# Privacy policy

I collect only what I need to answer your request. This statement gives the details under the revised Swiss Data Protection Act and under the GDPR.

## Controller

DevArc GmbH, Gempenstrasse 52, 4133 Pratteln, Canton of Basel-Landschaft, Switzerland.
Represented by Juraj Kicko Horbaľ, managing director.
Contact for data protection requests: juraj@devarc.ch.

## Applicable law

This statement follows the revised Swiss Data Protection Act (DSG, in force since 1 September 2023) and its ordinance.
If you are located in the European Union or the EEA, the General Data Protection Regulation (GDPR) applies in addition.

## Purposes of processing

Contact form and enquiries: answering your message, clarifying questions and preparing a proposal.
Performance of a contract: preparing, concluding and running a consulting or development engagement, including invoicing.
Website operation: serving the pages, language choice and appearance setting.
Log files and security: fault analysis as well as detecting and preventing abuse and attacks.

## Legal bases

Art. 6(1)(b) GDPR for processing within a contract or its preparation.
Art. 6(1)(f) GDPR for the secure operation of the website, for preventing abuse and for answering enquiries outside a contract.
Art. 6(1)(a) GDPR for processing based on your consent, such as optional cookies. You may withdraw consent at any time.
Art. 6(1)(c) GDPR for statutory retention obligations.
Under Swiss law the processing is based on Art. 6 and Art. 31 DSG and follows the principles of lawfulness, proportionality and purpose limitation.

## Categories of data

Contact data: name, email address, optionally company and phone number.
Content data: your project description, the answers from the questionnaire or the builder, chosen language and contact preference.
Technical data: IP address, date and time of access, requested URL, referrer, browser and system identification in the server log files.
Communication data: content and metadata of the email correspondence.

## Recipients and processors

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: hosting of the website and of the Odoo system, data centre in Germany.
Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland: registration of the domain devarc.ch and operation of the name servers.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: Google Workspace for email traffic of the domain devarc.ch.
No data is passed on for advertising purposes and no data is sold. Further recipients only where a legal obligation applies.

## Transfer abroad

Your data is processed in Switzerland and in the European Union.
For Germany and Ireland the Swiss Federal Council recognises an adequate level of data protection (Art. 16 DSG); under the GDPR these are transfers within the EEA.
If a provider processes data outside Switzerland and the EEA, this is done on the basis of the EU Commission standard contractual clauses with the additions required by the FDPIC.

## Retention

Enquiries and the related correspondence: up to twenty-four months after the last contact. On request I delete earlier.
Records of awarded engagements: ten years after the end of the financial year (Art. 958f Swiss Code of Obligations).
Server log files are deleted after 14 days at the latest.

## Cookies

This site sets no analytics or advertising cookies and embeds no tracking services. Fonts, images and scripts are served from our own server; no external font or CDN service is called.
Technically necessary cookies cover the session, the protection of the form and the language choice. The light or dark appearance is kept in your browser's local storage.
On your first visit a notice asks for your choice: necessary cookies only, or all of them. The choice is stored in a cookie and can be changed by deleting the cookies of this site in your browser.

## Your rights

You have the right to access, rectification, erasure and restriction of processing, to receive and port your data, to object to processing based on a legitimate interest, and to withdraw a consent you have given.
An informal message to juraj@devarc.ch is enough. I may ask for additional details to identify you.
Right to complain: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern; in the EU or the EEA with the supervisory authority responsible for your place of residence.

## Data security

This website is served exclusively over encrypted HTTPS. Access to the CRM is limited to authorised persons.

## Automated decisions

There is no profiling and no automated individual decision within the meaning of Art. 22 GDPR. The estimate in the builder is a calculation aid without legal effect.

## Changes

The version published on this page applies. Last updated: September 2026.