Privacy Policy

Privacy Policy
Last updated on April 3, 2025

1. What do we do?
2. What information do we provide?
3. Definitions of terms
4. How can you contact us?
5. Does our privacy policy remain the same?
6. General principles
7. Individual data-processing operations

1. What do we do?

syrto AG (Alustrasse 81, 3940 Steg) operates the website www.syrto.ch (hereinafter “we”). On this website you can learn about our organization, use our online services, and get in touch with us.
Protecting your personal data is very important to us. In this Privacy Policy, we explain clearly and transparently which data we collect via our website and how we handle it. For this reason, we use the icons of the PRIVACY ICONS association, which help you quickly understand how we process your data.

2. What information do we provide?

Which data are collected on www.syrto.ch
Under what conditions we process your data and for what purposes
How long we retain your data
When disclosure to third parties is permitted
How we process your data (“individual data-processing operations”)
When and how you can object to data processing
Which rights you have and how to exercise them

3. Definitions of terms
3.1 What are personal data?
Personal data are all information relating to an identified or identifiable natural person—for example, name, address, date of birth, email address, or telephone number. Data about personal preferences, such as leisure activities or memberships, also count as personal data.

3.2 What are special-category personal data?
Data concerning religious, philosophical, political or trade-union views or activities; data on health; data on administrative or criminal proceedings and sanctions; and data concerning social-welfare measures are considered special-category personal data. We may collect and process such data only when necessary and will treat it with a higher level of confidentiality.

3.3 What does “processing” personal data mean?
“Processing” means any operation performed on personal data, regardless of the means and procedures used—especially collection, storage, use, alteration, disclosure, archiving, deletion or destruction of data.

3.4 What does “disclosure” of personal data mean?
This means transmitting or otherwise making personal data accessible, for example by publication or disclosure to a third party.

4. How can you contact us?
If you have questions or concerns about our data protection practices, you can contact us at any time by email at remo.schnyder@syrto.ch. The entity responsible for the data processing conducted through this website is:syrto AG
Remo Schnyder
Alustrasse 81
3940 Steg

5. Does our privacy policy remain the same?
We may change this Privacy Policy at any time. Any updates will be published on www.syrto.ch; you will not be notified separately.

6. General principles
6.1 Which data do we collect from you and from whom?

Primarily, we process personal data that you submit to us or that we collect when operating our website. In some cases, we may also receive personal data about you from third parties, for example:
Master data (name, address, date of birth, etc.)
Contact data (mobile number, email address, etc.)
Financial data (e.g. bank details)
Online identifiers (e.g. cookie IDs, IP addresses)

6.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this Privacy Policy, ensuring transparency and proportionality. Where these principles cannot be met, processing may still be lawful if a legal basis applies, such as:
Your consent;
Performance of a contract or pre-contractual measures;
Our legitimate interests, provided your interests do not override them.

6.3 How can you withdraw your consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of that consent unless another legal basis applies. You may withdraw your consent at any time by emailing the address in the imprint. Processing already carried out is not affected.

6.4 In which cases can we disclose your data to third parties?
a. General principle
We may engage third-party service providers or affiliated companies to process your data (so-called “processors”), such as:
Accounting, fiduciary and auditing firms
Consulting firms (legal advice, tax, etc.)
IT service providers (web hosting, support, cloud services, web design, etc.)
Payment service providers
Providers of tracking, conversion and advertising services

We ensure these parties comply with data-protection requirements and treat your data confidentially. We may also be legally obliged to share your data with authorities.

b. Disclosure to partners and affiliates
We work with various companies and partners who may display their offers on our website. Such third-party offers are clearly marked as “advertising.” If you take up such an offer, we may transmit your personal data (e.g. name, contact details, communications) to the relevant partner, who is then independently responsible for those data under its own privacy policy.

c. Visiting our social-media channels
We embed links to our social-media profiles on our website (usually via icons). If you click them, you’re redirected to those platforms, which then learn that you came from our site. They may use that information for their own purposes; we have no control over or insight into how they process it.

d. Transfer abroad
In some cases, personal data may be transferred to service providers abroad. They are bound to the same data-protection standards as we are. If the destination country’s level of protection does not match Swiss standards, we conduct a risk assessment and implement contractual or technical safeguards (e.g. EU Standard Contractual Clauses).

6.5 How long do we retain your data?
We store personal data only as long as necessary to fulfill the purposes for which they were collected. Data collected when you visit our website are kept for twelve months (analytics and tracking data may be retained longer). Contractual data are kept longer—as required by law, up to ten years for accounting and tax purposes—then locked and used only for billing and tax compliance.

6.6 How do we protect your data?
We keep your data secure and take all reasonable measures against loss, unauthorized access, misuse or alteration. Our employees and partners with data access are bound by confidentiality. We use SSL encryption at the highest level supported by your browser.

