Privacy Policy
Contents
🏢1. Controller
The controller responsible for data processing under the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the GDPR is:
| Controller | eSysAgency – Alin Ghiorghiu |
| Owner | Alin Ghiorghiu |
| UID/VAT no. | CHE-250.946.601 |
| Address | Schürbungertweg 10, 8302 Kloten |
| kontakt@esysagency.ch | |
| Phone | 044 554 91 91 |
📐2. Principles of data processing
We are committed to lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality in the processing of personal data.
📇3. What data we collect
Website visits (automatic)
- •IP address (anonymised after 24h)
- •Date/time of access, URLs accessed
- •Browser type, operating system, referrer, amount of data transferred, HTTP status code
Contact form
- •First and last name, email, phone (optional), company name (optional)
- •Content of the message and time of the enquiry
Conclusion of a contract
- •Complete contact and company details, bank details
- •System access credentials and project materials
Newsletter
Email address with date/time of subscription; double opt-in required.
🎯4. Purposes of processing
- •Performance of contracts and communication
- •Accounting and statutory obligations
- •Operation and optimisation of the website
- •Marketing — only with consent
⚖️5. Legal bases
Processing is based on the performance of a contract (Art. 6(1)(b) GDPR), consent (Art. 6(1)(a) GDPR), a legal obligation (Art. 6(1)(c) GDPR) or legitimate interests (Art. 6(1)(f) GDPR). Consent may be withdrawn at any time by email to kontakt@esysagency.ch.
🔗6. Disclosure to third parties & tools used
Data is not disclosed without express consent, except where required by law. The following processors are used:
- •Google LLC (Analytics, Ads) — USA (standard contractual clauses)
- •Meta Platforms — USA (standard contractual clauses)
- •Cloudflare Inc. — USA (standard contractual clauses)
- •HostON.ro — EU/Romania
- •Google Workspace — USA (standard contractual clauses)
🖥️8. Hosting & servers
The website is hosted by HostON.ro (Romania/EU). SSL/TLS encryption protects data transmission (recognisable by “https://” and the padlock symbol).
✅9. Your rights
Under the revFADP and the GDPR, you have the following rights:
- •Right of access — which data, for what purpose, how long it is stored
- •Right to rectification of inaccurate data
- •Right to erasure, provided there is no statutory retention obligation
- •Right to restriction of processing
- •Right to data portability (machine-readable format)
- •Right to object to processing based on legitimate interests
⏳10. Retention period
- •Contact enquiries: 12 months after the end of the communication
- •Customer data/contracts: 10 years (Swiss Code of Obligations, CO)
- •Invoices: 10 years (Swiss tax and commercial law)
- •Server log files: 7 days (IP anonymisation after 24h)
- •Newsletter subscriptions: until unsubscribed
- •Cookie consents: 12 months
- •Google Analytics: 14 months
🔒11. Data security
Technical measures: SSL/TLS encryption, password-protected access with 2FA, regular updates, daily encrypted backups, Cloudflare firewall, IP anonymisation.
Organisational measures: access restrictions, confidentiality undertakings, regular reviews, access logging. In the event of data security breaches involving a significant risk, the FDPIC will be notified within 72 hours.
✉️12. Changes & contact
We reserve the right to amend this privacy policy. The current version is always available at esysagency.ch/datenschutz. For questions about data processing, please contact us at kontakt@esysagency.ch or by phone on 044 554 91 91.