Skip to main content
Datia
en
enEnglishdeDeutschfrFrançaisesEspañol
Contact us

Privacy Policy

This Privacy Policy explains how Datia processes personal data when you use www.datia.ch, contact us, apply for a role, or otherwise communicate with us. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, other data protection laws.

Effective date: 16 June 2026

Controller

The controller responsible for the processing described in this Privacy Policy is:

Sanchez Sierra - Datia, a sole proprietorship operating as “Datia” / “Datia CH”
Hardstrasse 1A
5600 Lenzburg
Switzerland
UID: CHE-295.773.389
Email: contact@datia.ch

Personal Data We Process

Website And Security Data

When you visit our website, our hosting and security providers may process technical data, including:

  • IP address
  • Approximate location derived from the IP address, such as country level
  • Date and time of access
  • Requested pages, referrer URL, browser type, device information, user agent, and similar request metadata
  • Technical logs, error logs, and security events

Purpose: To deliver the website, select the appropriate language where relevant, keep the website secure, prevent abuse, troubleshoot errors, and defend against attacks such as DDoS or automated spam.

Contact Form And Direct Communications

When you send us a message through the contact form or by email, we process:

  • Your name
  • Your email address
  • Your message content
  • Date and time of submission or communication
  • Any other information you choose to provide

Purpose: To respond to your inquiry, communicate with you, evaluate a potential business relationship, provide requested information, and document our communication.

Job Applications

When you apply for a role through the website, we process:

  • Your name, email address, and phone number
  • LinkedIn profile, portfolio, notes, or other details you choose to provide
  • The role you apply for
  • Your CV/resume and, if provided, cover letter
  • File names, file contents, and submission metadata

Purpose: To receive, review, and manage your application, communicate with you about the application process, assess your suitability for a role, and defend or exercise legal claims where necessary.

Customer And Project Data

If you become a customer or business contact, we may process contact details, company details, project information, billing information, contractual correspondence, and other data necessary to prepare, conclude, perform, administer, or enforce a contract.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect forms against spam and automated abuse. Turnstile may process signals such as IP address, TLS fingerprint, user agent, site key, origin, challenge result, and related browser or request information. We also send the Turnstile token and, where available, the visitor IP address to Cloudflare’s Siteverify API for server-side verification.

Cloudflare describes Turnstile as a security tool that processes these signals to distinguish human users from bots. More information is available in Cloudflare’s Turnstile Privacy Addendum.

AI Assistant (Chatbot)

Our website offers an optional AI assistant that answers questions about Datia using our own website content. When you send a message to the assistant, we process:

  • The messages you type, including any information you choose to include
  • The assistant’s responses
  • Your IP address, used to apply rate limits and prevent abuse

Your messages are sent to Cloudflare Workers AI, which runs the language model that generates the answer (Google Gemma 4, with a fallback model if generation fails), and to Cloudflare AI Search, which retrieves relevant passages from our published website content. The assistant is designed to answer only from our website content and does not make decisions about you.

So your conversation stays available as you navigate the site, the recent conversation (a limited number of the latest messages) is stored in a temporary session and automatically deleted after 7 days.

Please do not enter sensitive personal data, confidential information, or third-party personal data into the assistant. It is intended for general questions about our services.

Purpose: To answer visitor questions about our services, improve the accessibility of our information, prevent abuse, and keep the assistant secure and reliable.

Optional Third-Party Services, Analytics, And Marketing

We may introduce or use additional third-party services for website analytics, performance measurement, tag management, search visibility, advertising conversion tracking, remarketing, customer relationship management, scheduling, video meetings, maps, embedded media, productivity, payment, security, support, or other business operations. These services may include Google services such as Google Analytics, Google Tag Manager, Google Search Console, Google Ads or conversion tracking, Google Maps, Google reCAPTCHA, Google Workspace, Google Meet, or comparable services from other providers.

If such services are enabled, they may process personal data such as IP address, device and browser information, approximate location, pages visited, events and clicks, referrer URL, cookie or client identifiers, conversion data, interaction with embedded content, and information you provide through forms or communications. Depending on the service, Google or another provider may act as our processor or as an independent controller under its own privacy policy.

We use non-essential analytics, marketing, advertising, remarketing, or tracking technologies only where we have implemented the notice, consent, opt-out, or cookie-preference mechanism required by applicable law. If you do not consent to non-essential technologies, the basic website should remain available, although optional features or embedded third-party content may not function.

If you interact with us on social networks or follow external links, the operators of those platforms may process personal data under their own privacy policies. We do not control those third-party processing activities.

