Legal
Privacy Policy
The nature, scope and purpose of the processing of your personal data by Alpine Tech AI GmbH.
Last updated: 1 November 2026
Introduction and scope
This privacy policy explains what personal data Alpine Tech AI GmbH collects, what we use it for and how we protect it.
It applies to our website alpinetechai.com and to the online services and communication channels connected to it.
We treat your personal data confidentially and in line with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
You can generally use our website without giving us any personal data. If you share data with us, for example through the contact form, you do so voluntarily. We do not sell your data and only pass it on to the service providers named in this policy.
Consulting and project contracts may be subject to additional terms, for example in a quote, a contract or a data processing agreement.
Controller
The controller responsible for data processing is:
- Company
- Alpine Tech AI GmbH
- Address
- Richtistrasse 2 (R2 Tower) 8304 Wallisellen, Switzerland
- Data protection contact
- Nordin Maier
- Phone
- +41 76 256 95 85
- Website
- alpinetechai.com
You can contact us at any time with questions about data protection.
Definitions
- Personal data
- Any information relating to an identified or identifiable natural person, such as name, email address, phone number or IP address.
- Processing
- Any handling of personal data, in particular collecting, storing, using, modifying, disclosing, archiving and deleting it.
- Processor
- A service provider that processes personal data on our behalf and on our instructions, such as our hosting provider.
- Consent
- Your voluntary, informed and unambiguous agreement to a specific processing activity, for example through our cookie banner.
- Cookies and local storage
- Small files or entries that your browser stores on your device. They may last for a session or for a set period.
Legal bases
We process personal data in line with the revised Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). Processing is permitted in particular where:
- you have given your consent,
- it is necessary to prepare or perform a contract,
- we have an overriding legitimate interest, or
- a legal obligation requires it.
Legal bases under the GDPR
Where the GDPR applies, for example to people in the EU/EEA, we rely on Art. 6(1) GDPR:
- (a) Consent
- For example for analytics cookies. You can withdraw your consent at any time with effect for the future.
- (b) Contract
- To handle your enquiry, prepare quotes and perform contracts.
- (c) Legal obligation
- For example statutory retention obligations.
- (f) Legitimate interests
- To run the website securely and reliably and to communicate with prospects and clients, unless your interests override ours.
Data we process
| Category | Examples | Source |
|---|---|---|
| Identity data | First name, last name, company | From you, e.g. via the contact form |
| Contact data | Email address, phone number | From you |
| Content data | Messages, selected enquiry type, chat input | From you |
| Technical data | IP address, browser, operating system, device type | Automatically when you visit the website |
| Usage data | Pages visited, time on page, referring page | Automatically, analytics only with consent |
Purposes of processing
| Purpose | Description | Legal basis |
|---|---|---|
| Running the website | Providing the website and its features | Legitimate interest |
| IT security | Protection against misuse, attacks and outages | Legitimate interest |
| Contact enquiries | Answering your enquiry and communicating with you | Pre-contractual steps / legitimate interest |
| Client relationship | Managing quotes, projects and ongoing work | Contract / legitimate interest |
| Audience measurement | Understanding how the website is used so we can improve it | Consent |
| Legal obligations | Meeting retention and documentation duties | Legal obligation |
Processing in detail
Hosting and server log files
Our website is hosted by Vercel Inc. (USA). Each time a page is requested, the server automatically records technical data needed to deliver and secure the website: IP address, date and time, page requested, referring page, browser and operating system. These log files are kept only briefly and then deleted automatically.
Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR / Art. 31(1) FADP).
Contact form
When you write to us through the contact form, we process your details to answer your enquiry: first name, last name, email address, optionally company and enquiry type, your message and the time of the enquiry. The message is delivered to our inbox through the EmailJS service. Each enquiry is also stored in an internal spreadsheet in Google Workspace (Google) so that no enquiry gets lost.
Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR) or our legitimate interest in answering you (Art. 6(1)(f) GDPR / Art. 31 FADP).
