Privacy policy
This privacy policy explains which personal data we process when you visit this website (www.identech.ch), for what purpose, and what rights you have. It covers the website; data processed within customer, supplier and contractual relationships is governed by the respective agreements.
Controller
Identech AG
Lachewäg 2
8197 Rafz
Switzerland
Email: info@identech.ch
Phone: +41 44 885 22 26
For any data protection matter — access, rectification, erasure, objection — please use these contact details.
Applicable law
We process personal data under the Swiss Federal Act on Data Protection (FADP) and its ordinance (DPO). Because we also supply customers in the European Union, we additionally comply with the EU General Data Protection Regulation (GDPR).
Principle
We set no cookies and use neither localStorage nor sessionStorage nor
comparable storage in your browser, so there is no cookie banner. Fonts, images
and scripts are served from our own web server; we do not use external fonts or
content delivery networks. There are no advertising networks, no social media
plugins and no cross-site recognition, and we do not build profiles. There is
no newsletter and there are no user accounts either. The only thing to fill in
is the contact form, and its content leaves your browser only when you submit
it.
Data leaves our hosting at only three points: the cookieless audience measurement, the map on the location page, which is loaded only when you click it, and the contact form, when you submit it.
Services at a glance
| Service | Purpose and legal basis | Registered seat / data location | Safeguard |
|---|---|---|---|
| Novatrend Services GmbH | Hosting, server logs — legitimate interest | Switzerland / Switzerland | — |
| Plausible Insights OÜ | Audience measurement — legitimate interest | Estonia / Germany | EEA |
| Google Ireland Limited (Google Maps) | Map, only after your click — consent | Ireland / EU and USA | DPF |
| Web3Creative (Web3Forms), with CleanTalk and Akismet | Contact form and spam check — pre-contractual steps, legitimate interest | India / India, USA, EU, worldwide through Cloudflare’s network | Standard contractual clauses |
| Twenty.com PBC | CRM: handling enquiries — pre-contractual steps, legitimate interest | USA / Germany | EEA; standard contractual clauses for access from the USA |
| Microsoft Ireland Operations Limited (Microsoft 365) | Email — pre-contractual steps, legitimate interest | Ireland / Switzerland and EU | EEA; DPF for access from the USA |
Legal bases under the GDPR. Legitimate interest (Art. 6(1)(f)) is our interest in operating the website securely, in a data-minimal analysis of its use and in answering enquiries. Pre-contractual steps (Art. 6(1)(b)) applies where your enquiry aims at an offer or a contract. Consent (Art. 6(1)(a)) is what you give by clicking “Load map”.
Safeguards for disclosure abroad. EEA: the Swiss Federal Council recognises data protection in the European Economic Area as adequate (Annex 1 DPO). DPF: the recipient is certified under the Swiss-U.S. and the EU-U.S. Data Privacy Framework. Standard contractual clauses: for countries without an adequate level of data protection — here India and the United States — the disclosure is safeguarded with the European Commission’s standard contractual clauses; for Twenty with the amendments required for Switzerland.
The providers process the data as our processors, exclusively for us and on our instructions; Google is itself responsible for the map. Beyond this, we disclose personal data only where we are legally obliged to do so or where it is necessary to protect our rights. We do not sell data.
Hosting and server logs
This website is hosted by Novatrend Services GmbH, Bahnhofstrasse 18, 6340 Baar, Switzerland. The servers are located in Switzerland (InterXion data centre, Glattbrugg).
When you request a page, the web server logs technically necessary access data:
- IP address of the requesting device
- date and time of the request
- requested address (URL) and volume of data transferred
- HTTP status code
- referring page (referrer), if transmitted
- browser type, browser version and operating system (user agent)
This data is technically required to deliver the website. We use it solely for operation, troubleshooting and security (for example to fend off attacks); we do not combine it with other sources and do not evaluate it on a personal level. Log files are kept for a maximum of six months and then deleted. Where an entry is needed to investigate a specific security incident, we keep it until that investigation is closed.
Audience measurement with Plausible
To understand which content is read, we use Plausible Analytics, a service of Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. The data is stored on servers in the European Union (Falkenstein, Germany) and does not leave the EU.
Plausible collects very little data:
- It sets no cookies and stores no data in your browser.
- Your IP address is not stored. It is used only to determine the country of origin and is discarded afterwards.
- No cross-site profile is created and you are not recognised across days: to count visits, Plausible computes a hash from a daily rotating random value, the website domain, your IP address and your user agent. The random value is deleted after 24 hours, which permanently removes the link.
The following is recorded per page view: the requested address, the referring page, browser and browser version, operating system, device type (desktop, tablet, mobile) and the country derived from the IP address. The result is an aggregated visit statistic — we see figures for pages and countries, not individual people.
