Privacy policyPrivacy policy

This policy describes which personal data WP24 GmbH processes through this website, what it is used for and what rights you have. The site deliberately embeds no analytics services, no tracking cookies, no social media plug-ins and no third-party fonts. The only personal data that arises is what you actively send us through the contact form.

Stand: 30 September 2026

When you fill in and submit the contact form, we collect:

• name, company (optional), e-mail address, telephone number and location
• the service you are interested in, how urgent your enquiry is, your preferred means of contact and your message
• the time of your consent and the sub-page the enquiry was sent from
• for abuse prevention: your browser identifier (user agent) and salted hashes of your IP address and your e-mail address (for this purpose the IP address itself is not stored, and neither address can be reconstructed from its hash)

When you merely visit the website, our hosting provider Cloudflare processes access data as a technical necessity, namely your IP address, date and time, the page requested, the browser identifier and the amount of data transferred. This is required to deliver the pages, to keep the service stable and secure and to defend against attacks. Processing takes place in Cloudflare data centres distributed worldwide; pages are normally delivered from a location close to you. We ourselves do not evaluate this access data and do not combine it with other data. The technical logs of our server function contain no names, contact details or message texts from the contact form.

We use the details from the contact form solely to handle your enquiry, to get in touch with you and to prepare any quotation or engagement that may follow. The browser identifier and hashes serve only technical abuse and spam prevention (limiting repeated form submissions, for instance) and are not evaluated for any other purpose. The technical access data serves the operation, stability and security of the website.

Processing of the form data is based on the consent you give when submitting the form, and on the performance of pre-contractual measures where your enquiry is directed at a quotation or an engagement. Processing of technical access data and abuse prevention are based on our overriding legitimate interest in a secure and stable operation of the website. Where the EU General Data Protection Regulation (GDPR) applies in an individual case, processing is additionally based on Art. 6(1)(a), (b) and (f) GDPR.

We use the following processors to operate the website, with each of whom a data processing agreement is in place:

• Supabase: Supabase Inc. (USA). Hosting of the database in which your enquiry is stored. The database is located on servers in Switzerland (Zurich). Access by Supabase from the USA, for support purposes for instance, cannot be ruled out.
• Resend: Resend, Inc. (USA). Sending the confirmation e-mail to you and the notification e-mail to WP24 GmbH. In doing so, the recipient address, the content of the e-mail (for the notification, also your details from the form) and the delivery status are processed temporarily on Resend’s servers.
• Cloudflare: Cloudflare, Inc. (USA). Hosting and delivery of the website, processing of the contact form on its way to the database, and technical access data (see above).
• cyon: cyon GmbH (Switzerland). Operation of our e-mail mailbox, which holds the notification about your enquiry and our further e-mail correspondence with you, and of the domain wp-24.ch.

Supabase, Resend and Cloudflare are based in the USA. Your data may therefore reach the USA or be accessible from there. The USA does not generally offer an adequate level of data protection. We therefore ensure appropriate safeguards, namely standard contractual clauses (with the adaptations required for Switzerland) or, where the recipient is certified for it, the Swiss-U.S. Data Privacy Framework. Beyond that, no data is passed on to third parties and none is used for advertising purposes, except where we are legally obliged to do so.

We store your enquiry and the details accompanying it for 24 months from the time of submission, and delete it thereafter. If a contractual relationship has arisen from your enquiry, the statutory retention obligations apply, in particular the ten-year commercial retention period under Art. 958f of the Swiss Code of Obligations. The notification e-mail about your enquiry and our further correspondence with you are held in our e-mail mailbox and are deleted according to the same periods. Resend keeps sending logs only for a short time. Irrespective of that, you may request early deletion of your enquiry at any time; see your rights below.

This website sets only one technically necessary cookie: it is called “wp24_locale”, remembers the language you chose with the language switch, contains no personal data and is stored for one year. We set no other cookies. The website uses no analytics or marketing tools and embeds no social media plug-ins. Fonts are self-hosted, so no connection to third parties such as Google Fonts is made when the page is loaded.

The website and the contact form are transmitted encrypted (TLS). Your IP address is not stored by us in clear text but only as a salted hash, from which the original address cannot be recovered. The database is not publicly accessible, and access to stored enquiries is restricted to authorised WP24 GmbH staff.

In respect of the data we hold about you, you have in particular the following rights:

• information about what data we have stored about you
• rectification of inaccurate data
• erasure of your data, insofar as no statutory retention obligation stands in the way
• restriction of processing
• objection to the processing of your data
• release of your data in a common format (data portability)
• withdrawal of consent given, with effect for the future

To exercise any of these rights, an informal message to us is enough (contact details above).

You also have the right to lodge a complaint with the competent supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and where there is a connection to the EU, with the data protection authority of your country of residence. https://www.edoeb.admin.ch

We update this privacy policy whenever the processing changes, for example when a new processor is engaged. The version published on this page is the one that applies.