Legal Notice

1. Controller

The controller is Webzenz GmbH, Chaltenbodenstrasse 6e, 8834 Schindellegi, Switzerland, email: info@webzenz.ch. You can use this address for any data protection question and to exercise your rights.

2. Website hosting

This website consists of static pages. It is provided through Amazon Web Services (AWS): the files are stored in the Amazon S3 storage service and delivered through the Amazon CloudFront content delivery network. AWS processes the resulting data on our behalf.

For your browser to load the pages, technical data has to be transmitted, in particular your IP address, the address requested, the date and time, and information about your browser and device. Without this processing the website cannot be displayed. We have not planned any additional storage of access logs in our AWS account for this website. Independently of this, AWS may collect its own technical data to operate its services securely.

CloudFront usually answers requests from a server location close to you. Because AWS is a company based in the USA that operates servers worldwide, processing may also take place outside Switzerland, in particular in the USA. According to AWS, transfers to countries without an adequate level of data protection are covered by the standard contractual clauses in the AWS Data Processing Addendum and its Swiss addendum.

3. Contacting us

You can reach us by email at info@webzenz.ch or by phone on +41 43 589 68 06, or through the contact form on our contact page. We process the information you give us, for example your name, email address, phone number, company and the content of your enquiry, to answer your enquiry and, where relevant, to prepare a quote or an assignment.

When you submit the contact form, your browser sends your name, email address and message, your company and phone number if provided, and the website language, the page address and the time to our Amazon Web Services (AWS) account in the Frankfurt region. From there, the details are sent as an email to info@webzenz.ch through the Amazon Simple Email Service (section 4a). So that no enquiry is lost, we also store the details in our database at AWS (Amazon DynamoDB, Frankfurt region, encrypted); only authorised staff can view them, and they are deleted automatically after 24 months, or earlier at your request. To prevent misuse, we count requests per IP address and email address only as a keyed hash value and have these counters deleted automatically after a few days.

Our email is received and stored through the Google Workspace service. Google processes this data on our behalf; processing outside Switzerland, including in the USA, is possible. According to Google's data processing terms (Cloud Data Processing Addendum), transfers to countries without an adequate level of data protection rely on standard contractual clauses or a recognised data protection framework.

We keep your information for as long as necessary to handle your enquiry and any business relationship that results from it. Correspondence that we must keep under statutory retention obligations, for example business records under the Swiss Code of Obligations, is kept for the period required by law.

3a. Webzenz Agent (chat)

On our website you can write to the "Webzenz Agent", an AI-assisted chat that answers questions about our services. The answers are generated automatically by an AI language model, not by our staff. They may contain mistakes and are not a binding offer.

When you use the chat, we process your messages, the chat's answers, the time, the website language and a randomly generated conversation ID. To protect the service against misuse, your IP address is processed; we do not store it in clear text, only as a pseudonymised check value (hash) in request-limit counters that are deleted after about 25 hours at the latest. Please do not enter sensitive personal data in the chat, for example health information.

Conversations are stored in our Amazon Web Services (AWS) account in the Frankfurt (Germany) region (AWS Lambda and Amazon DynamoDB). AWS processes the data on our behalf (section 2).

So that the chat can answer, your messages and the conversation so far are sent through the OpenRouter service (OpenRouter, Inc., USA) to an AI language model from Google (Gemini, through Google Vertex AI). We have configured the routing to use only providers that do not keep the content after answering and do not use it for training. According to OpenRouter, it does not store content by default, only technical information such as the number of tokens processed. Processing may take place on servers outside Switzerland and the EEA, in particular in the USA (section 8). Your contact details from the enquiry form are not sent to the AI model.

During the conversation the chat asks for your name and email address: first optionally, and after eight answers as a condition for continuing. After ten answers you confirm your email address with a six-digit code that we send to you by email through the Amazon Simple Email Service (AWS, Frankfurt region). The code is valid for 60 seconds; we do not store it in clear text, only as a check value (hash). You can close the chat at any time without providing any details.

As soon as you submit your name and email address, we send them together with a summary and the conversation so far as an email to info@webzenz.ch through the Amazon Simple Email Service, where they are handled like other enquiries (section 3). If you later choose to give us your company name and/or phone number, we add them to the same enquiry and send a further email with the current details, including the verification status of your email address. We use your details to answer your enquiry and, where relevant, to prepare a quote. By submitting a form you agree that we may contact you about it; you can withdraw this consent at any time by writing to info@webzenz.ch.

So that your conversation is still there after you reload the page, the chat stores a random conversation ID in your browser's local storage (entry "webzenz-ai-chat-session"). On your first visit the chat window opens once by itself after a few seconds; so that this does not happen again, your browser stores the time in the entry "webzenz-ai-chat-welcome-shown". This entry contains no personal data and is not sent to us. You can delete both entries at any time in your browser settings.

Conversations without contact details are deleted automatically after 7 days. Once you have provided your name and email address, we keep the conversation and your details in the chat database for 90 days and then delete them automatically; for an email sent to info@webzenz.ch, the periods in section 3 apply. Technical backups of the database are overwritten after 7 days at the latest.

