Privacy statement

1. Controller

Responsible for the processing of data on this website:

Authorised representative: Sebastian Grünwald

For any question about data protection, write to privacy@giit.ch or to the address above.

2. Principle

Based on Article 13 of the Swiss Federal Constitution and data protection legislation - in particular the revised Federal Act on Data Protection (FADP, in force since 1 September 2023) - everyone is entitled to privacy and to protection from misuse of their personal data.

Personal data is treated confidentially and is neither sold nor passed on to third parties. Systems are protected against unauthorised access, loss, misuse and falsification by appropriate means.

3. Scope

This statement applies to the website giit.ch and all of its sub-pages.

4. Server logs

When the site is accessed, the hosting provider records technical access data in log files:

• IP address of the requesting device
• Date and time of access
• Page or file requested and volume of data transferred
• Browser and operating system used
• Referring page (referrer)

This data serves the technical operation and security of the systems only. We do not link it to individual persons.

Legal basis: legitimate interest in providing and securing the website (Art. 31 para. 1 FADP / Art. 6 para. 1 lit. f GDPR).

5. Cookies

This site sets no cookies for advertising or analytics. There is no web analytics, no tracking and no profiling. The only cookies used are:

• Language choice (lang): remembers whether you read the site in German or English. Purely functional, not linked to a person, valid for one year. It is only created once you actively switch the language.
• Cloudflare Turnstile: set only in connection with the request form (see section 7).

6. Contact by email

If you write to us - for instance to info@giit.ch, contact@giit.ch, support@giit.ch, privacy@giit.ch or faq@giit.ch - we process what you send (address, name, content) in order to deal with your enquiry.

Emails are not deleted automatically. They are kept in case of later contact or future relevance. You may request deletion at any time (section 9).

Legal basis: legitimate interest in handling enquiries (Art. 31 para. 1 FADP / Art. 6 para. 1 lit. f GDPR).

7. Request form

The form on this site lets you send a request. What is transmitted is what you fill in: topic, name, email address and message, plus phone number and company if you provide them.

Before submitting, you explicitly confirm that you have read this statement and agree to your details being processed. Without that confirmation the site does not accept the form.

The details are not stored in a database. They are delivered straight away as an email to info@giit.ch and treated there like any other email (section 6). Delivery goes through the Microsoft Graph API on behalf of noreply@giit.ch; Microsoft acts as a processor for sending the message.

To keep automated submissions out, Cloudflare Turnstile is used. Your IP address and technical details about browser and device are transmitted to Cloudflare Inc. to establish whether the request comes from a human. Turnstile works without user profiles and without recognising you across websites. The Cloudflare privacy policy applies.

To stop repeated automated submissions, a checksum of your IP address is also held for a limited time (a one-way hash from which the address cannot be recovered).

Legal basis: handling your request at your own instigation, and legitimate interest in protection against misuse (Art. 31 FADP / Art. 6 para. 1 lit. b and f GDPR).

8. Disclosure to third parties

Personal data is not passed on to third parties unless we are legally obliged to do so or it is necessary to enforce our rights. No data is sold and no advertising service providers are used. The only technical service providers involved are the hosting provider, Microsoft (email delivery) and Cloudflare (spam protection).

9. Your rights

Under applicable data protection law you have the right to:

• Information about whether and what data we process about you (Art. 25 FADP / Art. 15 GDPR)
• Rectification of inaccurate data (Art. 32 para. 1 FADP / Art. 16 GDPR)
• Erasure of your data under the statutory conditions (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability in a common format (Art. 28 FADP / Art. 20 GDPR)
• Objection to processing based on a legitimate interest (Art. 21 GDPR)

To exercise these rights, write to privacy@giit.ch or to the address in section 1.

10. Right to complain

If you believe your data is being processed unlawfully, you may complain to:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch
• EU: the competent supervisory authority in your country of residence

11. Changes

This statement is adapted when necessary. The version published on this page is the one that applies.