Privacy Policy
Last updated: July 2026
Visiting from the United States? Our US Privacy Notice covers your CCPA/CPRA rights and is the one that applies to you.
1. Controller
The controller for data processing on this website is ealytics GmbH, c/o Amir Peled, Freihofstrasse 17, 8700 Küsnacht ZH, Switzerland (“we”). You can reach us at [email protected].
For visitors from the European Economic Area the GDPR applies; for visitors from Switzerland the revised Swiss Federal Act on Data Protection (FADP) applies. ealytics GmbH is the controller under both.
2. The short version
This website is deliberately built to collect as little data as possible:
- No advertising or marketing trackers, and no data shared with ad networks.
- No cookies during a normal visit to the public pages.
- Visitor statistics run on self-hosted, cookieless software on our own infrastructure — no data flows to third parties.
- We essentially only process personal data when you actively contact us.
3. Hosting and server logs
This website runs on a virtual machine at Google Cloud (Google Cloud EMEA Limited, Dublin, Ireland) at a European server location, under a data-processing agreement with Google.
When you visit the site, the web server necessarily processes connection data (IP address, date and time, page requested, browser identifier). These logs are used to keep the service running, diagnose errors, and fend off attacks, and are deleted after a short period. The legal basis is our legitimate interest in secure, stable operations (Art. 6(1)(f) GDPR).
4. Contact form and email
If you use our contact form, we process the data you provide: name, company, email address, service of interest, and your message. It is stored in our own database on the server described above and used exclusively to handle your inquiry — never for newsletters or advertising.
To block automated spam, your IP address is used briefly in memory for rate limiting; it is not stored with your inquiry.
The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR). We keep inquiries as long as needed to handle them and any resulting business relationship, then delete them unless statutory retention duties apply.
5. Visitor statistics (Umami)
We measure site usage with the open-source software Umami, which we host ourselves on our own infrastructure. Umami works without cookies and without cross-site or cross-device tracking; IP addresses are not stored. It collects aggregate information such as pages viewed, country of origin, browser type, and referrer. The measurement script is served from our own domain, and no data is transmitted to third parties.
Because no cookies are set and nothing is stored on or read from your device, no consent is required. The legal basis is our legitimate interest in privacy-friendly usage analysis (Art. 6(1)(f) GDPR).
6. Recipients and processors
Personal data is accessible only to:
- Google Cloud as hosting provider (processor, European server location), and
- ealytics LLC, Ismail Qemali Nr. 57, Prishtina, Kosovo — our group company, whose staff assist in handling inquiries and delivering services. This is governed by an intra-group data-processing agreement incorporating the EU Standard Contractual Clauses.
We do not share data with any other third parties.
7. International transfers
Switzerland and the EEA mutually recognize each other's level of data protection as adequate. There is no adequacy decision for Kosovo; transfers there rely on the European Commission's Standard Contractual Clauses, supplemented by technical and organizational measures (access restriction, encrypted transmission, logging). See our Security & Data Handling page for details.
8. Your rights
You have the right to access, rectify, and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interests. Contact [email protected] to exercise them.
You also have the right to lodge a complaint with a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA the authority of your place of residence.
9. Security and changes
This website is served exclusively over TLS-encrypted connections, and access to stored inquiries is limited to the people handling them.
We update this policy whenever our processing changes. The version published here is the one that applies.