EU AI Act in force. Is your AI governance ready?
Talk to our advisors
Version 1.2
Analytics Intelligence Consulting Labs GmbH ("Analytics", "we", "us", "our") operates the website analyticstech.net and is the controller for the personal data described in this policy.
Company: Analytics Intelligence Consulting Labs GmbH
Company identification number (UID): CHE-163.816.143
Address: Zugerstrasse 32, 6340 Baar, Switzerland
Data protection contact: dpa@analyticstech.net
General enquiries: market@analyticstech.net
We are established in Switzerland, so the Swiss Federal Act on Data Protection (FADP) applies to our processing.
Because we offer our services to organisations in the European Economic Area, the EU General Data Protection Regulation (GDPR) also applies to the processing described below. Where the two frameworks impose different standards, we apply the stricter one to all individuals regardless of where they are located.
3.1 Visiting the website
Our website is hosted on Webflow. When you load a page, our hosting provider automatically records technical data: your IP address, browser type and version, operating system, referring page, the pages and files requested, the date and time of the request, and the amount of data transferred.
Why: to deliver the site, keep it secure, detect abuse and misuse, and diagnose technical faults.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure and functional website. Under the FADP, the processing is proportionate and covered by our overriding private interest.
Retention: our hosting provider keeps these logs only for as long as it needs them to deliver and secure the site, and then deletes or anonymises them.
This website sets no cookies. That was checked across all fifteen pages of the site on 14 September 2026, and it is described in our Cookie Policy.
3.2 Contacting us through the website form
Our contact form collects your work email address, your organisation, the service area your enquiry concerns and your message, all of which are required, and your full name and phone number, which are optional.
Why: to answer your enquiry, assess whether we are the right fit, and take steps at your request before entering into a contract.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a possible engagement, and Art. 6(1)(f) GDPR, our legitimate interest in responding to business enquiries, in other cases.
Retention: 24 months after our last exchange, unless the enquiry leads to a client relationship, in which case the data is retained under section 3.5.
3.3 Contacting us by email
If you write to market@analyticstech.net, press@analyticstech.net, dpa@analyticstech.net or to an individual colleague, we process your email address, the content of your message and any attachments. The basis and retention are as set out in section 3.2.
Ordinary email is not an encrypted channel. Please do not send confidential or sensitive information by unprotected email.
3.4 Newsletter subscription
The newsletter block on our website collects your email address. We also record the date and time of your subscription and confirmation, and your IP address at the point of subscription, as evidence of your consent.
Why: to send you the briefing you asked for, and to evidence your consent.
Legal basis: your consent, Art. 6(1)(a) GDPR. Under Swiss law, consent and a working unsubscribe route are required by Art. 3(1)(o) of the Unfair Competition Act.
How consent is obtained: by submitting the newsletter block on our website. We record the date, time and IP address of the subscription as evidence of it.
Withdrawal: you can unsubscribe at any time using the link in every issue, or by writing to dpa@analyticstech.net. Withdrawal does not affect the lawfulness of what we sent before.
Measurement: emails we send from our customer relationship system record whether the message was opened. We do not record which links you click. If we introduce link tracking, we update this policy and the wording at signup before it is switched on.
Retention: until you unsubscribe. We keep a record of your consent and unsubscribe for three years afterwards as evidence of compliance, and your address on a suppression list so we do not contact you again in error.
3.5 Client and prospect relationships
When you work with us, or we are in discussions with your organisation, we process the business contact details and correspondence of the individuals involved: name, role, employer, email address, phone number, meeting notes, contract and billing details, and records of the engagement.
Why: to perform the contract, manage the relationship, meet our legal, accounting and audit obligations, and defend legal claims.
Legal basis: Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for statutory obligations such as Swiss bookkeeping duties, and Art. 6(1)(f) GDPR for relationship management and the establishment or defence of legal claims.
Retention: for the duration of the relationship and then ten years for records subject to Art. 958f of the Swiss Code of Obligations, and shorter periods for other records.
When we process personal data inside a client's systems as part of a delivery engagement, we act as a processor on that client's instructions under a separate data processing agreement, not as a controller. This policy does not govern that processing.
3.6 Direct business outreach
We contact individuals at organisations that fit our service profile, using the business telephone numbers and email addresses those organisations publish, from sources such as company websites, professional networks and business registers. We process name, role, employer and business contact details.
The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in business-to-business marketing, balanced against the limited intrusion of a professional approach to a work address. You can object at any time by replying or writing to dpa@analyticstech.net, and we will stop and record the objection. Swiss recipients: note UWG Art. 3(1)(o) requirements for electronic marketing.
3.7 Job applications
The Careers link in our website footer is not yet published, and we do not currently collect applications through the site. When it goes live, this section will state the data collected, the basis, the retention period and who sees it.
