Privacy notice

1 · Data controller

The controller for the personal data processed through alpflo is:

2 · What data we process

• What you send us for a request or an engagement — the property or project (address, parcel, plans, floor plans, permit documents), your name, company, e-mail and billing address, and whatever you write in your own words. Documents may contain personal data of third parties, such as the developer; send only what the engagement needs.
• Nothing from your visit to this website. The site consists of static pages, accepts no input, sets no cookies, uses no analytics or trackers and loads no third-party scripts. alpflo records no IP address and nothing about your connection; the hosting platform keeps its own short-lived operational logs, which alpflo neither reads nor retains. There is no consent banner because there is nothing to consent to.

There is no self-serve report. You write to us by e-mail, a person at alpflo prepares the deliverable and sends it to the address you gave. Your e-mail address is used for that exchange and for nothing else: no mailing list, no advertising, no sharing.

For the site's visibility in search engines, alpflo uses the Google and Bing webmaster tools, verified by DNS record. They set no cookie, add no tracker and provide only aggregated search data.

3 · Why we process it and on what basis

We process this data to answer your request, to perform, deliver and invoice the engagement (performance of a contract) and to meet the statutory duty to keep business records. We also look at requests as a whole to develop the offer — by type of project and canton, never by person (legitimate interest). No advertising, no profiling, no automated decisions about you.

4 · Retention

A request, the documents sent for an engagement and the deliverable prepared from them are kept for at most 30 days — in the Provider's mailbox and on the Provider's own computer, where the deliverable is prepared — and then deleted. There is no hosted storage and no database that would hold them.

Invoices and booking records of an engagement are kept by the Provider for ten years, as the Swiss retention duty (CO Art. 958f) requires. Payment is by bank transfer against invoice; no card or payment data is collected and no payment provider is involved.

5 · Sharing and cross-border transfers

Deliverables are prepared by the Provider on its own equipment in Switzerland, not on a hosted service. To operate, the Provider uses a few service providers that act on its instructions:

• Infomaniak Network SA (Switzerland) — e-mail routing and mailbox. Your request is received and stored in Switzerland; no cross-border transfer.
• Microsoft Azure Static Web Apps — hosting of the public website www.alpflo.ch, outside Switzerland. The site accepts no input; nothing of yours reaches it.
• Cloudflare, Inc. (USA) — Cloudflare operates the DNS for alpflo.ch and answers requests to the address alpflo.ch with a redirect to www.alpflo.ch; www.alpflo.ch itself is not served through Cloudflare. Only name resolution and the redirect pass through it, never the content of your request.

The address or parcel of an engagement is queried against official Swiss registers — swisstopo/GeoAdmin, the cantonal ÖREB services and GEAK. They are independent public bodies, not processors. We do not sell your data and share it with no one else.

6 · Your rights (nDSG Art. 25)

You have the right to access your personal data, to have it corrected or deleted and to object to its processing. Write to info@alpflo.ch; we answer within 30 days. What alpflo holds about you is little and easy to find: your e-mails, for up to 30 days the deliverable and — for an invoiced engagement — the invoice and booking records, which we may delete only once the statutory retention period has expired.

7 · Complaints

You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), edoeb.admin.ch.