Privacy Policy

This policy explains how we handle personal data on this website. It does not cover personal data we process on behalf of a customer while delivering services under a Statement of Work — there, the customer is the controller and we act as processor, as set out in our General Terms and Conditions and the applicable Data Processing Agreement.

The controller for this website is:

56k.Cloud SA:

Chemin Saint-Hubert 5, 1950 Sion, Switzerland — CHE-208.657.564

Data protection contact:

privacy@56k.cloud

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

2.1When you contact us

2.2When you subscribe to our newsletter

2.3When you book a call

2.4When you simply browse

We use Vercel Web Analytics to understand which pages are read and how visitors arrive. It is a privacy-friendly, cookieless analytics service: it sets no cookies, stores no identifier on your device, and does not track you across other websites. It records aggregated page views together with coarse information such as referrer, country, and device type.

Because no cookies are set and no cross-site profile is built, we do not ask for consent for analytics. The legal basis is our legitimate interest in understanding how our website is used.

We set no advertising cookies and no analytics cookies of our own. The only cookies we set ourselves are strictly necessary ones that remember an interface preference, such as whether a navigation panel is expanded. They carry no personal data, are not used to identify you, and require no consent.

Embedded third-party content is the exception, and it is described in the next section: where a page embeds content hosted elsewhere, that provider may set its own cookies, including cookies used for advertising and profiling.

You can delete cookies at any time in your browser settings, and block third-party cookies to prevent embedded content from setting them.

The fonts on this site are served from our own domain rather than from a third-party font service, so displaying a page does not disclose your IP address to a font provider.

Some articles on our blog embed content hosted elsewhere. Where they do, your browser contacts that provider's servers directly in order to load it:

• Video embedded from YouTube, a service operated by Google.
• Posts embedded from X (formerly Twitter).
• Link previews, which load a preview image and site icon from the website being linked to.

In each case the provider receives your IP address and information about the page you are viewing, and may set cookies or read existing ones on your device — including cookies used for advertising and profiling, and including cases where you hold no account with them or are not signed in. This happens as soon as the page loads, before you interact with the embed, and it is outside our control.

We embed this content to illustrate our articles, on the basis of our legitimate interest in presenting them properly. If you would rather avoid it, you can block third-party cookies in your browser or avoid the articles that contain embeds. What these providers do with the data they receive is governed by their own privacy policies, not this one.

We do not sell personal data. We share it only with service providers who process it on our instructions, and only as far as they need it to provide their service:

• Vercel — website hosting, content delivery, and cookieless web analytics.
• Odoo — our CRM and mailing-list system, which stores contact enquiries and newsletter subscriptions.
• Google — appointment scheduling, when you choose to book a call through a booking link.

In addition, providers of content embedded in our articles receive your IP address directly from your browser when such an article loads, as described in the section on embedded content. We do not send them data ourselves; your browser contacts them.

We may also disclose personal data where we are legally required to do so, or where it is necessary to establish, exercise, or defend legal claims.

Some of these providers process data outside Switzerland and the EEA, including in the United States. Where a country does not offer an adequate level of protection under Swiss or EU law, the transfer is covered by appropriate safeguards — as a rule the European Commission's Standard Contractual Clauses together with the applicable Swiss addendum, complemented by the provider's own technical and organisational measures.

You can request more detail about the safeguards for a specific transfer by writing to privacy@56k.cloud.

We keep personal data only as long as necessary for the purposes described above, and thereafter only as long as a statutory retention obligation requires. In practice we apply the following periods:

Contact enquiries that do not lead to an engagement:

24 months from our last exchange, then deleted.

Contact enquiries and CRM records relating to a customer relationship:

for the duration of the relationship and 24 months after it ends, except where they form part of business records subject to the statutory retention period below.

Newsletter subscriptions:

until you unsubscribe. We then delete the subscription, keeping only the minimum record needed to honour your unsubscribe request.

Booking and appointment data:

24 months from the appointment date.

Server and security logs:

up to 12 months, after which they are deleted or fully anonymised.

Web analytics:

retained only in aggregated form, which is not attributable to you as an individual.

Business and accounting records:

10 years, as required by Article 958f of the Swiss Code of Obligations. This statutory duty takes precedence over the shorter periods above.

We may keep data beyond these periods where it is necessary to establish, exercise, or defend legal claims, and only for as long as that purpose lasts.

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — including encryption in transit, access control on a need-to-know basis, and confidentiality obligations binding our personnel. No transmission over the internet can be guaranteed completely secure, so we cannot warrant absolute security.

Subject to the conditions and exceptions of applicable law, you have the right to:

• obtain confirmation as to whether we process personal data about you, and access to that data;
• have inaccurate personal data corrected, and incomplete data completed;
• have personal data deleted, or its processing restricted;
• withdraw a consent you have given, at any time, without affecting processing already carried out;
• object to processing based on our legitimate interests;
• receive certain personal data in a portable, machine-readable format; and
• lodge a complaint with a supervisory authority.

To exercise any of these rights, write to privacy@56k.cloud. We may need to verify your identity before we act on a request. In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, the data protection authority of your country of residence.

We may update this policy as our website, our tooling, or the law changes. The current version is the one published on this page, and the effective date at the top records when it last changed.