Privacy policy

1. Controller

Controller

Hetz Engineering, Andreas Hetz

Address

Baslerstrasse 15, 4310 Rheinfelden, Switzerland

Email

info@hetzengineering.com

This privacy policy applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). It covers the website hetzengineering.com and contacting us.

2. Principle: no cookies, no tracking

This website sets no cookies, uses no analytics or tracking services and embeds no content from third-party servers (no third-party web fonts, maps, videos or social media plugins). Fonts and all resources are served from our own server. A consent prompt ("cookie banner") is therefore not required.

3. Visiting the website

When you visit the website, the web server processes the connection data technically required to deliver the page and secure its operation (in particular the IP address of your device, time and page accessed). We do not evaluate this data, do not compile statistics from it and do not merge it with other data.

The legal basis is our legitimate interest in secure operation (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR).

4. Contact by email or phone

If you contact us by email or phone, we process the data you provide (name, contact details, content of the enquiry) to handle your request and any follow-up questions. The legal basis is the initiation or performance of a contract (Art. 6 para. 1 lit. b GDPR) or our legitimate interest in answering enquiries (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR).

We keep the data for as long as needed to handle the request and beyond that only where statutory retention obligations apply (in Switzerland ten years for business correspondence, Art. 958f CO).

5. Booking a meeting via Calendly

For scheduling meetings we link to the Calendly service of Calendly LLC, Atlanta (USA). Calendly is not embedded in our website: only when you click the "Book a meeting" link do you leave our website and is data transmitted to Calendly. When booking, you enter your name, email address, the desired slot and optionally further details; Calendly also processes technical data such as IP address and time zone.

We receive the booking data in order to hold the meeting. The legal basis is the initiation of a contract (Art. 6 para. 1 lit. b GDPR) or your action as consent (Art. 31 para. 1 FADP).

Calendly processes data in the USA. Calendly LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework; for certified companies the USA is deemed to provide an adequate level of data protection (EU Commission adequacy decision of 10 July 2023; Annex 1 of the Swiss Data Protection Ordinance). Details on processing can be found in Calendly's privacy policy: https://calendly.com/privacy

6. Disclosure to third parties

We disclose personal data only where necessary for contract performance (for example to the hosting provider or to Calendly, see above), where you have consented or where we are legally obliged to do so. We do not sell data.

7. Your rights

Within the scope of applicable law you have the following rights:

• Access to the data stored about you
• Rectification of inaccurate data
• Erasure, unless retention obligations prevent it
• Restriction of processing and objection to processing based on legitimate interests
• Data portability (GDPR)
• Complaint to a supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority responsible for you

8. Data security

The website is delivered exclusively encrypted via HTTPS. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Changes

We may amend this privacy policy if the website, the services used or the legal situation change. The version published here applies.