01
Controller
Responsible for processing your personal data within the meaning of the revDSG and the GDPR is:
systemlink GmbH
Seeguetstrasse 8
8804 Au ZH, Switzerland
Phone: +41 78 339 7741
Email: kontakt@systemlink.ch
02
Data protection advice / Data protection officer
If you have any questions about data protection and exercising your rights, please contact the address given in section 1.
03
General information on data processing
As a general rule, we only process personal data to the extent that this is necessary to provide a functional website as well as our content and services or if you have consented to this. We adhere to the principles of legality, purpose limitation, proportionality, data accuracy, transparency and data security.
“Personal data” is all information that relates to a specific or identifiable person (e.g. name, address, email address, IP address).
04
Legal basis for processing
In Switzerland, processing is based on the revDSG. Consent is not required in every case; However, the processing must be proportionate and carried out in good faith.
To the extent that the GDPR is applicable (processing of data of persons in the EU), we base the processing on the following legal bases:
• Art. 6 Para. 1 lit. a GDPR – consent (e.g. newsletter, non-essential cookies).
• Art. 6 Paragraph 1 Letter b GDPR – contract fulfillment and pre-contractual measures (e.g. inquiries, booking appointments, customer relationships).
• Art. 6 Paragraph 1 Letter c GDPR – Fulfillment of legal obligations (e.g. retention obligations).
• Art. 6 Para. 1 lit. f GDPR – legitimate interests (e.g. secure operation of the website, reach measurement, direct advertising to existing customers).
05
Your rights as a data subject
According to revDSG and GDPR, you have the following rights in particular:
• Right to information about the data processed about you;
• Right to correct inaccurate data;
• Right to deletion (“right to be forgotten”) and to restriction of processing;
• Right to data release or data transferability (portability);
• Right to object to certain processing (especially direct advertising);
• Right to revoke consent given at any time with future effect;
• Right to complain to the relevant supervisory authority.
To exercise your rights, simply send an informal message to kontakt@systemlink.ch. To protect our legitimate interests, we may verify your identity.
06
Competent supervisory authorities
Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
EU / Germany: You can contact the data protection supervisory authority of your usual place of residence or place of work. A list of the German supervisory authorities can be found at www.bfdi.bund.de.
07
Data security
We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access. Our website uses SSL/TLS encryption; You can recognize an encrypted connection by the “https://” and the lock symbol in your browser line.
08
Provision of the website and hosting
Our website is provided and delivered via the Framer platform (Framer B.V., Netherlands). In addition, we use infrastructure and CDN services from Vercel Inc. (USA).
When you access the website, the provider automatically records information in so-called server log files, which your browser transmits:
• shortened or processed IP address,
• Date and time of access,
• page/file accessed,
• Referrer URL,
• Browser and operating system used.
This data serves the secure and stable operation of the website (legitimate interest, Art. 6 Para. 1 lit. f GDPR). Contracts for order processing exist with the providers. For transfers to the USA, the guarantees described in Section 18 apply.
09
Cookies and similar technologies
Our website uses cookies and similar technologies (e.g. local storage). Cookies are small text files that are stored on your device. Necessary cookies are required for the website to function. We only use all non-essential cookies (especially for statistics and marketing) with your consent.
10
Consent management (Cookiebot)
To obtain and manage your consent, we use Cookiebot, a service provided by Usercentrics A/S (Cybot A/S, Denmark). Cookiebot saves and documents your consent decisions. An anonymized or encrypted identifier for your device is processed in order to take your preferences into account when you visit again.
The legal basis is our legal obligation to document consent and our legitimate interest (Art. 6 Para. 1 lit. c and f GDPR). You can adjust or revoke your consent at any time using the cookie dialog on our website with effect for the future.
11
Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager is itself an administration tool with which we integrate and control tags (scripts). The Tag Manager itself does not collect any personal data for evaluation purposes, but can trigger the triggering of other tags (see below). Tags that require consent are only activated after your consent in the cookie dialog.
