Legal
Privacy policy
In this privacy policy, we explain which personal data we process in connection with our website and our services, for what purposes, and what rights you have. The Swiss Federal Act on Data Protection (FADP) applies. Where the EU General Data Protection Regulation (GDPR) applies in individual cases, its provisions apply in addition.
1. Controller
OTABIS GmbH, Lättichstrasse 6, CH-6340 Baar, Switzerland
E-mail: kontakt@otabis.ch · Phone: +41 52 551 02 51
Please send data protection enquiries to this address, ideally with the subject “Data protection”.
2. What data we process
We process personal data that you provide to us yourself (e.g. name, company, address, e-mail address, phone number, content of your enquiry or ticket) as well as data that is generated technically when you use our website and services (e.g. IP address, time of access, browser used).
3. Visiting our website
Server logs
When you access our website, the web server automatically stores technical information in log files: IP address, date and time, page accessed, amount of data transferred, referrer URL, browser and operating system. We need this data to operate the website securely and reliably and to detect misuse. It is not combined with other data and is deleted automatically once the retention period set by the hosting provider has expired.
The website is hosted by METANET AG, Josefstrasse 218, 8005 Zurich, Switzerland. The servers are located in data centres in Switzerland. METANET processes the data exclusively on our behalf.
Cookies
Cookies are small text files stored by your browser. We use technically necessary cookies where they are required to operate the website, for example to store your choice in the cookie notice. We only use cookies for analytics purposes with your consent (see “Google Analytics”). You can delete or block cookies in your browser settings at any time.
Security alerts
The alerts shown in the “Security status” section are retrieved by our own server from Microsoft and CISA. Displaying this section does not establish any connection between your browser and these providers.
Cyber check
The answers in the cyber check are stored exclusively in your browser’s storage (localStorage) so that you can continue the check later. They are not transmitted to us or to third parties. You can remove them at any time with “Delete answers” or by clearing your browser data. Only if you choose “Send results to Otabis” does your e-mail program open with a summary; you decide yourself whether to send it.
4. Embedded services
Fonts
We use the “Roboto Condensed” font. It is loaded directly from our own server. No data is transferred to third parties in the process.
Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It tells us how visitors use our website (e.g. pages viewed, time spent, approximate location, device used) and helps us improve the website. Google sets cookies for this purpose and processes, among other things, your IP address. Google Analytics 4 does not store IP addresses.
The data may be transferred to Google LLC in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework. The data is deleted in accordance with the retention periods set in Google Analytics, at the latest after 14 months. Google Analytics is only loaded once you give your consent in the cookie notice. You can withdraw your consent at any time via “Cookie settings” in the footer. Further information can be found in Google’s privacy policy.
Google Maps
For the location map, we use Google Maps provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded when you click “Show map”. Only then does your browser connect to Google, transmitting in particular your IP address to Google, which may be processed in the USA. Further information can be found in Google’s privacy policy.
Links to external websites
Links to Microsoft, CISA, Google Maps or other providers open their websites. The privacy policies of the respective provider apply there.
5. Contact, tickets and remote support
E-mail and phone
If you contact us by e-mail or phone, we process your details in order to answer your enquiry and clarify any follow-up questions.
Helpdesk and knowledge base
For support requests, we use a ticket system at ticket.helpdesk.otabis.ch, which is operated on our behalf by a specialised service provider. We process the data entered in the ticket form (e.g. name, e-mail, phone, description of the request, attachments) to record, handle and document your request.
Remote support
For remote support sessions, we use AnyDesk by AnyDesk Software GmbH, Stuttgart, Germany, as well as HopToDesk. A connection is only established when you start the program yourself and give us the ID shown. The connections are transmitted in encrypted form. During the session, we can access your screen and the data visible on it. We only access it to the extent necessary to carry out your request. You can end the session at any time.
6. Client data and processing on behalf
In the course of our IT services (e.g. system and network management, web hosting, telephony, virtual workplaces), we may gain access to personal data of our clients. We process this data exclusively on behalf of and in accordance with the instructions of the client, to the extent necessary to provide our services, and treat it confidentially. On request, we conclude a separate data processing agreement.
We retain data required for the performance of contracts (contact details, quotes, contracts, invoices) in accordance with our legal obligations.
7. Disclosure and transfer abroad
We only disclose personal data if this is necessary to provide our services, for example to IT and hosting providers, software manufacturers or suppliers, if you have given your consent, or if we are legally obliged to do so. Individual service providers may also process data outside Switzerland, in particular in the EU or the USA. In such cases, we ensure an adequate level of data protection, for example through an adequacy decision of the Swiss Federal Council (e.g. for the EU or for companies certified under the Swiss-U.S. Data Privacy Framework) or through standard contractual clauses.
8. Retention
We only retain personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations. We generally retain business records and accounting documents for ten years (Art. 958f of the Swiss Code of Obligations).
9. Data security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse. These include in particular encrypted connections (HTTPS), access restrictions and regular security updates.
10. Your rights
Within the scope of the applicable data protection law, you have in particular the right to
- request information as to whether and which personal data we process about you,
- have incorrect data corrected,
- request the deletion or restriction of processing,
- object to processing and withdraw consent given,
- request that your data be handed over in a common electronic format.
To exercise your rights, simply send a message to the address above. We may request proof of your identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
11. Changes
We may amend this privacy policy at any time. The current version published on this website applies.