Privacy Policy

1. Controller

The controller responsible for the processing of personal data within the meaning of the FADP is:

office@amarare.com

2. Scope

This privacy policy applies to the processing of personal data in connection with visiting and using this website. The privacy policies of external providers apply to any content we may link to.

The website serves to present the activities of AMARA RE AG. It contains no customer or user accounts and no payment functions.

3. Definitions

This policy uses the terminology of the FADP. «Personal data» means any information relating to an identified or identifiable natural person. «Processing» means any operation with personal data, irrespective of the means and procedures applied, in particular the collection, storage, use, disclosure or destruction of data. The «data subject» is the natural person about whom personal data is processed. A «processor» processes personal data on behalf of the controller.

4. Principles of processing

We process personal data in good faith, lawfully and proportionately. We collect personal data for a specific purpose that is recognisable to the data subject and process it only in a manner compatible with that purpose. We process only the personal data we actually need for the stated purposes and ensure its accuracy.

We process personal data only for as long as the respective purpose requires or as statutory retention obligations provide.

5. What personal data we process

When you visit the website: technical access data required to deliver the pages (see the section «Hosting and server log files»).

When you contact us via the contact form or by email: the information you provide (see the section «Contact form»).

6. Purposes of processing

We process personal data for the following purposes:

• —Provision, operation and security of this website;
• —Handling and responding to enquiries received via the contact form or by email;
• —Safeguarding legitimate interests, in particular protection against misuse and ensuring secure operation;
• —Compliance with legal obligations.

7. Basis for processing

Under Swiss data protection law, the processing of personal data by private persons does not require a specific justification as long as the processing principles are observed and there is no breach of personality. Where necessary, we base processing on your consent (for example when using the contact form), on the initiation or performance of a contract, or on our legitimate interests in a secure and functioning web presence.

You may withdraw any consent you have given at any time with effect for the future.

8. Hosting and server log files

This website is operated by a specialised hosting provider (Vercel Inc.), which provides the website on our behalf as a processor. When the website is accessed, technically necessary access data automatically transmitted by your browser is processed, in particular the IP address, the date and time of access, the page accessed, the status code and information about the browser and operating system.

This data is required to deliver and securely operate the website. The scope, storage location and retention period of the server-side logging depend on the hosting provider's infrastructure; the exact arrangement remains to be clarified and will be specified here once the configuration is finalised.

We do not use web analytics or visitor tracking.

9. Cookies and similar technologies

This website does not use tracking or marketing cookies. The only cookie set is a technically necessary one that stores the language you have selected (named «NEXT_LOCALE»). This cookie contains only the language code, serves the correct linguistic presentation and is not used for analysis purposes.

As only technically necessary cookies are used, no consent via a cookie banner is required. You can delete cookies in your browser at any time or restrict their storage; the language will then be determined anew on each visit.

10. Fonts

For a consistent presentation we use the «Inter» typeface. It is delivered locally from our server and not loaded from third-party servers. No connection to external font services is therefore established when a page is loaded.

11. Contact form

You can send us a message via the contact form on the contact page. In doing so, we process the information you enter:

• —First name and surname (mandatory);
• —Email address (mandatory);
• —Subject of the enquiry (selection, mandatory);
• —Message (mandatory);
• —Company and telephone number (optional);
• —Your confirmation that you have taken note of this privacy policy.

12. Processing and protection of form data

Form entries are validated server-side. To protect against automated misuse (spam), we use a check field that is invisible to you (a so-called «honeypot») and a limit on the number of submissions per unit of time. For this purpose your IP address is processed temporarily for the duration of the check; it is not stored permanently together with your message.

At present no productive email dispatch is configured. Submitted enquiries are validated server-side but are not forwarded to an external email service and are not permanently stored in a database. As soon as a secure dispatch channel is set up, this privacy policy will be adjusted accordingly and the recipients involved will be named.

Please do not submit any sensitive personal data via the general contact form.

13. Contacting us by email

If you contact us by email (for example at office@amarare.com), we process your information in order to handle your request and any follow-up questions. Email traffic runs via the systems of the respective email provider; an unencrypted email can be read by third parties in transit. For confidential information we recommend a protected transmission channel.

14. Recipients and processors

We disclose personal data only to the extent necessary to achieve the stated purposes. For technical operation we use carefully selected service providers as processors, who may process personal data only on our instructions and for the agreed purposes:

• —Hosting and delivery of the website: Vercel Inc.;
• —Source-code management of the website (without visitor data): GitHub, Inc.

15. Disclosure abroad

The technical service providers we use may have their registered office or infrastructure abroad, so processing of personal data outside Switzerland cannot be ruled out. Disclosure abroad takes place only to the extent permitted by the FADP – in particular where the country concerned offers adequate data protection or where suitable safeguards (such as contractual data protection clauses) have been agreed.

The specific place of processing of the service providers used and the safeguards relevant in each case remain to be clarified and will be specified here once the configuration is finalised.

16. Retention and erasure

We retain personal data only for as long as this is necessary for the respective purposes or as required by statutory retention obligations. The data is subsequently deleted or anonymised. Technical access data is retained as part of the hosting provider's server-side logging; the specific retention period remains to be clarified.

17. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. The website is transmitted in encrypted form via TLS (recognisable by «https://» in the address bar). However, absolute security of data transmission over the internet cannot be guaranteed.

18. Your rights

As a data subject you have, within the scope of applicable data protection law, in particular the following rights:

• —Information on whether and which personal data we process about you;
• —Rectification of inaccurate personal data;
• —Erasure or destruction of your personal data;
• —Objection to processing and withdrawal of any consent given;
• —Release or transfer of your personal data in a common electronic format, provided the statutory requirements are met.

19. Exercising your rights

To exercise your rights or for questions about data protection, you may contact the controller named above at any time. To assess your request and prevent misuse, we may require appropriate information to identify you. Exercising your rights is generally free of charge for you.

If you consider that the processing of your personal data infringes data protection law, you may contact the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch

20. Applicable law and supplementary note on the GDPR

Swiss data protection law (the FADP and the DPO) governs this privacy policy and the processing of personal data by AMARA RE AG. Insofar as the EU General Data Protection Regulation (GDPR) may additionally apply in an individual case – for example because persons in the EU are addressed – its provisions apply supplementarily. This policy is not, however, based on the GDPR as its primary basis.

21. Amendments to this privacy policy

We may amend this privacy policy at any time, in particular if the processing of personal data or the services used change. The version published on this website at the relevant time applies.