PRIVACY
Your data. Clearly explained.
Which personal data we process when you visit this website, contact us or book a call, and what rights you have.
Last updated: November 2026
Controller & contact
andyou systems · Jonas Dickel Widmerstrasse 85, 8038 Zürich, Switzerland mail@andyousystems.com · +41 79 756 55 89 This privacy policy follows the Swiss Federal Act on Data Protection (FADP). Where processing falls within the scope of the EU General Data Protection Regulation (GDPR), the information below also serves that purpose. Accessing this website from the EU alone does not determine whether the GDPR applies.
Website visits & hosting
When you visit this website, the server automatically records technical data: IP address, date and time, page requested, referring page, browser and operating system. We need this data to deliver the website, keep it stable and detect misuse. The hosting provider processes this data on our behalf. This website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias, Switzerland. Web hosting data is stored in data centres in Switzerland. Infomaniak states that access and error logs are retained for at least seven days: https://www.infomaniak.com/en/support/faq/1926/show-web-access-and-error-logs. Information about processing on our behalf: https://www.infomaniak.com/en/legal/data-protection-act Fonts and graphics are served from our own server. When you load the website, no data is sent to font, map or video services.
Your choice: cookies & optional analytics
The first-party cookie andyou_consent remembers your privacy choices for 180 days. The consent interface and its assets are served from our own website. You can reject all optional processing as easily as you accept it, and change or withdraw your choices through Privacy settings in the footer. When analytics is enabled for the website and you consent, we use PostHog EU to evaluate known page views and clicks on our booking link. A click is not a confirmed booking. A random identifier and technical session data are stored in localStorage (ph_andyou_analytics and related project-specific keys) and sessionStorage. Unlike the consent cookie, localStorage has no automatic expiry date. It is cleared when you withdraw consent, when you next visit after consent has expired, or when you delete the website data in your browser. Session storage lasts for the browser tab session. We do not send form contents, names, email addresses, URL parameters or advertising identifiers as event properties, and we do not create identified person profiles. Session recordings require a separate optional choice as well as analytics consent and technical activation. Text and element attributes are masked in the browser; forms, images and media are excluded. Contact pages and URLs containing parameters or fragments are not recorded. Console logs, network bodies and headers are not recorded. No PostHog requests are made before consent. Withdrawal stops further collection and removes this site's analytics storage; it does not automatically erase previously collected events. To request deletion, contact us. Optional processing is based on consent (Art. 6(1)(a) GDPR where applicable). The provider is PostHog, Inc., USA. Our project uses PostHog EU with storage in Frankfurt, Germany. This does not mean that all processing takes place exclusively within the EU; see Recipients & transfers abroad below. The selected free plan retains analytics events for one year; the project retains session recordings for 30 days if recording is activated. IP storage is disabled in the project. Provider privacy information: https://posthog.com/privacy
Contact by email, phone or form
The contact form does not send any data to us. When you click «Prepare email», your own email program opens a draft with your details; you decide whether to send it. When you write to us or call, we process your name, contact details, company and the content of your message in order to answer your enquiry and, where applicable, prepare an offer. Our email runs on Google Workspace (Google Cloud EMEA Ltd., Ireland). We keep enquiries for as long as needed to handle them; records subject to statutory retention, such as accounting records and supporting documents, are kept for the applicable statutory period, generally 10 years under Art. 958f of the Swiss Code of Obligations. This does not apply automatically to every enquiry.
Booking an intro call
The «Let’s talk» button on the home page opens our booking page in Google Calendar. When you book, Google records your name, email address, the chosen time and your optional notes such as company and topic, and sends both of us a confirmation. Calls take place via Google Meet unless agreed otherwise. Google acts as our processor. We use the data to prepare and hold the call and delete it when it is no longer needed, unless a working relationship follows. Google Calendar is linked, not embedded: opening our website alone does not load the booking page. When you follow the link, Google processes data under its own privacy policy whether or not you are signed in. If you are signed in, Google may associate the visit with your account. Google privacy policy: https://policies.google.com/privacy?hl=en
Projects & working together
If we work together, we process the contact and contract data of your contact persons for planning, delivery and invoicing. Where we process personal data on your behalf in a project, for example in an automation or a knowledge base, we conclude a separate data processing agreement that sets out the purpose, data, sub-processors and hosting location.
Recipients & transfers abroad
We only disclose personal data to service providers that we need for the purposes above: the hosting provider of this website, Google (Google Workspace, Google Calendar, Google Meet), and PostHog for optional processing with your consent. Google may also process data in the USA and other countries. Google LLC is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework; in addition, the EU standard contractual clauses recognised by the FDPIC apply. We have concluded a data processing agreement with PostHog. Its EU service involves processing in Germany and France and internal support in the United Kingdom; processing in the USA and international transit through Cloudflare may also occur. EU hosting therefore does not exclude transfers abroad. The agreement provides safeguards for transfers, including standard contractual clauses with Swiss adaptations and, where applicable, recognised Data Privacy Framework mechanisms. The current subprocessors, their purposes and processing locations are listed at https://posthog.com/subprocessors; the contractual safeguards are described at https://posthog.com/dpa. PostHog AI features are not used for this website. We do not sell personal data and do not pass it on for advertising.
Data security
This website is delivered only over an encrypted connection (HTTPS). We limit access to personal data to the people who need it and apply technical and organisational measures appropriate to the processing. These measures are reviewed as our services and systems change.
Your rights
You may ask us at any time what personal data we hold about you, have it corrected or deleted, object to its processing and receive data you provided in a common format. Simply write to mail@andyousystems.com. We may ask you to confirm your identity. You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch/en, and, where the GDPR applies, with the supervisory authority in your country of residence. Where processing is based on your consent, you can withdraw it at any time with effect for the future. Under the GDPR, we base processing on Art. 6(1)(b) (contract and pre-contractual steps), (c) (legal obligations) and (f) (legitimate interest in operating a secure website and answering enquiries).
Changes
We update this privacy policy when our website or our processing changes. The version published here applies.