Privacy policy

This policy describes which personal data is processed when you visit mainbranch.ch and when you get in touch. It is based on the Swiss Federal Act on Data Protection (FADP). For visitors from the EU, the General Data Protection Regulation (GDPR) applies in addition.

Principle

This website sets no cookies, uses no advertising tracking and embeds no third-party content: no Google fonts, no videos, maps or social media plugins. Fonts and images are served directly by this website. There are no forms and no user accounts.

Hosting and server log files

The website is a static site without a database. It is hosted by Railway Corporation (San Francisco, USA) on servers in the Europe West region (Netherlands). Each request produces technically necessary data: IP address, time, requested page, and browser and operating system (user agent). These server log files serve secure and stable operation. The hosting provider stores them for a limited period.

Cloudflare

For the domain (DNS), delivery of the website and email forwarding, Mainbranch GmbH uses Cloudflare, Inc. (San Francisco, USA). All requests to the website pass through the Cloudflare network. Cloudflare processes the same technical data as the hosting provider in order to deliver the website quickly and fend off attacks.

Web analytics

The website uses Cloudflare Web Analytics and Umami Cloud by Umami Software, Inc. (USA). Neither service sets cookies or builds profiles of individual visitors. They record aggregated information such as pages viewed, referring page, country, language, and browser, device type and screen size.

Contact by email

If you send an email to the address above, Cloudflare Email Routing forwards it to Tom Hofer’s mailbox. Your details (name, email address, content of the message) are processed only to answer your request and to carry out any resulting project. Messages are kept as long as necessary for this purpose, business correspondence in line with statutory retention obligations.

Disclosure abroad

Railway, Cloudflare and Umami are based in the USA. Personal data may therefore also be processed in the USA or in other countries. Where the law requires it, the transfer is based on these providers’ data protection agreements, in particular the European Commission’s standard contractual clauses.

Your rights

You can request information about the personal data Mainbranch GmbH processes about you and ask for it to be corrected or deleted. You can object to the processing and, where the GDPR applies, also request restriction of processing and a copy of your data. Please write to the address above. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the data protection authority in your country.

Changes

This policy is updated when the website or the legal situation changes. The version published here applies.