# Privacy Policy Fundament's privacy policy: how we collect, process and protect personal data. ## Introduction This privacy policy informs you about how your data is processed when you visit the website [https://fundament-app.ch](/), contact us (Fundament Technologies GmbH) through the website or subscribe to our newsletter. This privacy policy is updated regularly, in particular when the data protection situation or the services we use change. The processing of your data is governed by Swiss law. Where necessary, the General Data Protection Regulation of the European Union (GDPR) is also complied with. Insofar as the GDPR applies, your data is processed on the legal bases of Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interests). As a rule, we process personal data of visitors to this website only to the extent necessary to provide a functioning website and our content, or where you submit the data to us yourself, for example via the contact form or the newsletter sign-up. **Controller** Fundament Technologies GmbH Claragraben 39 4058 Basel [contact@fundament-app.ch](mailto:contact@fundament-app.ch) +41 (0) 61 563 11 55 ## Data collection When you access this website, our hosting provider stores the following data in log files: IP address, name and address of the page and files accessed, date, time, browser request and general information about the operating system and browser used, internet provider, referrer URL, and a message confirming successful retrieval. This information is stored to ensure operation and for purely statistical purposes and is not passed on to third parties. As a rule, the data is deleted as soon as it is no longer needed, unless there are legitimate interests in retaining it further (e.g. unlawful access). **Collection and processing of personal data** We collect and process personal data when you provide it to us yourself, for example when filling in the contact form or signing up for the newsletter. In that case, personal data includes: - Contact details (first name, last name, email address, company) - The content of your message - Communication data (time of the enquiry) - Origin of the enquiry (previously visited page, referrer, campaign parameters and click identifiers in the URL, session identifier, Matomo visitor identifier) - Usage data and metadata (see "Services used") We process personal data at the time it is collected. **Purpose of data processing** (Personal) data is collected for the purposes explicitly consented to, stated or evident, in particular to respond to your enquiry, to send the newsletter and to analyse and improve our website. In addition, personal data is processed where necessary to safeguard the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and the interests of the data subject prevail. Legitimate interests include in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with statutory requirements. **Deletion and retention period** Personal data is deleted or blocked as soon as the purpose of storage no longer applies. Data may be retained beyond this where provided for by Swiss or European legislation. Data is also blocked or deleted when a retention period prescribed by the aforementioned provisions expires, unless further storage of the data is required for the conclusion or performance of a contract or to fulfil a legal obligation. ## Cookies This website uses cookies and similar technologies (e.g. the browser's session storage). Cookies are small pieces of data stored in the browser. They are used for the security of this website, to measure its reach and to provide an optimal visitor experience. You can configure cookies for your device in your browser settings. Please note that if cookies are completely disabled, some functions of this website may no longer be available. The following cookies and storage technologies are used: - Technically necessary cookies - Local storage for the appearance you selected (light or dark mode); this information stays in your browser and is not transmitted to us - Analytics cookies set by Matomo (see "Services used") - Local storage to attribute the origin of a visit (the first page address opened, the referrer, campaign parameters and click identifiers in the URL); this information is kept for no longer than 30 days (see "Campaign attribution and conversion measurement") - Session storage for a randomly generated session identifier, the page previously visited during the current session and flags that prevent the same action from being counted twice; this information is deleted when the browser is closed ## Campaign attribution and conversion measurement We want to understand which channel visitors use to reach our website and which channels lead to a contact enquiry. For this purpose, the following information is stored in your browser's local storage when the website is opened: - the full address of the first page opened (landing URL) - the address of the previously visited website (referrer), where present - campaign parameters in the URL (utm\_source, utm\_medium, utm\_campaign, utm\_term, utm\_content) - click identifiers from advertising platforms, where the address opened contains any (gclid and gbraid from Google Ads, msclkid from Microsoft Advertising, fbclid from Facebook or Instagram, ttclid from TikTok, scclid from Snapchat, li\_fat\_id from LinkedIn) This information is kept in your browser for no longer than 30 days and is disregarded thereafter. From the referrer and the campaign parameters we derive a channel category (e.g. "google / organic" or "linkedin / paid"). When the contact button is clicked, when the contact form is opened and when the form is submitted, this information is transmitted together with a randomly generated session identifier to our content management system and stored there, so that an enquiry can be attributed to the channel it came through. When the form is submitted, your email address and the identifier of the stored enquiry are recorded in addition. Each of these actions is recorded only once per browser session. If the Matomo tracker is active in your browser, the visitor identifier assigned by Matomo is transmitted and stored as well, so that an enquiry can be attributed to the corresponding visit within our web analytics. No data is transmitted to the operators of the advertising platforms named above; the click identifiers serve our own evaluation only. Insofar as the GDPR applies, this processing is based on our legitimate interest in evaluating and improving our marketing activities (Art. 6 (1) (f) GDPR). You can prevent this storage by blocking cookies and similar technologies in your browser or by deleting the stored data. ## Services used The following services are used for the website [https://fundament-app.ch](/): **Web analytics Matomo** To analyse and improve our website, we use Matomo, web analytics software that allows us to record and evaluate how the website is used. Matomo is loaded through the Matomo Tag Manager, which manages the analytics tags used on the website. Data such as page views, interactions and visit duration is processed for this purpose, and individual events are recorded, such as opening and submitting the contact form. Matomo assigns a visitor identifier for this, which is stored in your browser. The data is not merged with other data sources and is not passed on to third parties. Further information on data protection at Matomo can be found at: [https://matomo.org/privacy-policy/](https://matomo.org/privacy-policy/). **Frontend hosting Netlify** For hosting and delivering our website, we use Netlify, a service provided by Netlify, Inc. that allows us to deliver the website quickly and securely. Netlify processes the data that accrues in log files (see "Data collection") as well as the information you submit via the contact form and the newsletter sign-up: it is passed on to our content management system and to the newsletter service by server functions running at Netlify. Detailed information on data processing by Netlify can be found in their privacy policy: [https://www.netlify.com/privacy/](https://www.netlify.com/privacy/). **Backend hosting cyon** For hosting our content management system and the contact enquiries stored in it, we use cyon, a service provided by cyon GmbH, Basel. cyon ensures that this data is hosted in Switzerland. Further information on data processing by cyon can be found in their privacy policy: [https://www.cyon.ch/legal/datenschutz](https://www.cyon.ch/legal/datenschutz). **Newsletter service Mailjet** To manage and send our newsletter, we use Mailjet, a service provided by Mailjet SAS, Paris (part of the Sinch group). Mailjet stores your email address as well as information about the delivery and use of the newsletters. Detailed information on data processing by Mailjet can be found in their privacy policy: [https://www.mailjet.com/legal/privacy-policy/](https://www.mailjet.com/legal/privacy-policy/). ## Data storage location The content of this website and the information submitted via the contact form are stored in Switzerland. The website is delivered via Netlify's global network; newsletter data is processed by Mailjet in the European Union. ## Newsletter and contact form Our website offers the option of subscribing to a free newsletter. When you sign up, the email address you provide is transmitted to us and stored in our newsletter service. The newsletter contains information about Fundament and our own services only. You can unsubscribe from the newsletter in every newsletter email. Newsletters may contain graphics and/or web links that record, on a personal basis, whether and when an individual newsletter was opened in an email application and which web links were clicked. Such graphics and/or web links record the use of newsletters in order to ensure quality and enable improvements to the newsletter. A contact form can be filled in on our website. We store the information you enter yourself (first name, last name, email address, company, message), the time of the enquiry and the information about its origin described under "Campaign attribution and conversion measurement" (channel and campaign, landing URL, click identifiers, session identifier and, where present, the Matomo visitor identifier). The enquiry is stored in our content management system and forwarded to us by email. To prevent spam, we use an invisible form field; no data is transmitted to third parties for this purpose. ## Your rights As a data subject, you have the following rights in connection with the processing of your data that is relevant under data protection law: the right of access, rectification, erasure or restriction of processing, objection, data portability and the right to lodge a complaint with a supervisory authority. If you wish to exercise a right, please contact us at the address / email address given above. We reserve the right to carry out an appropriate identity check before responding to the request. **The competent supervisory authority is:** Federal Data Protection and Information Commissioner (FDPIC) Feldeggweg 1 3003 Bern