ongoing business relationship requires longer retention.
• Client data (contractual): Retained for 10 years in accordance with Swiss commercial law (OR Art. 958f).
• Cookie data: See our Cookie Settings page for individual cookie lifetimes.

After the applicable retention period, data is securely deleted or irreversibly anonymised.

We do not sell or rent your personal data to third parties. We may share data in the following limited circumstances:

• Service providers (data processors): We engage trusted third-party service providers (e.g. hosting, IT infrastructure) who process data on our behalf under data processing agreements consistent with nDSG and GDPR requirements.
• Legal requirements: We may disclose data if required to do so by law, court order or a competent authority in Switzerland or the EU.
• Google Fonts: This website loads fonts from Google Fonts. When you visit our site, your browser may establish a connection to Google's servers. Please refer to Google's privacy policy for details.

Where data is transferred to countries outside Switzerland or the EU/EEA, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses, adequacy decisions).

You have the following rights with respect to your personal data:

• Right of access (Art. 25 nDSG; Art. 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy.
• Right to rectification (Art. 32 nDSG; Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 32 nDSG; Art. 17 GDPR): You may request deletion of your data where there is no longer a legitimate basis for retention.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): You may request a machine-readable copy of data you have provided to us.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@zurichds.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority:

If you are located in the EU/EEA, you may also lodge a complaint with the data protection authority in your country of residence.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available at www.zurichds.com/privacy. Material changes will be communicated prominently on our website.

For any questions regarding this Privacy Policy, please contact us at hello@zurichds.com.