--- title: "Privacy" description: "Privacy policy of zwei und eins gmbh: no cookies, no analytics. What the contact form stores, and for how long." url: https://zweiundeins.gmbh/en/privacy language: en --- # Privacy Last updated: October 2026 The following information is intended to explain what data we process on our website and your rights in this regard. We take the protection of your personal data seriously, and we process it only in accordance with the legal requirements. "Personal data" means any information concerning an identified or identifiable natural person. This includes all the basic data provided to us, such as, in particular, your name, address, e-mail, telephone number and IP address. It does not cover statistical data or anonymised data which cannot be directly associated with you as an individual. "Data subject" means a natural person whose personal data is processed; "processing" means any operation involving personal data (for example, combining data with an identifier such as a name, an identification number or location data). We have no influence whatsoever on the current or future design or content of any sites linked or referred to. This applies to all links and references included on our own website. Liability for illegal, inaccurate or incomplete content, and in particular for damage arising from the use or non-use of such information, rests solely with the operator of the site to which reference is made, and not with the operator of the site merely making reference (via links) to the publication in question. To the extent legally permissible, any liability is excluded. ## 1. Legal basis This data protection statement is in line with the requirements of federal legislation on data protection. ## 2. Responsibility for data processing Responsible for data processing on our website: zwei und eins gmbh Kistlerweg 1 3270 Aarberg Switzerland [info@zweiundeins.gmbh](mailto:info@zweiundeins.gmbh) VAT: CHE-283.935.768 If you have any data protection concerns, you can contact us as follows: [info@zweiundeins.gmbh](mailto:info@zweiundeins.gmbh) ## 3. Website hosting This website is a single program running on a server we operate. The same server also delivers its fonts, scripts and images. The server is in a data centre in Switzerland and is provided by Infomaniak Network SA, Geneva, Switzerland. ## 4. Recording and processing of personal data Where permitted and in our view appropriate, we process the personal data that we collect during the operation of our website from its users. We use these data to operate and secure the website. For this purpose, the web server records technical access data when our website is accessed: - IP address (i.e. a unique address that identifies your computer on the internet) - Date and time - Requested page - Browser We do not combine these data with other data sources, we do not evaluate them for statistics, and we use no analytics tools. ## 5. Cookies, tracking, forms and third-party services This website uses no cookies and no tracking. It loads no fonts, scripts or other content from third-party servers (such as Google Fonts or content delivery networks): everything your browser needs to display it comes from our own server. ### Live server statistics The homepage shows live figures from our server. For this, your browser keeps a Server-Sent Events (SSE) connection to our server open on every page of this website; the answer to the contact form arrives over the same connection, and so does the new version of the open page after we have updated the website. This connection transmits no personal data beyond what every request to a web server contains. The page creates a random identifier for the open tab for it, which says nothing about you. When you send the contact form, the server stores this identifier in the database together with the form's answer (after sending, with your name), so that the answer reaches your tab even after the server restarts. It deletes this entry after two hours at most. ### Contact form You can get in touch with us through the contact form. We store your name, your email address and your message in a database on our server and send them by email to info@zweiundeins.gmbh. This email account is run by Hostpoint AG, Rapperswil-Jona, Switzerland ([Hostpoint's privacy notice](https://www.hostpoint.ch/en/hostpoint/contact-gtc.html#datenschutz)). 90 days after sending, we delete the message from the database; Section 7 applies to the email in our mailbox. This information is used solely to process your request and will never be shared with third parties without your consent. To limit abuse, the server accepts at most five messages an hour from the same IP address. For this, it keeps the IP address and the time in memory for an hour at most; it does not store them in the database. ## 6. Sharing of data and transfer of data abroad Use of your personal data in any way other than those mentioned in Sections 4, 5 and 7, in particular the sale, transmission or transfer of data to third parties (in Switzerland or abroad), is expressly excluded. ## 7. Period for which personal data are stored As soon as your personal data are no longer required for the above purposes, they will be deleted wherever possible or anonymised. We delete messages from the contact form from the database 90 days after they were sent by email. We delete the web server's access data (Section 4) after 30 days at most. We make a daily backup copy of the database and keep it for 30 days; until then, a deleted message may still be contained in a backup copy. ## 8. Security We take appropriate technical and organisational security measures to protect your personal data against any unauthorised access or misuse. On our website, for security reasons and to protect the transmission of confidential information, we use SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and the padlock icon is displayed. Once SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties. ## 9. Right to information, stop processing and erasure ### Information On written request, we will inform you at any time as to what personal data is stored when you visit our website. ### Rectification, erasure, restriction of processing, right to object You may have personal data which is stored when you visit our website rectified, blocked or erased by us. In addition, you may object to the disclosure of certain personal data. Exempt from erasure is data which we require to complete outstanding tasks or to uphold existing rights and claims, as well as data which we are legally obliged to retain. ### Data disclosure and transfer On written request, you have the right to receive personal data which is stored when you visit our website in a structured, commonly used and machine-readable format (e.g. PDF file). You also have the right to request the return of data provided to us when visiting our website. ### Right to withdraw consent Insofar as, in using our website or availing yourself of our services, you have given consent to the collection, storage, use, etc., of personal data, you may withdraw this consent at any time. The withdrawal of consent can be sent, by e-mail or in writing, to the body specified in Section 2. The effects of the withdrawal of consent are restricted to the storage and use of personal data which may not already, on legal grounds, be stored and used even without your consent. In addition, the withdrawal of consent does not affect the lawfulness of previous processing based on your consent. ### Supervisory authority The supervisory authority responsible for data protection matters is the Federal Data Protection and Information Commissioner ([www.edoeb.admin.ch](https://www.edoeb.admin.ch/en)). ### Exercising these rights To exercise your rights, please contact the body specified in Section 2, providing proof of your identity (copy of ID, passport or other official document). Please note that your rights may be restricted insofar as this is legally provided for or necessary on account of overriding public or private interests. For example, the right to data transfer is not applicable in particular for the processing of personal data which is necessary for the performance of a task carried out in the public interest. ## 10. Amendments We may modify this Data Privacy Statement at any time without notice. The valid version is always the version currently published on our website.