Privacy Policy

I. Overview

If you are a business partner or user of our platform, please start reading from Section III.

If you are visiting our website, please start reading from Section II.

II. What data do we process when you visit our website?

Welcome to https://getprospects.io/. This section explains how we process your personal data when you visit our website (in accordance with Art. 19 Swiss FADP / nDSG and Art. 13–14 EU GDPR, where applicable).

When visiting our website, the following data may be processed:

• Browser type and operating system
• Country, date, time, and duration of access
• IP address and pages visited, including entry and exit pages
• Device data: geolocation data, IP address, unique identifiers (e.g. MAC address)
• Data submitted via contact forms (e-mail address, first name, last name, phone number)

Processing this data is necessary to ensure the secure operation and technical functionality of our website. Technical cookies are used only to the extent required. The legal basis is our legitimate interest in operating the website (Art. 31 para. 1 Swiss FADP; Art. 6(1)(f) EU GDPR for EU-based visitors).

For the operation of our website, we may share your data with the following recipients:

Recipient	Purpose	Legal basis	Registered office	Basis for transfer to third country
Hetzner Online GmbH	Website hosting	Legitimate interest (Art. 31 FADP); Art. 28 EU GDPR	Germany (EEA)	Within EEA
Nextcloud GmbH	File storage	Legitimate interest (Art. 31 FADP); Art. 28 EU GDPR	Germany (EEA)	Within EEA
DigitalOcean LLC	Cloud infrastructure	Legitimate interest (Art. 31 FADP); Art. 28 EU GDPR	USA	Standard contractual clauses (Art. 46(2)(c) EU GDPR); Art. 16 FADP
Google Analytics / Google Ads (Alphabet Inc.)	Statistical analysis	Consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP)	USA	Standard contractual clauses; adequacy decision where applicable
LinkedIn, Inc. (Microsoft)	Social media service	Consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP)	USA	Standard contractual clauses
YouTube (Google, Alphabet Inc.)	Video platform	Consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP)	USA	Standard contractual clauses
Vimeo LLC	Video platform	Consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP)	USA	Standard contractual clauses
Expert Systems AG (ProvenExpert)	Trust / review service	Legitimate interest (Art. 31 FADP)	Germany (EEA)	Within EEA

„Third country" refers to any country outside (1) the member states of the European Union and (2) the member states of the European Economic Area (EEA), as well as countries not recognized as offering an adequate level of data protection under Swiss law.

II.1 Technical cookies

Cookies are text files stored on your device that allow us to analyse how our website is used. We use cookies only to the extent necessary to operate the website and communicate with you.

The following cookies are placed on the basis of our legitimate interest (Art. 31 FADP; Art. 6(1)(f) EU GDPR):

Cookie name	Purpose	Storage duration	Provider's country
_wpfuuid	Registers a unique ID to recognise returning visitors	11 years	Germany
elementor	Used by WordPress to implement or modify the website in real time	Persistent	Germany
_pelocale	Stores the visitor's preferred language	30 days	USA
registerlocale	Remembers the visitor's country and language	1 day	USA

II.2 Marketing and analytics cookies

In addition to technical cookies, we may use marketing and analytics cookies that allow us to better understand and evaluate visitor interests and browsing behaviour across websites.

We respect that not every visitor wishes this. We therefore process your data via marketing cookies only with your consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP). You may withdraw your consent at any time; the lawfulness of processing carried out prior to withdrawal is not affected.

Cookie name	Purpose	Storage duration	Provider / country	Description
_ga	Analytics	2 years	Google / USA	Registers a unique ID to generate statistical data on how the visitor uses the website
_gid	Analytics	1 day	Google / USA	Used by Google Analytics to throttle request rate
collect	Analytics	Session	Google / USA	Transmits visitor device data to Google for cross-device tracking
_fbp	Marketing	3 months	Meta / USA	Used by Facebook to deliver targeted advertising from third-party advertisers
tr	Marketing	Session	Meta / USA	Used by Facebook to display advertising from third-party providers
NID	Advertising	6 months	Google / USA	Assigns a unique ID to the user's device to enable recognition
ads/ga-audiences	Advertising	Session	Google / USA	Used by Google Ads to recognise visitors and analyse click behaviour
PE_session	Advertising	Session	ProvenExpert / USA	Collects visitor behaviour information and enables cross-website advertising

