Effective
1Scope and controller
This policy explains how we handle personal data on this website. It does not cover personal data we process on behalf of a customer while delivering services under a Statement of Work — there, the customer is the controller and we act as processor, as set out in our General Terms and Conditions and the applicable Data Processing Agreement.
The controller for this website is:
- 56k.Cloud SA
- Chemin Saint-Hubert 5, 1950 Sion, Switzerland — CHE-208.657.564
- Data protection contact
- privacy@56k.cloud
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
2What we collect
2.1When you contact us
Our contact form asks for your name, work email, and message, and optionally your company. If you send us the form, we transfer this data into our CRM system so we can answer you and, where relevant, follow up on a possible engagement.
The legal basis is the performance of a contract or the steps leading up to one; where no contract is contemplated, our legitimate interest in responding to enquiries addressed to us.
2.2When you subscribe to our newsletter
Our newsletter form asks for your email address, and optionally your name. We add it to our mailing list so we can send you the newsletter. You can withdraw your consent at any time by using the unsubscribe link in any newsletter, or by writing to privacy@56k.cloud.
The legal basis is your consent.
2.3When you book a call
Booking links on this site open Google Calendar's appointment scheduling, operated by Google. What you enter there is processed by Google under its own privacy policy, and we receive the resulting booking details.
2.4When you simply browse
Our hosting provider records technical data needed to serve the site securely and reliably, including your IP address, the pages requested, timestamps, and your browser's user agent. We also collect aggregated usage statistics — see the next section.
The legal basis is our legitimate interest in operating a secure, functioning website.
3Analytics
We use Vercel Web Analytics to understand which pages are read and how visitors arrive. It is a privacy-friendly, cookieless analytics service: it sets no cookies, stores no identifier on your device, and does not track you across other websites. It records aggregated page views together with coarse information such as referrer, country, and device type.
Because no cookies are set and no cross-site profile is built, we do not ask for consent for analytics. The legal basis is our legitimate interest in understanding how our website is used.
6International transfers
Some of these providers process data outside Switzerland and the EEA, including in the United States. Where a country does not offer an adequate level of protection under Swiss or EU law, the transfer is covered by appropriate safeguards — as a rule the European Commission's Standard Contractual Clauses together with the applicable Swiss addendum, complemented by the provider's own technical and organisational measures.
You can request more detail about the safeguards for a specific transfer by writing to privacy@56k.cloud.
7How long we keep it
We keep personal data only as long as necessary for the purposes described above, and thereafter only as long as a statutory retention obligation requires. In practice we apply the following periods:
- Contact enquiries that do not lead to an engagement:
- 24 months from our last exchange, then deleted.
- Contact enquiries and CRM records relating to a customer relationship:
- for the duration of the relationship and 24 months after it ends, except where they form part of business records subject to the statutory retention period below.
- Newsletter subscriptions:
- until you unsubscribe. We then delete the subscription, keeping only the minimum record needed to honour your unsubscribe request.
- Booking and appointment data:
- 24 months from the appointment date.
- Server and security logs:
- up to 12 months, after which they are deleted or fully anonymised.
- Web analytics:
- retained only in aggregated form, which is not attributable to you as an individual.
- Business and accounting records:
- 10 years, as required by Article 958f of the Swiss Code of Obligations. This statutory duty takes precedence over the shorter periods above.
We may keep data beyond these periods where it is necessary to establish, exercise, or defend legal claims, and only for as long as that purpose lasts.
8Data security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — including encryption in transit, access control on a need-to-know basis, and confidentiality obligations binding our personnel. No transmission over the internet can be guaranteed completely secure, so we cannot warrant absolute security.
9Your rights
Subject to the conditions and exceptions of applicable law, you have the right to:
- obtain confirmation as to whether we process personal data about you, and access to that data;
- have inaccurate personal data corrected, and incomplete data completed;
- have personal data deleted, or its processing restricted;
- withdraw a consent you have given, at any time, without affecting processing already carried out;
- object to processing based on our legitimate interests;
- receive certain personal data in a portable, machine-readable format; and
- lodge a complaint with a supervisory authority.
To exercise any of these rights, write to privacy@56k.cloud. We may need to verify your identity before we act on a request. In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, the data protection authority of your country of residence.
10Changes to this policy
We may update this policy as our website, our tooling, or the law changes. The effective date at the top of this page always reflects the current version.