Privacy Policy

Last updated: June 2026

1. Data Controller

The Simple Company WebDev Innovations, headquartered in Switzerland (Canton Ticino), is the data controller for personal data collected through this website.

Contact: info@webdevinnovations.ch

2. Purposes and Legal Basis of Processing

Personal data is processed in compliance with the Swiss Federal Act on Data Protection (nLPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

Processing is based on the following legal grounds:

• Contract performance: to respond to your requests and provide requested services.
• Consent: for the use of non-essential cookies and analytics services (e.g., Google Analytics).
• Legitimate interest: to ensure website security, prevent abuse, and improve our services.

3. Data Collected

3.1 Voluntarily provided data

When you fill out our contact forms or request a quote, we collect the following data:

• Name and surname
• Email address
• Any other data contained in your message or project description

3.2 Navigation data

During navigation, computer systems automatically collect certain data whose transmission is implicit in the use of internet technologies:

• IP address: collected for technical, statistical, and security purposes (anti-spam analysis, rate limiting, Google Analytics).
• Cookie data: preferences and anonymous identifiers.
• Device information: browser type, operating system, screen resolution.

3.3 Data processed for security and anti-abuse

To protect the website from spam, abuse, and unauthorized access, we process the following data automatically when you submit a form:

• IP address: checked against a blocklist and used for rate limiting (1 request per 5 minutes). Rate-limit data is stored in hashed (anonymized) form.
• Name, email, and message: analyzed by an automated AI-based spam detection system (NVIDIA NIM API, NVIDIA privacy policy) to determine if the request is legitimate. No data is stored by NVIDIA beyond the analysis request.
• Server logs: in case of spam detection, name and email may be logged server-side for security auditing purposes. Logs are retained for 12 months.

This processing is based on our legitimate interest in ensuring website security and preventing abuse (Art. 6(1)(f) GDPR, Art. 31(1) nLPD).

4. Cookie Policy

This website uses the following categories of cookies:

• Essential technical cookies: necessary for website functionality (e.g., session management, language preferences). Do not require consent.
• Analytics cookies (Google Analytics): collect anonymous and aggregated data about website visits. They are activated only upon user consent through the cookie banner. You can disable them at any time through browser settings, Google's opt-out tools, or the "Manage cookies" link in the footer.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may compromise website functionality.

5. International Data Transfer

Data may be transferred to servers located in countries other than Switzerland, including those in the European Union and the United States. Such transfers occur only to countries with adequate protection levels recognized by the European Commission or based on standard contractual guarantees (Standard Contractual Clauses).

We use service providers that adopt high security standards and commit to processing data in compliance with applicable regulations:

• IONOS (Germany) — web hosting. Privacy policy
• Google LLC (USA) — Google Analytics 4. Data transfer based on Standard Contractual Clauses. Privacy policy
• NVIDIA Corporation (USA) — AI-based spam detection (NVIDIA NIM API). Only form submission data (name, email, message, IP) is processed transiently for spam classification. No persistent storage by NVIDIA. Privacy policy

6. Data Retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected:

• Contact form data: retained for 24 months from last interaction, unless different legal obligations apply.
• Navigation data (logs): retained for 12 months for security purposes and aggregated statistics.
• Rate-limit data: IP addresses are stored in hashed form and retained for 5 minutes after the last request, after which they are automatically deleted.
• IP blocklist: IP addresses blocked for abuse are retained until manually removed.
• Cookies: duration varies by cookie type (from session to maximum 24 months).

7. Processing Security

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, modification, or destruction. These include:

• SSL/TLS encryption for communications
• Data access restricted to authorized personnel
• Regular and secure backups
• Periodic updates of security measures

8. Data Subject Rights

Under nLPD and GDPR (where applicable), you have the following rights:

• Access and rectification: obtain confirmation of processing and correction of inaccurate data.
• Erasure (right to be forgotten): request deletion of data when no longer necessary or if you withdraw consent.
• Restriction and objection: request processing restriction or object to processing for legitimate reasons.
• Portability: receive data in structured format and transfer to another controller.
• Consent withdrawal: withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at: info@webdevinnovations.ch

9. Privacy Policy Changes

We reserve the right to modify this policy at any time. Changes take effect from the date of publication on the website. We invite you to consult this page periodically.