III. Processing in the context of a business relationship or platform use

In the course of our business relationship, we process your data on the basis of contractual obligations (performance of the contract, pre-contractual measures, invoicing, document dispatch, contract-related communication) and statutory obligations (in particular retention obligations under Swiss commercial law, Art. 958f Swiss Code of Obligations / OR) (Art. 31 FADP; Art. 6(1)(b) and (c) EU GDPR), as well as on the basis of our legitimate interests or those of third parties (Art. 31 FADP; Art. 6(1)(f) EU GDPR), including:

• Internal administration and management of your business case (processing your enquiry, internal routing, file management, archiving, correspondence)
• Transfer of data in connection with corporate transactions (e.g. due diligence)
• Forwarding of your data to external contractors (freelancers) for project delivery
• Direct marketing purposes (postal mail, e-mail, satisfaction surveys, statistical analysis)
• Assertion and defence of legal claims

We expressly inform you that you have the right to object to the processing of your data for direct marketing purposes at any time.

Your data may also be transmitted to our processors (within the meaning of Art. 5(k) Swiss FADP; Art. 4(8) EU GDPR). These are listed under Section V below.

Where applicable, we may also process your data on the basis of your freely given consent (Art. 6(1)(a) EU GDPR; Art. 31 FADP).

IV. How long do we store your data?

We store your data only for as long as necessary for the purposes for which it was collected. Statutory retention obligations must be observed — in particular, contracts and commercially relevant documents are generally required to be retained for 10 years under Swiss commercial law (Art. 958f Swiss OR). In justified individual cases, such as the assertion or defence of legal claims, we may store data for up to 10 years after the end of the business relationship.

Data of prospective customers is stored for up to 3 years from the date of last contact.

V. Who may receive your data?

In the course of our business relationship, we may need to transfer your data to the following recipients:

Recipient	Purpose	Legal basis	Country	Third-country transfer basis
Freelancers	Delivery of contracted work	Contractual obligation (Art. 31 FADP; Art. 6(1)(b) EU GDPR)	Switzerland, EU	Within EEA / adequacy decision for CH
Microsoft Inc.	MS Office and Outlook	Legitimate interest (Art. 31 FADP; Art. 6(1)(f) EU GDPR)	USA	Standard contractual clauses
Google Workspace	Online collaboration	Legitimate interest (Art. 31 FADP; Art. 6(1)(f) EU GDPR)	USA	Standard contractual clauses
Auditors / tax advisors	Tax and audit services	Contractual obligation (Art. 31 FADP; Art. 6(1)(b) EU GDPR)	Switzerland	Domestic
Banks	Payment processing	Contractual obligation (Art. 31 FADP; Art. 6(1)(b) EU GDPR)	Switzerland	Domestic
Lawyers	Assertion and defence of legal claims	Legitimate interest (Art. 31 FADP; Art. 6(1)(f) EU GDPR)	Switzerland	Domestic
Courts and authorities	Legal matters	Legal obligation (Art. 31 FADP; Art. 6(1)(c) EU GDPR)	Switzerland	Domestic

VI. Data collected from third-party sources

We do not obtain personal data from third-party sources.

VII. Automated decision-making and profiling

We do not carry out automated decision-making or profiling within the meaning of Art. 21 Swiss FADP or Art. 22 EU GDPR.

VIII. Your rights

To the extent that the legal conditions are met, you have the following rights:

• Right of access — to request information about the personal data we hold about you (Art. 25 Swiss FADP; Art. 15 EU GDPR)
• Right to rectification — to request correction or completion of inaccurate or incomplete data (Art. 32 Swiss FADP; Art. 16 EU GDPR)
• Right to erasure — to request deletion of your personal data (Art. 32 Swiss FADP; Art. 17 EU GDPR)
• Right to object — to object to processing based on legitimate interests, in particular for direct marketing purposes (Art. 32 Swiss FADP; Art. 21 EU GDPR)
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format (Art. 28 Swiss FADP; Art. 20 EU GDPR)
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time by e-mail without affecting the lawfulness of prior processing (Art. 7(3) EU GDPR)

IX. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch

EU-based visitors also have the right to lodge a complaint with the data protection authority in their EU member state of residence.

X. How to contact us

For any questions about the processing of your personal data, please contact our data protection coordinator using the contact details below.

XI. Controller

Last updated: October 2025