Privacy Policy

What we collect, why we collect it, how long we keep it, and what you can ask us to do about it.

Last updated: 11 August 2026

1. Who is responsible

The controller for the personal data described here is:

We are based in Switzerland. We apply the Swiss Federal Act on Data Protection (revDSG) and, where it applies to you, the EU and UK General Data Protection Regulation.

This policy covers www.georitham.ch and the enquiries we receive through it. Work we do for a client is governed by the written quote that client accepts and, where we handle personal data on their behalf, by a separate data processing agreement.

2. What we collect

Enquiries you send us

If you use the contact form or email us, we receive what you choose to send: your name, the email address or phone number you give us, and the content of your message. Nothing on the form is collected without you typing it.

Technical data from your visit

Our hosting provider records standard server log data when a page is requested: IP address, date and time, the page requested, the referring page, and browser and operating system identifiers. This is what any web server does in order to serve a page and to notice attacks or faults.

Keeping the contact form usable

When you send the form, one thing happens that is not part of your message: a check runs to confirm you are a person and not a script. It looks at how your browser behaves, not at anything you have typed. Separately, our hosting provider limits how many times the form can be sent from one connection, so that a script cannot fill the mailbox. That happens in the network in front of the site and nothing is stored for it here. Neither reaches us: the email that lands in our inbox contains what you typed and nothing else.

Analytics, but only if you allow it

If you consent, Google Analytics records which pages you visit, how long you stay, roughly where in the world you are, and what brought you here. If you also consent to marketing, Google Ads records whether an enquiry followed one of our advertisements. Neither runs until you say yes.

3. Cookies and your choice

The first time you arrive, a banner asks what you are willing to allow. Until you answer it, nothing optional runs: no analytics, no advertising measurement, no cookies beyond the ones that keep the site working. Rejecting is one click, exactly like accepting, and refusing costs you nothing on this site.

You can change your mind at any time with the Cookie settings link at the bottom of every page. Your choice is remembered in your browser's local storage rather than in a cookie, so the record of your decision does not itself need your consent. Clearing your browser data resets it and you will be asked again.

Necessary items cannot be switched off, because without them the site either does not work or cannot defend itself against automated abuse. They are not used to track you.

4. Why we use it, and on what basis

• To answer your enquiry and prepare a quote. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)); under the revDSG, processing that is apparent from the circumstances of your own enquiry.
• To keep the site available and secure. Legal basis: our legitimate interest in operating a working, non-abused website (GDPR Art. 6(1)(f)).
• Analytics and advertising measurement. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time without affecting anything done before you withdrew it.
• To meet legal and accounting obligations where an enquiry becomes a paid engagement. Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)).

We do not use your data for automated decision-making, and we never sell it or hand it to anyone for their own marketing.

5. Third-party tools and services we use

These are the only outside parties that handle anything of yours. Depending on your cookie choices, they may set cookies or process technical data such as your IP address.

One of them is not loaded when a page opens at all. The check that tells people from robots is requested from Cloudflare only once you begin filling the contact form in. If you never write to us, your browser never asks Cloudflare for it.

The location is stated for each provider below. Where a provider processes data outside Switzerland, we rely on the EU-US Data Privacy Framework, its Swiss-US extension, and Standard Contractual Clauses. Those clauses are integrated into each provider's data processing terms: Cloudflare, Resend and Google.

A. Infrastructure and communication (always active)

These run the website and the mailbox. Without them there is no page to visit and no way for your message to reach us, so they cannot be switched off. Neither is used to track you.

B. Website tags and analytics (consent-based)

None of these do anything until you allow them in the cookie banner, and you can withdraw that at any time with the Cookie settings link at the foot of the page.

6. How long we keep it

• Enquiries that do not lead to work: kept for up to 12 months so we can pick up the thread if you come back, then deleted.
• Enquiries that become a project: kept for the life of the engagement and afterwards for as long as Swiss accounting and limitation rules require, generally 10 years for anything with an invoice attached.
• Server logs: kept by our hosting provider for a short period for security and troubleshooting, then deleted or aggregated.
• The record of sending: our email provider keeps a delivery log of each message it carries for us, recording who it was addressed to, when, and whether it arrived. It keeps that for its own retention period, so that a message that fails to arrive can be traced.
• Analytics data: retained by Google for the period set on the property, and in your browser for the cookie lifetimes in the table above.

7. Your rights

You can ask us, free of charge, to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything that is wrong or out of date;
• delete your data, where we have no obligation to keep it;
• restrict how we use it, or object to our using it;
• hand your data to you, or to someone you name, in a portable format;
• withdraw your consent to analytics or advertising; the Cookie settings link at the foot of any page does this immediately.

Write to contact@georitham.ch and we will respond within one month. We may need to confirm who you are first, so that we are not handing your data to someone else.

If you think we have got this wrong, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or, if you are in the EU or UK, to the supervisory authority where you live or work. We would rather you told us first, and gave us the chance to fix it.

8. Representative in the EU

We have not appointed a representative in the European Union under Article 27 GDPR. Article 27(2)(a) exempts processing that is occasional, does not involve special categories of personal data on a large scale, and is unlikely to result in a risk to the rights and freedoms of individuals.

Enquiries from EU visitors are occasional; they are limited to the contact details and the message a person chooses to send us; they are used only to reply and to prepare a quote; and no special categories of data are involved. On that basis we consider the exemption to apply.

We will reassess this if what we do changes, in particular if advertising in the EU makes enquiries from EU visitors routine rather than occasional, and this page will be updated if the answer changes.