Privacy Policy
1. Data controller
Eartheffect AG Baslerstrasse 10 4600 Olten Switzerland Email: raeber@eartheffect.ch Data Protection Officer: Martin Räber
2. General information on data processing
We process personal data in accordance with the revised Swiss Data Protection Act (DSG) and – where applicable – the EU General Data Protection Regulation (GDPR). Principles: – Processing in good faith, proportionately and for specific purposes, – Transparency for data subjects, – Implementation of appropriate technical and organisational measures to ensure data security.
3. Processing of data when visiting our websites
3.1 Hosting & Infrastructure Our websites (www.eartheffect.ch, www.future-perfect.ch, www.ecogastro.org) are hosted via Webflow, utilising the infrastructure of Amazon Web Services (AWS) and the Amazon CloudFront/Fastly CDN. Domains are hosted by Infomaniak (CH). In doing so, technical data such as IP address, browser type, time of access and pages visited are processed automatically. This data is used for the operation, security and optimisation of our websites. 3.2 Cookies & Tracking We use Google Analytics to analyse the use of our websites. In doing so, information about your user behaviour (e.g. pages visited, session duration, location) may also be transferred by Google to the USA. You can disable cookies in your browser at any time. 3.3 Contact forms Data entered via contact forms (e.g. name, email address, message) is processed for the purpose of handling your enquiry.
4. Communication & Marketing
4.1 Newsletters We currently use Sendinblue (Brevo) and vtiger CRM for our newsletters. This involves the processing of email addresses and voluntary information (e.g. name) in order to send information about our services and projects. You can unsubscribe at any time via the unsubscribe link in the newsletter or by email. 4.2 Business Communication We use Microsoft Teams and email for customer and project communication. In doing so, metadata (e.g. time of communication, sender, recipient) and content data may be processed.
5. Customer data management
5.1 CRM & Accounting We currently store customer data in vtiger (hosted by Infomaniak, Switzerland). In future, this will be managed via Bexio (including add-ons). Data processed: names, addresses, contact details, communication content, contract details. 5.2 Project and collaboration tools We use Asana for project management. In particular, contact details and project-related notes are stored here. Data may be transferred to the USA. 5.3 Cloud storage Our internal cloud is based on Seafile (server location: Switzerland). Microsoft 365 and Google Drive are also used to some extent.
6. E-learning / Moodle
We operate learning platforms on Moodle. By default, the following data is processed: – Personal details (name, email address, username), – Login details, – Course data (e.g. modules completed, learning progress), – Interactions within the platform. Hosting is provided by our IT partner, Oetiker + Partner AG (Olten, Switzerland). Oetiker + Partner is contractually obliged to process the data exclusively on behalf of Eartheffect and to implement appropriate security measures.
7. Disclosure of data and transfer of data abroad
We only disclose personal data to third parties where this is necessary for the provision of our services or where there is a legal basis for doing so. Data will only be transferred to third countries (e.g. the USA in the case of AWS, Google, Microsoft and Asana) if: – an adequacy decision has been issued by the Federal Council or the European Commission, or – appropriate safeguards (e.g. standard contractual clauses) are in place.
8. Data security
We implement technical and organisational measures to protect personal data from loss, misuse, unauthorised access and other risks. These include, amongst other things, encrypted transmission (HTTPS), access controls and regular backups.
9. Retention period
We only retain personal data for as long as is necessary for the purposes for which it was collected, or for as long as statutory retention obligations apply.
10. Use of AI tools
We use AI-powered tools, including Claude (Anthropic), ChatGPT (OpenAI) and DeepL, in the creation and maintenance of our website, as well as in our internal work processes. These tools are used for programming, editorial content, translations and imagery. Where personal data is processed in this context (e.g. during the automatic translation of form entries), the same principles apply as those described in the other sections of this privacy policy – in particular with regard to the transfer of data abroad (see Section 7).
11. Rights of data subjects
Under the DSG and – where applicable – the GDPR, data subjects have, in particular, the right to: – be informed as to whether and what data we process, – have inaccurate data rectified, – have data erased, provided that no legal obligations prevent this, – restrict processing, – the right to receive or have data transferred (data portability), – the right to object to processing (where permitted). To exercise these rights, please contact: raeber@eartheffect.ch
12. Changes to this privacy policy
We may amend this privacy policy if our data processing practices or the legal requirements change. The current version published on our website shall apply at all times.