Privacy Policy

The controller for the processing of personal data on this website is ZNIPP GmbH, with its registered office in Horw, Switzerland.

The full company details — address, commercial register entry, phone number and the person responsible for the content — are in the legal notice.

This website is rendered on the server and delivered from there. On every request your browser transmits the details that are technically necessary for that:

• your IP address
• the date and time of the request
• the address requested (URL)
• browser type and operating system (user agent)
• the language your browser prefers (Accept-Language)
• the page you came from, where your browser sends it (referrer)

Without these details the page cannot be delivered; the language header additionally decides which language it is delivered in. Our application keeps no access log of its own; when an error occurs it is logged with technical details so that we can fix it. TODO(confirm): Who operates the infrastructure, in which country the servers stand, and how long logs kept by the layers in front of the application are retained.

Of its own accord, this website sets a single cookie and stores one value in your browser's local storage:

• 'language' (cookie): records which language you are viewing the website in — on a first visit the one your browser reports, after that the one you chose. The server then delivers the page in that language straight away. It is set without an expiry date and therefore lasts for the browser session.
• 'user' (local storage): records the same language setting in the browser, so the page does not switch to another language after loading.

Neither holds an identifier by which individual visitors could be recognised, and neither is transmitted to third parties. You can delete both at any time in your browser settings. When audience measurement is active, Google Analytics cookies are added to these; see the next section.

This website can include Google Analytics. The analytics code is loaded only when a measurement ID is configured for the running site; if none is configured, no measurement takes place and no data is transmitted to Google.

When measurement is active, your browser loads code from Google, and Google sets cookies or comparable identifiers that attribute repeat visits to the same device. Among other things, your IP address, the pages you open, how long you stay, and technical details about your browser and device are transmitted to Google. We evaluate this solely to understand which content is being read.

TODO(confirm): Whether Google Analytics is in fact switched on in the production environment, which Google entity is the contracting party, which countries the data is transferred to, how long Google retains it, and on what basis the measurement runs without asking for consent first.

Every typeface on this website is served from our own server — the text faces (Sora and Space Grotesk) as well as the icon font (Material Symbols). Your browser loads them from us and contacts no third party to do so.

No further external services are embedded: no embedded videos, no maps, no social media widgets, no advertising networks. The references to LinkedIn and Facebook are ordinary links — data reaches those providers only once you click such a link.

There are two forms on this website. Both send your entries to our own backend system:

• Contact form: name, email address and your message. We process these details in order to answer your enquiry.
• Meeting booking: name, email address, the slot you chose and — if you write one — your note about the meeting. We process these details in order to arrange and hold the meeting.

The language you are using the website in is sent along with each submission. We ask for nothing else. TODO(confirm): On what system and in which country this backend runs, whether enquiries are additionally forwarded by email or into a calendar or CRM system, and how long enquiries and bookings are kept.

On the support page we offer two programs for download. The download itself runs through our server, and the same technical details arise as when a page is requested.

The remote support client (RustDesk) is preconfigured to connect to our server at support.znipp.ch. A session only comes about once you tell us the ID and the one-time password the program shows, and it ends when you close the program.

The Linux installation script downloads the packages onto your device directly from GitHub, which means GitHub learns your IP address.

ZNIPP Check examines a Windows PC ahead of a migration and transmits its report to our backend under the identifier contained in the program's file name. TODO(confirm): What a ZNIPP Check report contains, how long it is kept, and whether remote support sessions produce logs.

We pass on personal data only as far as the purpose described here requires. Involved are:

• the operator of the infrastructure on which the website and the backend run
• Google, for the fonts and — where active — for audience measurement
• GitHub, if you run the Linux installation script

We do not sell personal data and do not pass it on for third-party advertising. TODO(confirm): Which service providers operate the infrastructure and whether data processing agreements are in place with them.

We keep personal data for as long as the purpose we collected it for requires, and for as long as statutory retention obligations apply. After that we delete it.

TODO(confirm): Concrete periods for server and error logs, contact enquiries, meeting bookings and ZNIPP Check reports.

The website is delivered over an encrypted connection (HTTPS), and so are form submissions. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and alteration.

Under the Swiss Data Protection Act (DSG) you can ask us whether, and what, personal data we process about you. You can have incorrect data corrected and data deleted, object to the processing and, where the statutory conditions are met, request that your data be handed over or transferred.

If you are in the EU or the EEA, you additionally have the rights set out in Articles 15 to 21 GDPR:

• access to the data processed (Art. 15)
• rectification of incorrect data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing based on a legitimate interest (Art. 21)

A message to us is enough to exercise them. We may ask you to prove your identity so that data does not reach the wrong person. Independently of that, you can lodge a complaint with the data protection supervisory authority responsible for you.

Please address questions about this policy, and requests to exercise your rights, to ZNIPP GmbH — by email or to the postal address given in the legal notice.

We update this policy when the processing described here changes. The version published here is the one that applies; the date at the top shows how current it is.