Privacy Policy
As of 3 September 2026
Translation provided to aid understanding. Only the German version is authoritative. To the German version
1. Controller and contact
The controller for the processing of personal data in connection with this website is:
let's automate gmbh, Rebengässli 5, 5245 Habsburg, Switzerland
Phone +41 56 552 25 00, kontakt@letsautomate.ch
UID CHE-178.787.355
2. Principles and legal bases
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). Where the General Data Protection Regulation (GDPR) applies — in particular because we also offer goods and services to persons in the European Union and the EEA — its provisions apply in addition.
We process personal data lawfully, in good faith and proportionately, only for the purpose stated at the time of collection, and only for as long as that purpose requires.
Where the GDPR applies, we base the processing on the performance of a contract (Art. 6(1)(b)), on a legal obligation (lit. c), on consent (lit. a) or on our overriding interest in the secure and functioning operation of our services (lit. f). Under Swiss law we do not require consent for the processing described here; where we do obtain consent, we say so expressly.
3. Visiting the website
When you call up our website, your device transmits technical information that our host logs: IP address, date and time, page requested, volume of data transferred, browser type and operating system, and the page previously visited. We need this information to deliver the page, to detect faults and to fend off attacks.
The access and error logs of the web hosting are available for seven days and are deleted thereafter; recovery is not possible. Logs on the activity of an e-mail address can be viewed for nineteen days. Database logs are not kept; the host can enable them briefly for troubleshooting.
The website is hosted by Infomaniak Network SA, Les Acacias (Geneva), Switzerland. The data is processed in Switzerland.
The connection is encrypted with TLS.
4. Audience measurement with Matomo
We measure the use of our website with Matomo, software that we operate on our own infrastructure at Infomaniak. No data is transmitted to third parties.
Matomo is configured here so that your IP address is truncated before it is stored and so that no cookies are set. The information collected does not allow any particular person to be identified. We use it solely to understand which content is read and to improve the site.
Because no cookies are set and no data is passed on, we do not obtain consent for audience measurement. You can object to the measurement by enabling "Do Not Track" in your browser; we respect that setting.
5. Contact form
If you write to us using the form, we process the information you provide in order to answer your enquiry. Name and e-mail address are mandatory; everything else is voluntary. The message reaches us by e-mail; our mail host is Infomaniak Network SA, Les Acacias (Geneva), Switzerland.
For processing, we transfer your details into our customer management system at bexio AG, Alte Jonastrasse 24, 8640 Rapperswil, Switzerland, and into our self-operated ticket system (sec. 10). Both process the data in Switzerland; bexio reserves the right to additionally keep encrypted backups in data centres abroad.
We retain enquiries for as long as the matter is not concluded, and thereafter for as long as we are required to retain them.
6. Appointment booking
For arranging appointments we use an application that we operate ourselves. It collects your name, e-mail address, the desired appointment and your details on the occasion. This data resides on our own installation, hosted by Cyon GmbH, Basel, Switzerland; no third-party booking service is involved.
7. Videos from YouTube
On our website and in the online shop we embed videos from YouTube. For users in the EEA and Switzerland the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When a page with an embedded video is called up, a connection to YouTube's servers is established. In doing so, your IP address and information about your device are transmitted, and information on your device is accessed. Google also processes this data in the United States.
The basis is your consent (Art. 6(1)(a) GDPR). We obtain it before a video is loaded: as long as you have not consented, no content is retrieved from YouTube and no connection is made to it. If you do not consent, the page remains fully usable in all other respects.
You may change your decision at any time. We store it in your browser and record when it was given. You can withdraw it via the "Consent" link in the footer of every page; from the withdrawal onwards no further videos are loaded. Processing carried out up to that point remains lawful.
This consent concerns the videos only. For the audience measurement under sec. 4 we neither need nor request consent; it runs independently of your decision here.
Further details on processing by Google can be found in Google's privacy policy.
8. Newsletter
To send our newsletter we use Mailchimp, a service of The Rocket Science Group LLC, Atlanta, United States. We process your e-mail address and the name details you provide on the basis of your consent, which you give when subscribing and can withdraw at any time — via the unsubscribe link in every newsletter or with a message to kontakt@letsautomate.ch. Mailchimp additionally records whether and which content is opened and clicked; this helps us judge whether the newsletter is useful.
The processing takes place in the United States. The basis is Mailchimp's certification under the Swiss-U.S. Data Privacy Framework; for data subjects in the EU the EU-U.S. Data Privacy Framework applies accordingly.
9. Online shop and licence management
For orders in our online shop we process name, company, e-mail address, language and the details of the service ordered. The shop and the licence server are hosted by Cyon GmbH, Basel, Switzerland; they are operated by us.
Payment and invoicing are handled by Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom, which acts towards you as the seller (Merchant of Record) and processes your payment data under its own responsibility. Your means of payment do not reach us.
For a licence we record which installation it applies to and when it was activated. From the installations that use our modules we receive operating reports containing domain, IP address and version details; these serve licence verification and troubleshooting. We delete the raw data of these reports after 90 days and retain only aggregated values.
10. Support and ticket system
If you contact our support, we process your enquiry together with its history in our ticket system, which we operate ourselves and which is hosted by Cyon GmbH, Basel, Switzerland. We use the information to handle your matter and to keep it traceable.
11. Processing on behalf of our customers
Where we provide services for a customer and thereby process personal data for which that customer is responsible, we act as a processor under Art. 9 FADP and Art. 28 GDPR. The basis is a data processing agreement. The sub-processors engaged in this are listed in an annex to that agreement; it is provided in its current version on request. For this data, requests for information and deletion are to be addressed to the respective customer.
12. Disclosure abroad
We process personal data in Switzerland as a matter of principle. Disclosure abroad takes place only where the requirements of Art. 16 f. FADP and, where applicable, Chapter V GDPR are met: inclusion of the state in the Federal Council's list of states, a certification under the Swiss-U.S. Data Privacy Framework, or standard contractual clauses with a Swiss addendum.
At present this concerns:
– the newsletter dispatch via Mailchimp, The Rocket Science Group LLC, Atlanta, United States — basis: certification under the Swiss-U.S. Data Privacy Framework;
– payment processing via Paddle.com Market Limited, United Kingdom — basis: adequacy under the Federal Council's list of states;
– embedded videos from YouTube, Google Ireland Limited, Dublin, with processing also in the United States (sec. 7);
– encrypted backups of our customer management at bexio, which according to bexio may also reside in data centres abroad (sec. 5).
No further disclosures abroad take place. Website, e-mail, shop, licence server and ticket system are operated in Switzerland.
13. Retention and deletion
We retain personal data for as long as is necessary for the respective purpose or as we are legally required to — in the case of business records, ten years under Art. 958f CO. Thereafter we delete or anonymise it.
14. Your rights
You can request information from us as to whether and which personal data we process about you (Art. 25 FADP, Art. 15 GDPR). You can have incorrect data rectified, request deletion, object to processing, and request the release or transfer of your data (Art. 28 FADP, Art. 20 GDPR). Where we rely on consent, you can withdraw it at any time; processing carried out up to that point remains lawful.
Please contact kontakt@letsautomate.ch for this. To answer a request for information we must be able to verify your identity.
These rights may be restricted where a law, overriding third-party interests or professional secrecy stand in their way.
15. Supervisory authorities
You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Where the GDPR applies, you can also turn to the supervisory authority of your place of residence.
16. Changes
We adapt this policy when our processing changes. The version published on this page at the given time applies.
Questions about this: support@letsautomate.ch