Privacy notice

1. Data controller

The controller for personal data processed via this website is Whitestein Technologies AG, Hinterbergstrasse 20, CH-6312 Steinhausen, Switzerland. For any privacy-related question, please write to sales@whitestein.com.

2. Data we collect

Information you provide

When you submit a contact form or write to us by email, we receive your name, email address, employer or organisation (if provided), and the content of your message.

Information collected automatically

• Server logs: IP address, user-agent, requested URL, referrer, timestamp.
• Cookies and similar technologies — see our Cookie notice for the full list and how to control them.

3. Purposes and legal bases

• Responding to your enquiry — performance of pre-contractual or contractual steps you have requested (Art. 6(1)(b) GDPR; Art. 31(2)(a) Swiss FADP).
• Securing and operating the site — our legitimate interest in protecting the service against abuse (Art. 6(1)(f) GDPR; Art. 31(1) Swiss FADP).
• Improving the site with analytics — only with your prior consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the cookie banner.

4. Retention

We keep contact-form messages for as long as needed to handle the enquiry and any subsequent business relationship, and thereafter for the retention periods required by Swiss commercial law (typically 10 years for accounting-relevant correspondence). Server logs are retained for up to 90 days. Optional analytics data is retained for up to 14 months.

5. Recipients

Personal data is accessed only by employees of Whitestein Technologies AG who need it to perform their duties. We rely on processors for hosting, email delivery, and analytics, bound by written data-processing agreements. No data is sold or made available for third-party advertising.

6. International transfers

Where data is transferred outside Switzerland or the EEA, we rely on the European Commission's adequacy decisions, the Swiss Federal Council's adequacy lists, or the EU Standard Contractual Clauses with the Swiss addendum as appropriate.

7. Your rights

Subject to the conditions set by the GDPR and the Swiss FADP, you have the right to access your personal data, request rectification or erasure, restrict or object to processing, and receive your data in a portable format. To exercise any of these rights, contact us at sales@whitestein.com.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you are in the EU, with your local supervisory authority.

8. Security

We apply appropriate technical and organisational measures — including TLS in transit, access controls, and the principle of least privilege — to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorised disclosure.

9. Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be highlighted on this page.