Privacy Policy

Short overview

In this Privacy Policy, we explain how we process your personal data in connection with the use of our website. Below you will find a brief overview; more detailed information is provided in the subsequent sections.

  • Who is responsible?
 The controller is conactive GmbH, Blegistrasse 15, 6340 Baar, Switzerland, info@conactive.ch.
  • What data do we process?
 Technical access data (e.g. IP address, time of access, pages visited), information submitted via the contact form (name, email address, message) and usage data generated by web analytics and marketing tools.
  • For what purposes?
 To provide and secure the website, to respond to contact enquiries, for web analytics and reach measurement, and to plan and optimise our B2B marketing and communication activities.
  • With whom do we share data?
 With carefully selected service providers, e.g. for hosting and security (Webflow, Cloudflare), CRM and marketing (HubSpot, LinkedIn), and web analytics and consent management (Google, PostHog, Finsweet, jsDelivr/CDN providers), in some cases also in countries outside Switzerland/EU with appropriate safeguards.
  • What are your rights? 
You have, in particular, rights of access, rectification, erasure, restriction of processing, objection to certain processing activities, data portability (where applicable), as well as the right to withdraw consent at any time with effect for the future and to lodge a complaint with a supervisory authority.

In this Privacy Policy, we, conactive GmbH, explain how we process personal data in connection with the use of our website. Personal data means any information relating to an identified or identifiable natural person. This privacy policy is aimed at visitors to our website who are resident in Switzerland as well as – where applicable – in the European Economic Area (EEA) and the European Union. We comply with the Swiss Data Protection Act (DPA) and, where relevant, the EU General Data Protection Regulation (GDPR).

If you provide us with personal data of other individuals (e.g. data of colleagues), please ensure that these individuals are aware of this Privacy Policy and that the personal data provided is accurate. Please only share third‑party personal data with us if you are authorised to do so.

Controller and contact details

The controller responsible for data processing in connection with this website is:

conactive GmbH

Blegistrasse 15

6340 Baar

Switzerland

E‑mail: info@conactive.ch

If you have any questions or concerns regarding data protection, you can contact us using the contact details above.

Purposes and legal bases of processing

We process personal data in connection with our website in particular for the following purposes:

  • Provision and operation of the website (including security, stability and performance)
  • Responding to contact enquiries
  • Web analytics and reach measurement
  • Marketing and communication purposes (in particular B2B lead management)

Where the General Data Protection Regulation (GDPR) applies (in particular for data subjects in the EU/EEA), we base the processing, depending on the situation, in particular on Article 6(1)(b) DSGVO (pre‑contractual measures), Article 6(1)(f) DSGVO (legitimate interests) or Article 6(1)(a) DSGVO (consent).

Visit to our website (server and security logs)

When you access our website, certain technical information is automatically transmitted by your browser to our hosting and security service providers and processed in server and security logs. This may include in particular:

  • IP address and general location information (e.g. city, country)
  • Date and time of access
  • Pages/URLs accessed
  • Referrer URL (previously visited page)
  • Browser type and operating system used (user agent)

This data is processed in order to enable the technical provision of the website, to ensure the security and stability of our systems (e.g. defence against attacks, debugging) and for error analysis. For this purpose, we use in particular the services of Webflow (hosting platform) and Cloudflare (content delivery network and security services).

The processing is based on our legitimate interests in the secure and stable operation of our website under Swiss data protection law and – where applicable – Article 6(1)(f) DSGVO.

Contact via the website

We provide a contact form on our website. If you use this form, we process the personal data you enter, in particular:

  • First name and surname
  • E‑mail address
  • Content of your message

We use this data to receive, review and respond to your enquiry and, where applicable, to initiate or maintain a business relationship.

The processing is based on our legitimate interest in communicating with (potential) customers and business partners and – to the extent that pre‑contractual enquiries are concerned – on the performance of pre‑contractual measures (Swiss law and – where applicable – Article 6(1)(b) and (f) DSGVO).

The data transmitted via the contact form is stored in our CRM system (HubSpot) and used there to manage contacts and enquiries.

Web analytics and marketing

Google Tag Manager

We use Google Tag Manager on our website, a tag management system provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Tag Manager enables us to manage and trigger tracking and analytics tags centrally. According to Google, Tag Manager itself does not create its own user profiles or store personal data; it merely ensures that other tools (e.g. Google Analytics, LinkedIn Insight Tag, PostHog) are triggered.

In the context of this service, data may be transmitted to Google servers, including in the USA. Google is certified under the EU‑US Data Privacy Framework and also relies on the EU Commission’s Standard Contractual Clauses to ensure an adequate level of data protection. Further information can be found in Google’s Privacy Policy at https://policies.google.com/privacy.

Where consent is required for loading the tools controlled via Tag Manager, this takes place on the basis of your consent (Article 6(1)(a) DSGVO), which you provide via our cookie banner and may withdraw at any time.

Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google, to evaluate and improve the use of our website. In particular, the following information may be processed:

  • Pages and sub‑pages visited
  • Clicks and scroll behaviour as well as time spent on pages
  • Approximate location data (e.g. country, city)
  • Technical information such as browser type, device, screen resolution
  • Source of origin (e.g. which website or campaign led you to us)

Google states that with Google Analytics 4 IP addresses are not stored on a permanent basis but only used briefly to derive location information and are then discarded. We use the resulting statistics exclusively to further develop our website technically and in terms of content and to better tailor our offering to the needs of users.

Processing takes place – where consent is required for the use of analytics cookies – on the basis of your consent (Article 6(1)(a) DSGVO), which you provide via our cookie banner. In addition, we rely on our legitimate interest in operating a user‑friendly and economically efficient website (Article 6(1)(f) DSGVO), to the extent this is permissible without consent.