4. Newsletter sign-up

In the footer of the website you can sign up for our newsletter with your email address. When you submit the form, your browser sends your email address, the website language, the address of the page you signed up on and your consent to our Amazon Web Services (AWS) account in the Frankfurt region. We store these details with the time of sign-up in our mailing list (Amazon DynamoDB) and receive an email at info@webzenz.ch through the Amazon Simple Email Service (section 4a).

We use your email address to send you information about our services by email and keep it until you unsubscribe. To unsubscribe, simply send a short message to info@webzenz.ch; we will then remove your address from our mailing list. There is currently no automatic unsubscribe link and no confirmation step (double opt-in).

4a. Delivery through Amazon Simple Email Service

For the contact form and the newsletter sign-up, we use our own programs in our Amazon Web Services (AWS) account in the Frankfurt (Germany) region (AWS Lambda, Amazon DynamoDB and Amazon Simple Email Service). AWS processes the data on our behalf (section 2). The emails go only to info@webzenz.ch and are received there through Google Workspace (section 3). No other form or email delivery service is used.

5. Video on the home page (YouTube)

You can watch a video about Webzenz on our home page. Loading the page does not connect to YouTube or any other third party; the preview image comes from our own server. Only when you click the play button does a window open in which the YouTube player is loaded from the youtube-nocookie.com address.

From that moment, data such as your IP address, information about your browser and device and the page visited is sent to YouTube, and YouTube may store and read cookies or similar technologies in your browser. According to Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for this processing for people in Switzerland. Google may also process the data on servers outside Switzerland and Ireland, for example in the USA. Google's privacy policy applies.

No other third parties are involved in playing the video. If you want to avoid this transfer, do not start the video. Closing the window removes the player.

6. Links to social networks

In the footer we link to our profiles on Facebook, Instagram, X and LinkedIn. These are plain links: visiting our website does not load any content, buttons or scripts from these networks. Only when you click a link are you taken to the provider's platform, where its own privacy terms apply.

7. Cookies, analytics and tracking

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. It shows us how our website is used, for example which pages are visited, where visits come from and which features (such as the chat or the forms) are used. We use these reports to improve the website and our services.

In particular the following data is processed: pages viewed and interactions, date and time, referring page, browser, operating system and device information, screen size and the approximate location (country, region, city) that Google derives from your IP address. Google Analytics 4 does not store IP addresses. To recognise returning visitors, Google Analytics sets cookies (_ga and _ga_<ID>, stored for up to 2 years) containing a random identifier. We do not send names, email addresses, phone numbers or chat content to Google. Google signals and advertising features are switched off. We keep the analytics data for no longer than 14 months. Google processes the data on our behalf and may transfer it to the USA (section 8).

You can refuse Google Analytics at any time: choose "Decline" in the cookie notice or, if you have already made a choice, clear this website's site data in your browser and answer the notice again. After you decline, Google Analytics sets no further cookies and existing analytics cookies are deleted. Google then only receives signals without an identifier (for example that a page was viewed), which do not allow you to be recognised. You can also use Google's browser add-on. We store your choice in the cookie notice in your browser's local storage so the notice does not appear again. We do not load fonts from third parties. YouTube cookies can only be set once you start the video (section 5).

If you use the chat, it also stores a conversation ID in your browser's local storage (section 3a). The chat does not set cookies.

8. Transfers abroad

As described in sections 2 to 5, personal data may be disclosed to providers that process it outside Switzerland, in particular in the USA and, for the YouTube video, in Ireland. Under Swiss law, Ireland is recognised as providing an adequate level of data protection. The USA is recognised as adequate only for companies certified under the Swiss-U.S. Data Privacy Framework. For our processors AWS and Google, transfers to countries without an adequate level of protection rely on standard contractual clauses under their contracts and, for Google, possibly on a recognised data protection framework (sections 2 and 3). The services loaded when the video starts (section 5) only receive your data if you start the video yourself; the respective providers are responsible for that processing.

For the chat (section 3a), your messages are sent to OpenRouter, Inc. in the USA and to Google (Vertex AI), whose servers may be located worldwide. For recipients in countries without an adequate level of data protection we rely on a certification under the Swiss-U.S. Data Privacy Framework or on the providers' contractual safeguards, where available.

For Google Analytics (section 7), data may be transferred to Google LLC in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework; in addition, the standard contractual clauses in Google's terms apply.

9. Retention

We process personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. After that we delete or anonymise it. The specific criteria are set out in sections 3, 3a, 4 and 7.

10. Your rights

Under the FADP you can in particular ask whether and which personal data we process about you and have incorrect data corrected. You can also ask us to delete your data or to stop a particular processing, and, where the legal conditions are met, request a copy or transfer of your data in a common electronic format. These rights are not unlimited: we may in particular restrict, defer or refuse a request where statutory retention obligations, overriding interests or other legal grounds apply. We may ask for further information to verify your identity. Please send your request to info@webzenz.ch.

If you believe that processing breaches data protection rules, you can report it to the Federal Data Protection and Information Commissioner (FDPIC; in German: EDÖB). On the basis of such a report the FDPIC may open an investigation and will inform a data subject who made the report of the steps taken and the outcome; the reporting person is not, however, a party to the proceedings. You can assert your own claims, for example for deletion or for a processing to stop, before the civil courts. More information is available at www.edoeb.admin.ch.

11. Changes

We update this privacy information when our data processing changes. The version published on this website applies.

Last updated: 30 October 2026