Contact by email or phone
If you contact us by email or phone, we process your details to respond to you. Our email runs on Google Workspace.
Website chat
Our website offers a chat feature. It is provided by an external service whose servers run on Heroku (Salesforce, Inc., USA). What you type in the chat is sent to this service and processed there, including with AI language models, to answer you. Please do not enter sensitive personal data in the chat.
Legal basis: legitimate interest in answering questions, or pre-contractual steps.
Booking a call
To book an introductory call, we link to Calendly (Calendly LLC, USA). When you book, Calendly processes the details you enter (e.g. name, email address, preferred time) and passes them to us. Calendly's own privacy policy also applies.
Cookies and local storage
We use storage that is technically necessary for the website to work. This includes your cookie choice, which we keep in your browser's local storage for 180 days. We only set optional analytics cookies if you agree in the cookie banner. You can change your choice at any time via "Cookie Settings" in the footer.
Google Analytics
We use Google Analytics 4 (Google Ireland Limited and Google LLC, USA) to understand how our website is used. We use Google's consent mode: without your consent, no analytics cookies are set and Google only receives cookieless measurements without an identifier. Analytics cookies are set only once you consent. Advertising features, Google Signals and ad personalisation are disabled. Google Analytics 4 does not store full IP addresses.
Legal basis: consent (Art. 6(1)(a) GDPR), or legitimate interest for cookieless measurement.
Vercel Web Analytics
With your consent, we use Vercel Web Analytics to evaluate page views in aggregated form. The service works without cookies and does not build personal profiles.
Links to social networks
Our website links to our profiles on LinkedIn and Instagram. These are plain links: no data is transferred until you click one. The privacy terms of the relevant network then apply.
Transfers abroad
Some of our service providers (Vercel, Google, EmailJS, Heroku, Calendly) may process personal data outside Switzerland, in particular in the USA. We only disclose data to countries with adequate data protection, or we safeguard the transfer with appropriate guarantees, such as the Swiss-U.S. Data Privacy Framework or the EU Commission's standard contractual clauses as recognised by the FDPIC.
Retention periods
We keep personal data only as long as needed for the relevant purpose or as required by law. After that we delete or anonymise it.
| Data category | Retention | Basis |
|---|---|---|
| Enquiries without an engagement | 12 months | Purpose fulfilled / legitimate interest |
| Client and project data | 10 years after the engagement ends | Contract and legal obligations |
| Server log files | Short term, per hosting provider | IT security |
| Cookie choice | 180 days | Technically necessary |
| Accounting records and invoices | 10 years | Art. 958f Swiss Code of Obligations |
Data security
We protect your personal data against unauthorised access, loss and misuse with appropriate technical and organisational measures, in particular:
- encrypted transmission (TLS/HTTPS),
- access restrictions for our systems,
- careful selection and contractual commitment of our service providers,
- regular updates of our systems.
No transmission over the internet is completely secure. If a data breach occurs that poses a high risk to you, we will inform you and the FDPIC as required by law.
Your rights
Under the FADP and, where applicable, the GDPR, you have the following rights:
- Access
- You can find out whether and what personal data we process about you, why and for how long.
- Rectification
- You can ask us to correct inaccurate data or complete incomplete data.
- Erasure
- You can ask us to delete your data unless a statutory retention obligation applies.
- Restriction
- Under certain conditions, you can ask us to restrict processing.
- Portability
- You can receive data you gave us in a common electronic format.
- Objection
- You can object at any time to processing based on our legitimate interest.
- Withdrawal
- You can withdraw consent at any time for the future, for example via the cookie settings.
Complaints to the supervisory authority
You can lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. People in the EU/EEA can also contact the supervisory authority in their country.
How to exercise your rights
Write to us at info@alpinetechai.com. To make sure the request comes from you, we may ask for proof of identity. We usually respond within 30 days.
Changes and contact
We may update this privacy policy if our data processing or the law changes. The version published on this page applies.
If you have questions about this privacy policy, contact us at info@alpinetechai.com.