To collect this, your browser loads a counting script from plausible.io and
reports the page view there. Your IP address is technically transmitted to
Plausible in the process, but is not stored there, as described above.
Because no information is stored in or read from your device, no consent is
required. You may object to this collection at any time — write to
info@identech.ch or block the domain plausible.io in your browser, for
example with a content blocker.
Plausible’s own privacy information: https://plausible.io/privacy and https://plausible.io/data-policy.
Map on the location page
The location page lets you display our address on a Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is not loaded automatically: as long as you do not press the “Load map” button, no data is sent to Google.
By pressing it, you consent to your browser loading the map directly from Google. This transmits your IP address and technical details about your browser to Google; Google may set cookies and may transfer data to the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google is responsible for any further processing of that data.
Your choice applies to the current page view only — we do not store it, so there is neither a consent cookie nor any withdrawal that would be technically necessary. If you would rather avoid this, use the address or the “Open in Google Maps” link, which takes you to Google only after you click it.
Details on Google’s data processing: https://policies.google.com/privacy.
Contact form
The contact page lets you send us an enquiry through a form. Using it is voluntary; email and phone are equally available.
What data. Required are your first and last name, company, business email address, the type of your enquiry and the enquiry itself. Optional are your phone number, role, location and timeline and — depending on the type of enquiry — the products and quantities you need and the delivery location, or details of your use case: area of application, goals, objects to be tagged, scope and environment, existing systems, project status and preferred products. The form also transmits the language of the page and, if you reached the form through a link on our website, the page you came from and the product or application example named there.
How the data reaches us. When you submit, your browser sends the form to the form service Web3Forms, operated by Web3Creative, India. Your IP address is technically transmitted to Web3Forms in the process. Web3Forms runs the service on infrastructure from Amazon Web Services, Cloudflare and Hetzner (EU) and checks the enquiry for spam — with a control field invisible to people and its own filters, without a captcha. For this check, the spam filtering services CleanTalk and Akismet (both USA) receive your IP address and email address.
Web3Forms then forwards the enquiry to our customer relationship management system (CRM) Twenty, a service of Twenty.com PBC, USA; the data is stored in an Amazon Web Services data centre in Frankfurt (Germany). A copy is sent by email to our Microsoft 365 mailbox so that no enquiry is lost if forwarding ever fails. Before you submit, the contact page loads nothing from Web3Forms.
What for. We use the details to answer your enquiry, classify it and clarify any follow-up questions. We do not use them for newsletters or advertising.
How long. For technical reasons, Web3Forms stores received form data for at most three years and then deletes it automatically. In our CRM we keep an enquiry for as long as it is needed to handle it; if no business relationship results, we delete it no later than 24 months after the last contact. If it becomes part of a business relationship, the ten-year commercial retention obligation applies (Art. 958f Swiss Code of Obligations).
Contacting us by email or phone
If you contact us by email or phone, we process the details you provide — typically name, company, email address, phone number and the content of your enquiry — solely to handle your request and any follow-up questions. Our email runs on Microsoft 365; we record business enquiries in our CRM (see Contact form). Beyond that, we do not pass the details on unless legally obliged to do so.
We retain correspondence for as long as it is needed to handle the matter and keep it traceable. Business correspondence that becomes part of a business relationship is subject to the ten-year commercial retention obligation (Art. 958f Swiss Code of Obligations).
Please note: unencrypted email is not a secure channel. For confidential information, call us instead or agree another route with us.
Data security
The website is served exclusively over an encrypted connection (HTTPS/TLS). Together with our hosting provider we take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. That said, no one can guarantee complete security for data transmitted over the internet.
No automated decision-making
We do not use automated individual decision-making or profiling within the meaning of Art. 21 FADP or Art. 22 GDPR.
Your rights
Within the limits of applicable law, you have the right to
- request information about the personal data we process,
- have inaccurate data corrected,
- request erasure or destruction of data,
- have processing restricted,
- receive data you have provided to us in a common format or have it transferred, and
- withdraw consent at any time with effect for the future.
Right to object. Where we process data on the basis of a legitimate interest, you may object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
Please write to info@identech.ch. To protect your rights we must be able to verify your identity; we ask only for the details actually needed for that.
If you are not satisfied with our response, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch) or pursue civil remedies. People in the EU may additionally lodge a complaint with the supervisory authority of their place of residence, place of work or the place of the alleged infringement (Art. 77 GDPR).
Links to other websites
This website links to third-party websites, for example those of our partners. We are not responsible for their content or for how they handle your data; their own privacy policies apply.
Changes
We adapt this privacy policy when our data processing or the legal situation changes. The version published on this page at the time is the applicable one.
The German version of this policy governs; the English text is a convenience translation.
Last updated: October 2026