3.8 Social media
The social icons in our website footer currently point to the platform homepages rather than to company profiles, so no company profile is linked from this site today. Where we maintain a company page, the platform processes your data under its own terms and as its own controller. For some platforms we are a joint controller with the provider for page insights. We have no access to the underlying identifiable data and cannot control what the platform does with it.
We do not seek special categories of personal data as defined in Art. 9 GDPR or sensitive personal data as defined in Art. 5(c) FADP, and we ask that you do not include them in enquiries or messages to us. If you send such data unsolicited, we delete it unless we are required to keep it.
We do not sell personal data and we do not share it for third-party advertising.
We share personal data with the following categories of recipient:
Webflow, Inc. Processor. Website hosting, and the delivery of the contact and newsletter forms. Location: United States, with content delivery edge locations.
Microsoft. Processor. Email, documents and collaboration. Location: see section 6.
Microsoft Dynamics 365. Processor. Managing enquiries and client relationships. Location: Switzerland, public cloud.
Our technology implementation and support partners. Processor. Building and supporting our business systems. Location: see section 6.
Professional advisers (legal, audit, accounting). Controller or processor. Advice, audit and statutory filings. Location: Switzerland and the European Union.
Authorities and courts. Controller. Where we are legally required to disclose. Location: case by case.
There is no analytics provider in this list because the website uses no analytics or marketing tags, which was checked across all fifteen pages on 14 September 2026. The newsletter is collected by the website's own form rather than by a separate newsletter provider; if one is introduced, it is added to this list before it is used.
Every processor acts on our documented instructions under a data processing agreement that meets Art. 28 GDPR and Art. 9 FADP.
Our default is to keep data in Switzerland and the EEA.
Where a provider processes data outside these territories, we rely on one or more of the following safeguards:
an adequacy decision by the European Commission or a listing in Annex 1 of the Swiss Data Protection Ordinance,
the European Commission's Standard Contractual Clauses, supplemented for Swiss transfers as recognised by the Federal Data Protection and Information Commissioner,
for transfers to the United States, a valid certification under the EU-U.S. Data Privacy Framework and its Swiss-U.S. extension, where the recipient holds one.
Webflow hosts this website and receives contact and newsletter form submissions in the United States. Its published data processing addendum applies the EU-U.S. and Swiss-U.S. Data Privacy Framework where it is certified, and otherwise the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards by writing to dpa@analyticstech.net.
We keep personal data only as long as it is needed for the purpose it was collected for, or as long as a statutory retention period requires. The periods for each activity are stated in section 3. When a period ends, we delete the data or anonymise it irreversibly.
We apply technical and organisational measures appropriate to the risk, including transport encryption (TLS) across the website, access control on a need-to-know basis, multi-factor authentication for business systems, logging, and vendor due diligence before a provider is engaged.
No system is perfectly secure. If a breach occurs that presents a risk to individuals, we notify the competent authority and, where required, the individuals concerned, within the deadlines set by the GDPR and the FADP.
We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you, as described in Art. 22 GDPR and Art. 21 FADP.
Subject to the conditions and exceptions in the applicable law, you have the right to:
access the personal data we hold about you and receive a copy,
rectify data that is inaccurate or incomplete,
erase data where one of the grounds in Art. 17 GDPR applies,
restrict processing while a dispute about accuracy or lawfulness is resolved,
object to processing based on legitimate interests, including profiling, and to object to direct marketing at any time with no need to give reasons,
receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible (Art. 20 GDPR, Art. 28 FADP),
withdraw consent at any time where processing is based on consent, without affecting processing carried out before the withdrawal.
To exercise any of these, write to dpa@analyticstech.net. We respond within one month of receiving the request, and may extend that by a further two months for complex requests, in which case we tell you within the first month. We may need to verify your identity before acting. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
Complaints
If you believe we have handled your data unlawfully, you can lodge a complaint with a supervisory authority:
Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch
EEA: the supervisory authority of the member state where you live, work, or where the alleged infringement took place.
We would appreciate the chance to address your concern first.
Our website and services are directed at organisations and business professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact dpa@analyticstech.net and we will delete it.
We may update this policy to reflect changes in our processing, our providers or the law. The current version is always available at analyticstech.net/legal/privacy-policy, with the date of the last update at the top. Where a change materially affects you, we draw attention to it by notice on this website.
Questions about this policy or about how we handle personal data: dpa@analyticstech.net
Analytics Intelligence Consulting Labs GmbH
Zugerstrasse 32
6340 Baar
Switzerland
Tell us where the friction is, stalled AI, regulatory pressure, or a roadmap that hasn't translated into reality. We'll tell you honestly whether we can help and what the first step looks like.