6.7 What rights do you have?
a. Right of access
You may request information about the personal data we hold on you at any time. Please send your request with proof of identity to remo.schnyder@syrto.ch. If we process your data automatically, you may also request the data in a common electronic format—provided you consented to processing or the data were provided by you in connection with a contract. We may refuse or limit your request if legal obligations or overriding interests apply. We must respond within 30 days, but may extend this period for legal, technical or volume reasons, notifying you in writing.

b. Right to deletion and correction
You may request deletion or correction of your data at any time. We may refuse if legal retention obligations or other legal grounds prevent it. Your exercise of these rights may affect contractual relationships and their performance.

c. Legal recourse
If you believe your rights have been violated, you may bring legal action or file a complaint with the Swiss Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch.

7. Individual data-processing operations
7.1 Website provision and creation of log files

What information do we collect and how do we use it?
When you visit www.syrto.ch, certain data are automatically logged on our servers or those of our service providers for system administration, statistics, backups or tracking. These include:
Your ISP’s name
Your IP address (sometimes)
Browser version
Operating system
Date and time of access
Referring website
Search terms used

Why may we process these data?

They are not linked to any person and are not merged with other data. We store them to ensure website functionality and IT-security—our legitimate interest.

Can you prevent logging?
These data are stored only for as long as needed to achieve the purpose, then deleted. As they’re essential for website operation, you cannot object.

7.2 Web beacons
We may use web beacons (“tracking pixels”), visible or invisible images loaded when you visit the site. They collect the same data as log files for the same purposes. You cannot opt out.

7.3 Profiling
Some personal data are processed automatically to evaluate personal aspects. We use these assessments to inform you of services or products tailored to your needs—e.g. targeted marketing, market and opinion research.

7.4 Contact via email
What do we collect and how do we use it?
If you email us, we process:
Your email address
Content, subject line and date of your message
Any contact details you provide (name, telephone, address)

Why may we process these data?
To handle your inquiry and any follow-up questions—our legitimate interest or pre-contractual measures.

Security notice
Emails may be read or altered during transmission without your knowledge. Spam filters may block emails flagged as spam.

7.5 Success and reach measurement
Our notifications may contain links or tracking pixels that record whether an individual message was opened or which links were clicked. This may also be done on a personal level to measure effectiveness. We need this statistical data to make our communications effective, user-friendly and reliable.

7.6 Cookies
How do cookies work?
Cookies are data files stored by your browser on your device when you visit our site. They do not harm your device and contain no viruses.

What do we collect and how do we use it?
Most are “session cookies,” deleted at the end of your visit. Others remain until you delete them and allow us to recognize your browser on return, preserving settings like language and location.

Why may we use cookies?
To make our website more user-friendly, effective and secure—our legitimate interest.How can you prevent cookie collection?
You control cookie storage via your browser settings. Disabling cookies may prevent full functionality.

7.7 Hotjar
We use Hotjar Ltd. (Malta) to analyze website usage. Data processed may include:
IP address (anonymized)
Date and time of visit
Technical info (browser, OS, screen resolution)
On-site interactions
Referrer URL
Session duration

Purpose: To measure regional interest, improve website display, optimize marketing campaigns and understand user behavior. Data are anonymized before transmission.

7.8 Google Web Fonts
We use Google Web Fonts for consistent typography. Your browser downloads fonts from Google’s servers, which learn your IP address and that you visited our site. If your browser doesn’t support Web Fonts, a default font is used. This serves our interest in a uniform and attractive presentation.

7.9 Webflow
Webflow is a visual website-building platform requiring no coding. It offers drag-and-drop design, grid systems, templates, animations, custom code, and responsive sites. It supports integration of cookie banners, privacy-policy pages and secure data transmissions to meet data-protection standards.

7.10 Cloudflare
Cloudflare is a CDN and web-security platform that speeds up content delivery, improves performance and protects against DDoS attacks (e.g. via IP whitelisting and traffic distribution).

7.11 Amazon Web Services
AWS provides data storage and delivery, hosting infrastructure, scalability, CDN services, database management and support for applications like e-commerce and CMS. It also offers security services such as firewalls, encryption and access controls. Advanced features include AI, machine learning, IoT and big data, which can enhance site performance. Overall, the use of AWS on a website ensures reliable operation.

7.12 Google Hosted Libraries
These are Google-hosted JavaScript libraries (e.g. jQuery) that improve functionality and performance by offering animations, form validation, data manipulation, etc. Developers link to them rather than host them locally, saving time and bandwidth; Google updates them regularly for security and performance.

7.13 reCAPTCHA
We use Google reCAPTCHA (Google Ireland Ltd. and Google LLC) to distinguish humans from bots. It may process:
IP address (anonymized)
Technical data (browser, OS, screen resolution)
User interactions with the CAPTCHA

Purpose: To prevent spam and automated abuse while allowing genuine users to proceed. Data may be transferred globally, including to the USA.

7.14 PrivacyBee
PrivacyBee AG (Bern, Switzerland) provides a service that automatically generates a tailored Privacy Policy for our site via JavaScript. Data processed include IP address, browser type and version, operating system, and timestamp of access to our Privacy Policy.Purpose: To ensure the policy displays correctly on your device. The data are governed by our general disclosure rules, but remain with PrivacyBee. You can prevent this by disabling JavaScript, though some site functions may break; no specific opt-out for PrivacyBee is offered, as it’s essential for displaying our Privacy Policy.