12
Reach measurement with Microsoft Clarity
To analyze the use of our website, we use Microsoft Clarity from Microsoft Corporation (USA) or Microsoft Ireland Operations Ltd. Clarity creates aggregated usage statistics and can create session recordings and heatmaps to understand how visitors interact with the website. Interaction data, device information and a shortened IP address are processed.
It is used exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR), which you can give in the cookie dialog and revoke at any time.
13
Google Ads (conversion tracking and remarketing)
We use Google Ads from Google Ireland Limited to draw attention to our offers. In this context, we use conversion tracking and remarketing. We use this to measure the success of our advertisements and can show interest-based advertising on third-party websites to users who have visited our website. For this purpose, cookies are set and identifiers are processed.
The use is based on your consent (Art. 6 Para. 1 lit. a GDPR), which you grant in the cookie dialog and can revoke at any time.
14
Meta pixels, custom audiences and conversions API
We use technologies from Meta Platforms Ireland Limited (Dublin, Ireland), in particular the Meta Pixel, Custom Audiences and the Conversions API (CAPI). We use this to measure the effectiveness of our advertisements on Facebook and Instagram, form target groups and can show you interest-based advertising. With the Conversions API, certain events are transmitted to Meta on the server side; Data such as IP address, hashed contact details and interaction data can be processed.
An agreement in accordance with Art. 26 GDPR partially applies to the processing by Meta within the framework of joint responsibility. The use is based on your consent (Art. 6 Para. 1 lit. a GDPR), which you can revoke at any time.
15
Contact and customer relationship (CRM)
If you contact us via the contact or audit form, by email or by telephone, we will process the information you provide (e.g. name, company, email address, telephone number, content of the request) in order to process your request and get in touch with you.
To manage inquiries and customer relationships, we use CRM systems, namely Close (Close Software, Inc., USA) and HubSpot (HubSpot, Inc., USA/Ireland). Your contact and communication data is stored and processed in these systems.
The legal basis is the implementation of pre-contractual measures and the fulfillment of the contract (Art. 6 Para. 1 lit. b GDPR) as well as our legitimate interest in efficient processing (Art. 6 Para. 1 lit. f GDPR).
16
Newsletter
You can subscribe to our newsletter on our website. We use Customer.io (Peaberry Software, Inc., USA) for shipping. Registration takes place using the double opt-in procedure: After you register, you will receive an email asking you to confirm your registration. This serves to prove your consent and to protect against abusive registrations.
We process your email address and the data you provide (e.g. name) as well as newsletter usage data (e.g. opening and clicking behavior) for design and optimization. The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR). You can unsubscribe from the newsletter at any time using the unsubscribe link in every email or by sending us a message.
18
Service providers and tools used (order processing)
To provide our services, process inquiries and automate internal processes, we use carefully selected service providers who process personal data on our behalf. If necessary, there are contracts with them for order processing (AVV). These include in particular:
• Automation / Workflows: Zapier (USA), Make / Celonis SE (EU) and n8n;
• Data storage and organization: Notion (USA), Airtable (USA), Google Workspace including Sheets and Drive (Google Ireland Limited);
• AI-powered processing: Anthropic (Claude), to help process content and requests;
• Content creation: Canva (Australia).
Processing is only carried out to the extent necessary and based on the fulfillment of the contract or our legitimate interest in efficient and secure processes (Art. 6 Para. 1 lit. b and f GDPR). For third country transfers, the guarantees mentioned in section 18 apply.
19
Social media profiles
We are present on social networks (including Instagram, LinkedIn, YouTube). If you access our profiles via the corresponding links, the data protection regulations of the respective provider apply. Links integrated on our website only send data to the networks when you actively click on them.
20
Storage period and deletion
We only process and store your personal data for as long as it is necessary for the respective purposes or for as long as there are legal retention obligations (e.g. commercial and tax law deadlines). The data is then deleted or anonymized.
21
Changes to this privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services. The then current version applies to your next visit.
As of: 07_2026