Privacy Policy

1. Controller

The controller responsible for data processing is:

privacy@axtero.com

2. Collection and Processing of Personal Data

We collect personal data in the following cases:

• • When you visit our website (technical data such as IP address, browser type, access times)
• • When you use our contact form or send us an email (name, email address, message content)
• • When you subscribe to our newsletter (email address)
• • When you book a consultation or discovery call (name, email, company, phone number)
• • When you use our services (project-related data as agreed in individual contracts)

3. Purposes and Legal Bases

We process your personal data for the following purposes:

• • Provision and optimization of our website (legitimate interest, Art. 6(1)(f) GDPR)
• • Responding to inquiries and providing customer support (contract performance, Art. 6(1)(b) GDPR)
• • Sending newsletters and marketing communications (consent, Art. 6(1)(a) GDPR)
• • Fulfillment of contractual obligations (contract performance, Art. 6(1)(b) GDPR)
• • Compliance with legal obligations (legal obligation, Art. 6(1)(c) GDPR)

4. Cookies and Tracking Technologies

Our website uses only strictly necessary first-party cookies for core functionality (e.g., language preference and content preview). We do not use analytics or marketing cookies.

Our analytics solution (Vercel Analytics) is fully cookieless and does not collect personal data or set any cookies. Third-party content (such as the HubSpot booking calendar) is only loaded with your explicit consent via a click-to-load mechanism, preventing any third-party cookies from being set without your action. You can manage cookies at any time through your browser settings.

5. Data Transfer

Your personal data may be transferred to the following categories of recipients:

• • Hosting providers (for website operation)
• • Email service providers (for communication)
• • Cookieless analytics (Vercel Analytics — no personal data collected)
• • Booking calendar provider (HubSpot — loaded only with your consent)

Where data is transferred outside the EEA or Switzerland, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Storage Duration

We store your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specific retention periods:

• • Website access logs: 90 days
• • Contact form inquiries: duration of the business relationship plus statutory retention periods
• • Newsletter subscriptions: until you unsubscribe
• • Contractual data: 10 years after end of contract (statutory retention obligation)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), regular security updates, and access controls.

8. Obligation to Provide Data

The provision of personal data is neither legally nor contractually required. However, without certain data (such as contact information), we may not be able to provide our services or respond to your inquiries.

9. Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

10. Rights of Data Subjects

Under applicable data protection law, you have the following rights:

• • Right of access: You may request information about your personal data we process
• • Right to rectification: You may request correction of inaccurate data
• • Right to erasure: You may request deletion of your data under certain conditions
• • Right to restriction: You may request restriction of processing
• • Right to data portability: You may request your data in a machine-readable format
• • Right to object: You may object to processing based on legitimate interests
• • Right to withdraw consent: You may withdraw consent at any time without affecting the lawfulness of prior processing

To exercise your rights, please contact us at privacy@axtero.com.

You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).

11. Amendments

We reserve the right to amend this privacy policy at any time. The current version is always available on our website. We encourage you to review this policy periodically.