Privacy Policy

Effective September 2025

This policy is aligned with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing is:

WhoisArt GmbH

Förrlibuckstrasse 185

8005 Zürich

Switzerland

Contact us

2. Data We Collect

We process personal data that you provide to us directly or that we collect through our website:

  • Contact form data · name, email address, and message content
  • Business relationship data · contact details, communication history, and project information
  • Technical data · server logs, IP address, and performance metrics for security and stability

3. Purpose of Processing

We process your data for the following purposes:

  • Responding to your inquiries and requests
  • Performing our contractual obligations with clients
  • Ensuring the security, stability, and performance of our infrastructure
  • Complying with legal obligations

4. Legal Basis

We process your personal data based on the following legal grounds:

  • Contract performance · processing necessary to fulfill our contractual obligations
  • Legitimate interest · website operation, security, and technical monitoring
  • Consent · where you have given explicit permission
  • Legal obligation · where processing is required by law

5. Data Sharing and Transfer

We use select third-party providers for specific functions:

Personal data is processed in Switzerland and the EEA.

We do not sell your personal data.

6. Cookies and Tracking

We use minimal tracking technologies:

  • Essential cookies · Cloudflare security cookies to protect against malicious traffic
  • Analytics · Cloudflare Web Analytics (privacy-first, no cookies, aggregated metrics only)
  • Marketing · none

7. Data Retention

We retain personal data only as long as necessary for the stated purposes or as required by law. Technical logs are retained for a limited period, then deleted. Business data is retained for the duration of the relationship and applicable statutory retention periods.

8. Your Rights

Under applicable data protection law, you have the right to:

  • Access · request information about your personal data
  • Rectification · correct inaccurate data
  • Erasure · request deletion of your data
  • Restriction · limit how we use your data
  • Objection · object to certain processing activities
  • Portability · receive your data in a portable format

To exercise these rights, contact us. You may also lodge a complaint with the Swiss Federal Data Protection Commissioner (EDÖB).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website with the effective date indicated above.