Privacy Policy

This policy explains which personal data we process when you visit devoio.com or contact us, why we do it and which rights you have. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

Controller

DEVOIO GmbH
Schulstrasse 101
8105 Regensdorf, Switzerland
Email: info@devoio.com
Phone: +41 43 550 05 26

For any question about data protection, write to us at info@devoio.com.

Visiting the website

When you open a page, your browser automatically sends technical data that our servers record in log files:

• IP address
• date and time of the request
• the page or file requested and the amount of data transferred
• the page you came from (referrer)
• browser, operating system and language

We use this data to deliver the website, to keep it stable and secure and to investigate attacks or misuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log files are deleted or anonymised as soon as they are no longer needed for these purposes, unless a security incident has to be investigated.

Hosting and content delivery

Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany, runs the servers of this website in data centres in Germany and processes the data described above on our behalf.

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, delivers the website and protects it against attacks (content delivery network, firewall, DDoS protection). Every request passes through Cloudflare's network, so Cloudflare processes your IP address and the request data. Cloudflare may set technically necessary security cookies, for example when a security check is shown. The legal basis is our legitimate interest in a fast and secure website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework and also uses the EU Standard Contractual Clauses. More at cloudflare.com/privacypolicy.

Cookies and similar technologies

We only use cookies that are necessary for the website to work, unless you allow more in the cookie banner. Storing necessary cookies on your device does not require consent (Art. 5(3) of the ePrivacy Directive and its national rules, e.g. § 25(2) TDDDG in Germany); we use them on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Optional services only run after you agree (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Your choice is stored in the devoio_consent cookie on your device. You can change or withdraw it at any time with "Cookie settings" at the bottom of every page; withdrawing does not affect the lawfulness of processing before that. After 180 days, or when we add a new service, we ask again.

Necessary Always active

Needed for the website and the contact form to work securely.

Statistics

Shows us which pages are visited and how fast they load. Cloudflare Web Analytics sets no cookies and does not follow you across websites.

Change cookie settings

Cloudflare Web Analytics

If you allow statistics, we use Cloudflare Web Analytics (Cloudflare, Inc., see above) to see how many people visit which pages, where they come from and how fast the pages load. The service sets no cookies, stores nothing on your device, creates no profiles and does not follow you across websites. Your IP address is only used to deliver the measurement script and to determine the country, not to identify you. Without your consent the script is not loaded at all.

Fonts and icons

All fonts and icons are hosted on our own server. Your browser does not connect to Google Fonts or any other font service.

Contact form and email

When you use the contact form or email us, we process your name, your email address and your message; for the contact form also the IP address it was sent from, to prevent misuse. We use this data only to answer your enquiry and for any follow-up. The legal basis is the preparation or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Messages from the form are sent by email to our mailbox. Our email is hosted by Google (Google Workspace, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We delete enquiries once they have been dealt with, unless statutory retention obligations require us to keep them.

Links to other websites

Our project overview links to the websites of clients and products, and the address in the menu opens Google Maps. These sites are only loaded when you click a link; their own privacy policies apply.

Recipients and transfers abroad

We do not sell personal data. We only share it with the service providers named above, as far as they need it for their task. Some of them may process data outside Switzerland and the EU/EEA, in particular in the USA. Such transfers are protected by an adequacy decision (e.g. the Data Privacy Framework) or by Standard Contractual Clauses.

Your rights

You have the right to access your personal data and to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to processing based on our legitimate interests. You can withdraw a consent at any time with effect for the future. To exercise your rights, write to info@devoio.com.

You can also lodge a complaint with a data protection authority, in particular in the country where you live or work. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

We do not use your data for automated decision-making or profiling.

Changes

We update this policy when our website or the law changes. The current version is always available on this page.