Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

unscripted GmbH, Grienbachstrasse 17, 6300 Zug, Switzerland.

For any privacy questions, contact us at info@it-provider.ch. Further details about the operator are available in the legal notice.

2. Data we process

Depending on how you use the website, we process in particular the following categories of personal data:

Server and usage data

When you access the website, technical data is collected automatically (IP address, date and time, page requested, referrer, user agent/browser). This arises at our hosting provider and in our server-side page-hit beacon.

Usage and analytics data

Anonymised or pseudonymised information about your interaction with the site (pages viewed, clicks, time on page, approximate region, device type) via our analytics and session-replay tool.

Contact and enquiry data

The information you provide when submitting the consultation/contact form (e.g. name, email address, company, message).

Review data

When submitting a review: email address (for confirmation in the double opt-in process), name/display name and the content of the review.

Account and provider data

If you register as a provider or claim a listing, we process your sign-in and profile data via our authentication service.

3. Purposes and legal bases

We process personal data to provide and securely operate the website, respond to enquiries, review and publish ratings, analyse usage statistically and improve our offering.

Under the revDSG, depending on the case we rely on an overriding legitimate interest (secure operation, reach measurement, abuse prevention), on the initiation/performance of a contract (handling your enquiry, provider account) or on your consent (e.g. confirming the review email). You may withdraw any consent at any time with effect for the future.

4. Analytics and session replay

For reach measurement we use Umami (cloud.umami.is), a privacy-friendly analytics tool that works without cookies and does not build cross-site profiles.

In addition, we operate our own tracking and session-replay tool at g.it-provider.ch (self-hosted). Session replay records interactions with individual pages (e.g. mouse movements, clicks, scrolling, page changes) to analyse usability and detect errors. Keystrokes in form fields are not stored as plain-text content. A server-side page-hit beacon also fires on each page view and additionally captures visits from search-engine crawlers.

5. Recipients and processors

To operate the website we rely on carefully selected service providers that process data on our behalf:

Cloudflare

Hosting, content delivery network, email delivery and database. Processes server and usage data to deliver and secure the website.

Umami (cloud.umami.is)

Cookieless web analytics for aggregated reach measurement.

Session replay / tracking (g.it-provider.ch)

Self-hosted tool for recording page interactions and measuring page hits.

Clerk

Authentication service for provider and administrator sign-in (account and login data).

logo.dev (img.logo.dev)

Retrieval of company logos for provider profiles. The requested domain may be transmitted to the service.

Google (www.google.com/s2/favicons)

Retrieval of favicons/site icons for individual providers. The queried provider domain may be transmitted to Google.

6. Disclosure abroad

Some of the service providers named above may process personal data abroad, including in countries inside and outside the EU/EEA (e.g. the USA). Where data is disclosed to a country without an adequate level of data protection, we rely on appropriate safeguards within the meaning of the revDSG, in particular the EU Commission's standard contractual clauses or recognised contractual clauses.

7. Contact, consultation and lead form

If you send us an enquiry via the consultation or contact form, we process the data you provide in order to handle your request and get in touch with you. Providing the data is voluntary; however, without the required details we cannot process your enquiry.

8. Reviews (double opt-in)

Provider reviews are collected via a double opt-in process: after submission you receive an email with a confirmation link. A review is published only after confirmation and a subsequent manual check by us. We use your email address for confirmation and any follow-up; it is not displayed publicly.

9. Cookies and local storage

We use technically necessary cookies or comparable storage techniques, for example to remember your language choice or to maintain a signed-in session. No cookies are set for web analytics with Umami. You can delete or block cookies at any time in your browser settings.

10. Retention

We process personal data only for as long as necessary for the purposes stated or as required by statutory retention obligations. Analytics and session-replay data is deleted or aggregated after a limited period. Enquiry and review data is deleted once no longer needed for processing or publication.

11. Your rights

Within the scope of applicable law, you have the right to obtain information about the personal data we process about you, as well as to rectification, deletion or release/transfer of your data. You may object to processing and withdraw any consent given at any time.

To exercise your rights, contact us at info@it-provider.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

12. Changes

We may update this privacy policy to reflect changes in the law or in our processing. The version published on this page from time to time applies.