PostHog (behavioural analytics)

In addition, we use PostHog, a behavioural analytics service, to understand how users interact with our website (e.g. click paths, use of specific features, form interactions). We use the cloud variant with data processing in the EU (PostHog Cloud EU, hosted in Frankfurt), so that usage data does not leave EU jurisdiction.

PostHog uses cookies and similar technologies to recognise returning browsers on a pseudonymous basis and to generate aggregated evaluations. This enables us, for example, to identify which navigation paths are used particularly frequently or at which points users drop off, so that we can optimise our website accordingly.

The legal basis for the use of PostHog is your consent (Article 6(1)(a) DSGVO), which you provide via our cookie banner and may withdraw at any time with effect for the future.

LinkedIn Insight Tag (marketing and conversion tracking)

We use the LinkedIn Insight Tag (LinkedIn Pixel), an analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The Insight Tag enables us to track the behaviour of users who arrive at our website via a LinkedIn advertisement, and to measure the effectiveness of our LinkedIn campaigns.

The following data, among others, is processed:

  • IP address and technical browser information
  • Referrer URL and pages visited
  • Information on specific actions on our website (e.g. visiting certain pages, submitting the contact form)

The data collected is pseudonymised/ anonymised by LinkedIn after a short period of time (typically a few days) and may be linked to your LinkedIn profile to show you interest‑based advertising. We only receive aggregated reports from LinkedIn that do not allow us to directly identify individual persons.

The legal basis for this processing is your consent (Article 6(1)(a) DSGVO), which you provide via our cookie banner and may withdraw at any time. In addition, we have a legitimate interest in analysing and optimising our B2B marketing activities (Article 6(1)(f) DSGVO).

LinkedIn may transfer data to countries outside the EU/EEA (in particular the USA). In doing so, LinkedIn relies on the EU‑US Data Privacy Framework and on appropriate safeguards such as Standard Contractual Clauses to ensure an adequate level of data protection. Further information can be found in LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

Cookies and consent management

We use cookies and similar technologies on our website. These may be necessary to provide basic functions (e.g. language settings, security) or may be used for analytics and marketing purposes.

In particular, we distinguish between:

  • Strictly necessary cookies: These are required for the website to function (e.g. security and session cookies).
  • Functional or personalisation cookies: These are used to store settings and preferences (e.g. language, display settings) in order to enable a personalised use of the website. They are not strictly necessary for basic operation but improve the user experience.
  • Analytics cookies: These enable us to analyse the use of our website (e.g. Google Analytics, PostHog).
  • Marketing cookies: These enable us to manage our marketing activities and measure their success (e.g. LinkedIn).

We use a consent/cookie management tool (Finsweet Cookie Consent) to manage your consents. Via the cookie banner you can decide whether you wish to consent to the use of analytics and marketing cookies. You may withdraw your consent at any time with effect for the future by adjusting your settings in the banner.

An up‑to‑date overview of the cookies we use (including provider, purpose and storage period) can be found in the cookie banner or in a cookie overview linked there. Where processing is based on your consent (in particular in connection with analytics, personalisation and marketing cookies), you may withdraw this consent at any time with effect for the future via the cookie banner or by adjusting your browser settings.

Recipients and data transfers abroad

In the course of operating our website and for the purposes described above, personal data may also be transmitted to external service providers, in particular to:

  • Hosting and security providers (e.g. Webflow, Cloudflare) for the technical operation and security of the website.
  • CRM and marketing service providers (e.g. HubSpot, LinkedIn) for managing contacts, handling enquiries and supporting B2B marketing campaigns.
  • Web analytics providers (e.g. Google Analytics, PostHog) for statistical analysis of how our website is used.
  • Providers of consent and cookie management tools (e.g. Finsweet) as well as content delivery networks (e.g. jsDelivr) for delivering scripts and other content.

Some of these service providers may be located or process data outside Switzerland and the EU/EEA. In such cases, we ensure that either an adequacy decision is in place or that appropriate safeguards (e.g. Standard Contractual Clauses) have been implemented to ensure an adequate level of data protection.

Storage period

We process and store personal data only for as long as necessary to fulfil the respective purposes or as required by statutory retention obligations.

Your rights

Within the scope of the data protection law applicable to you and to the extent provided therein, you have in particular the following rights:

  • Right of access to information about which personal data we process about you
  • Right to rectification of inaccurate or incomplete personal data
  • Right to erasure of personal data, provided there are no retention obligations or other reasons justifying continued processing
  • Right to restriction of processing
  • Right to object to certain processing activities (in particular to direct marketing or processing based on legitimate interests)
  • Right to data portability (where applicable)

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future.

To exercise your rights, you can contact us using the contact details set out in section “Controller and contact”. In addition, where applicable, you have the right to lodge a complaint with a competent supervisory authority (in Switzerland with the Federal Data Protection and Information Commissioner, FDPIC) (www.edoeb.admin.ch).

We do not make decisions based solely on automated processing – including profiling – that produce legal effects concerning you or similarly significantly affect you.

For data subjects in the EEA/EU, the rights under the GDPR apply in addition, in particular the right to lodge a complaint with a competent supervisory authority in the Member State of their habitual residence, place of work or the place of the alleged infringement.

Data security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access or unauthorised disclosure. These include, in particular, the use of HTTPS/SSL encryption, the use of security and performance services (e.g. Cloudflare) and access restrictions to systems in which personal data is stored.

Changes to this Privacy Policy

We may amend this Privacy Policy at any time, in particular if we change our data processing activities or if the legal framework changes. The version published on this website shall apply in each case.