Under Swiss law, we process personal data in accordance with the principles of lawfulness, transparency, proportionality, purpose limitation, and data security. Where a legal basis is required, including under the GDPR where applicable, we rely on:

  • Our legitimate interests in operating a secure website, preventing abuse, responding to inquiries, managing business relationships, recruiting, and defending legal claims
  • Pre-contractual steps or contract performance when you request services, apply for a role, or enter into a business relationship with us
  • Legal obligations, for example accounting, retention, or regulatory duties
  • Consent, where we ask for consent for a specific processing activity
  • Consent or another legally permitted basis for optional analytics, marketing, advertising, remarketing, embedded content, or tracking technologies, where required

Processors And Recipients

We do not sell personal data. We disclose personal data only where necessary for the purposes described in this Privacy Policy, including to:

  • Cloudflare for website hosting, security, Workers infrastructure, logs, Turnstile spam protection, and the AI assistant (Workers AI text generation and AI Search retrieval)
  • Resend for sending contact-form messages and job applications to our email inboxes
  • Google group companies where Google services are enabled, for example analytics, tag management, search visibility, advertising conversion tracking, maps, embedded content, productivity, or communications services
  • Analytics, marketing, advertising, CRM, scheduling, payment, productivity, video, embedded-content, security, support, and other business service providers where such services are enabled
  • Email, IT, hosting, and security service providers used to operate our business
  • Professional advisers, insurers, auditors, or legal representatives where necessary
  • Authorities, courts, or counterparties where required by law or necessary to establish, exercise, or defend legal claims

Service providers may process personal data only for the relevant service purposes and subject to contractual, confidentiality, and security obligations.

International Transfers

Personal data may be processed in Switzerland, the European Economic Area, the United States, or other countries where our service providers operate. If personal data is transferred to a country without an adequate level of data protection under Swiss law, we use appropriate safeguards where required, such as standard contractual clauses, data processing terms, certifications such as the Swiss-U.S. Data Privacy Framework where applicable, or another legally permitted transfer mechanism.

Retention

We retain personal data only for as long as necessary for the relevant purpose or as required by law. In general:

  • Contact inquiries and related correspondence are retained for up to 24 months after the last interaction, unless a longer period is necessary for a customer relationship, legal claim, or statutory duty
  • Customer, project, contract, and billing data is retained for the statutory retention periods applicable in Switzerland, usually up to 10 years for business records
  • Job application data is retained for up to 6 months after the end of the recruitment process, unless you consent to longer retention, are hired, or a longer period is necessary for legal claims or statutory duties
  • Security and technical logs are retained for the period necessary for security, troubleshooting, abuse prevention, and legal-defense purposes, subject to the retention settings and limits of our providers
  • Analytics, marketing, advertising, and third-party service data is retained according to the purpose, our provider settings, and the relevant provider’s retention rules, for no longer than reasonably necessary

If we no longer need personal data, we delete it or anonymize it where reasonably possible.

Cookies And Similar Technologies

Our website uses technologies that are technically necessary for website delivery, security, form protection, and abuse prevention, including Cloudflare Turnstile. Depending on Cloudflare configuration and visitor risk signals, Cloudflare may use strictly necessary cookies or similar technologies for security purposes.

If we introduce Google Analytics, Google Tag Manager, Google Ads, remarketing pixels, conversion tags, embedded media, maps, or other non-essential analytics, marketing, advertising, or tracking technologies, those services may set cookies, pixels, local storage entries, or similar identifiers. We will use non-essential technologies only where the required notice, consent, opt-out, or cookie-preference mechanism is in place. Details of active non-essential technologies may be provided in this Privacy Policy, a cookie banner, a consent preference tool, or a service-specific notice.

Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures include access restrictions, encrypted transmission where appropriate, provider security controls, and operational safeguards. No system can be guaranteed to be completely secure.

Your Rights

Subject to the conditions and limitations of applicable law, you may request:

  • Access to your personal data
  • Correction of inaccurate personal data
  • Deletion of personal data
  • Restriction of processing or objection to processing
  • Data portability or release of data where applicable
  • Withdrawal of consent, where processing is based on consent

To exercise your rights, contact us at contact@datia.ch. We may need to verify your identity before responding. We may refuse, restrict, or delay a request where permitted by law, for example to protect third-party rights, trade secrets, legal claims, or statutory duties.

Automated Individual Decisions

We do not use automated individual decision-making that produces legal effects or similarly significant effects for website visitors, contact-form users, or job applicants. We do not use profiling for advertising purposes.

Complaints

You may contact us with any privacy concern at contact@datia.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), the Swiss data protection supervisory authority.

Changes

We may update this Privacy Policy at any time. The version published on this page is the current version. Material changes will be reflected by updating the effective date.