Privacy Policy

The protection of your personal data is a particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions, in particular the Swiss Data Protection Act (DPA) and the European General Data Protection Regulation (GDPR), where applicable.

1. Controller

2. What data we collect

When you visit our website, the following data is automatically recorded and temporarily stored in server log files:

• IP address (anonymised after storage)
• Date and time of access
• Requested URL and referrer URL
• Browser type, operating system and screen resolution
• Amount of data transferred and HTTP status code

This data is used exclusively to ensure trouble-free operation and to improve our offering. It is not merged with other data sources.

3. Legal bases for processing

Your data is processed on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) — operation and security of the website
• Consent (Art. 6(1)(a) GDPR) — for optional cookies (analytics, marketing)
• Performance of a contract (Art. 6(1)(b) GDPR) — for specific enquiries or projects

4. Cookies

Our website uses cookies. Necessary cookies are essential for technical operation and are set without consent. Optional cookies (analytics, marketing) are only activated after your explicit consent.

You can find a detailed overview of the cookies used in our cookie policy. You can withdraw your consent at any time via the “Cookie settings” link in the footer.

5. Contacting us

If you contact us by email or phone, your details — including the contact data you provide — will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. The legal basis is Art. 6(1)(b) and (f) GDPR.

6. Integrated third-party services

We use the following external services, which have their own privacy terms:

7. Data transfer to third countries

Some of the services used (e.g. Vercel) process data in the USA. These transfers take place on the basis of standard contractual clauses pursuant to Art. 46 GDPR and the EU-U.S. Data Privacy Framework. OPUSm AG has no further influence on the processing by these third-party providers.

8. Retention period

Personal data is only stored for as long as is necessary for the respective purpose or as required by statutory retention obligations. Server log files are deleted after 30 days at the latest. Contact enquiries are deleted after they have been finally processed, provided that no contractual relationship arises.

9. Your rights

You have the following rights regarding your personal data vis-à-vis OPUSm AG:

• Access — you can request information about the data stored about you (Art. 15 GDPR)
• Rectification — you can have inaccurate data corrected (Art. 16 GDPR)
• Erasure — you can request the deletion of your data, unless statutory retention obligations preclude this (Art. 17 GDPR)
• Restriction — you can request the restriction of processing (Art. 18 GDPR)
• Objection — you can object to processing based on legitimate interests (Art. 21 GDPR)
• Data portability — you can receive your data in a machine-readable format (Art. 20 GDPR)
• Withdrawal of consent — you can withdraw consent given at any time with effect for the future

To exercise your rights, please contact: info@opusm.ch. You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

10. Changes to this privacy policy

We reserve the right to update this privacy policy at any time to take account of changes to our website or legal requirements. The current version is always available at opusm.ch/en/privacy. The date of the last update is given above.