Legal · 02

Privacy.

We collect only what is necessary for operations. The revised Federal Data Protection Act (revFADP) applies primarily, GDPR in parallel for EU visitors.

§ 01

Controller

Data protection responsibility
Company
DevQon GmbH
Address
The Circle 6, 8058 Zurich Airport, Switzerland
UID
CHE-399.913.454
§ 02

Applicable law

revFADP primary

This domain is primarily governed by the revised Swiss Federal Data Protection Act (revFADP, in force since 1 September 2023). For visitors from the EU area, GDPR applies in parallel. Where both regulations impose different requirements, we apply the stricter one in each case.

§ 03

Data collected

Server log

IP address, anonymized immediately upon receipt by Google Analytics 4

Date and time of access

Requested page URL

Browser identifier and operating system

Referrer, if transmitted by the browser

§ 04

Google Analytics 4

Usage statistics

This website uses Google Analytics 4 (Google Ireland Limited, Dublin, Ireland). The service sets cookies for statistical analysis, the IP address is anonymized immediately. The legal basis is your active consent under Art. 6(1)(a) GDPR and Art. 6(6) revFADP. Revocation is possible at any time, see cookie section.

Tracking ID
G-Y0EBEWLK03
Purpose
aggregated usage statistics
Retargeting
no
Sharing with ad networks
no
Retention period
14 months

You can additionally prevent data collection by Google Analytics by installing the browser add-on from Google: tools.google.com/dlpage/gaoptout.

§ 05

Cookies

Two categories

This website sets exactly two cookie categories:

Necessary
aco_consent_v1
Consent status in localStorage. No personal reference, no transmission. Stores your cookie choice with timestamp under the key aco_consent_v1.
Statistics · GA4
G-Y0EBEWLK03
Google Analytics 4 with IP anonymization. 14 months retention. Only after active consent. Property ID: G-Y0EBEWLK03.

You can revoke your consent at any time via the link Change cookie settingsor via the corresponding link in the footer. No marketing cookies or third-party tracking are set.

§ 06

Subcontracted processors

Art. 28 GDPR · Art. 9 revFADP

All of the following subcontracted processors operate on the basis of a contract under Art. 28 GDPR and Art. 9 revFADP respectively:

Hosting of this website
Hostpoint AG
Rapperswil-Jona · Switzerland

Web hosting for agentic-commerce-operations.ch. Swiss company, servers in Switzerland, contract under Art. 9 revFADP.

Analytics
Google Ireland Limited
Dublin · Ireland

Google Analytics 4 with IP anonymization. 14 months retention. Only after active consent.

Email
Contact by email
kontakt@agentic-commerce-operations.ch

Email enquiries are stored for processing. XEREBRO data flows are covered by the privacy policy on xerebro.ch, see section 07.

§ 07

XEREBRO boundary

Marketing site vs. production

This website (agentic-commerce-operations.ch) is an information site about the category Agentic Commerce Operations. It is technically separated from the production systems of the reference implementation XEREBRO. Which data XEREBRO processes in which zone (critical zone at Infomaniak in Geneva and Zurich, reasoning zone at an EU-certified cloud provider in the Frankfurt region) is described in the privacy policy on xerebro.ch. The Swiss legal situation is explained on our page revFADP and data sovereignty.

§ 08

Retention period

Data categories
Google Analytics 4 data
14 months
Email contacts
max. 3 years
Server log files
90 days · then anonymized
§ 09

Your rights

revFADP + GDPR

You are entitled to information, correction, deletion and data portability of your personal data. In addition, you have the right to object to certain processing activities. Please direct requests to kontakt@agentic-commerce-operations.ch. We reply within ten business days and free of charge.

§ 10

Supervisory authority FDPIC

Primary complaints body

For Switzerland, the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) is competent. You have the right to lodge a complaint with the FDPIC if you suspect a violation of your data protection rights: edoeb.admin.ch. For GDPR-relevant cases, the data protection supervisory authority of your country of residence is additionally available.

§ 11

Changes

To this policy

We adjust this policy when legal bases change or when we adjust our services. On your next visit, the version then in force applies. Material changes are announced by updating the date in the header of this page.