woumba | Privacy Policy

woumba gmbh (“we”, “us”, or “our”) places great importance on protecting your personal data and complying with applicable data protection laws, in particular the Swiss Federal Act on Data Protection (FADP) as well as the EU General Data Protection Regulation (GDPR), insofar as individuals from the European Economic Area are affected.

Contact Details

The data controller responsible for data processing is:

woumba gmbh
Mühlackerstrasse 16
9436 Balgach
Switzerland

If you have questions or concerns regarding data protection, you can reach us by email at the following address: info@woumba.com. We are happy to assist you.

Purpose of Data Collection

We collect personal data for the following purposes:

• Website operation:
  To provide and technically operate this website (hosting).

• Contact enquiries:
  To handle your enquiries via the contact form (Tally) or by email.

• Usage analysis:
  To measure reach anonymously and improve our website with Umami (without cookies).

• IT security:
  To protect our IT systems, e.g. through server logs and abuse detection.

• Compliance with legal obligations:
  To meet legal requirements.

We only process data to the extent necessary for each respective purpose.

Types of Data Collected

Depending on how you use the website, the following personal data may be processed:

• Contact form data:
  When you contact us, we collect the information you submit, e.g. name, email address, and message (and subject line if provided).

• Server log data:
  When you visit the website, technical access data is processed, e.g. IP address, timestamp, requested URL, and browser and device information (user agent).

• Usage statistics:
  Through Umami, we collect anonymised information about pages visited. See the “Data Sharing – Umami” section for details.

• Technical information:
  Device and browser information, insofar as it arises in server logs or usage statistics.

We process this data exclusively in connection with the purposes stated above and in accordance with applicable data protection laws.

Legal Basis

The processing of personal data is based on the following legal provisions:

• Consent:
  Where required, we process your data based on your explicit consent.

• Contract performance:
  The processing of your data is necessary to take pre-contractual measures at your request or to fulfil a contract.

• Legitimate interest:
  We process data based on our legitimate interest, in particular for server logs, IT security, and anonymous usage statistics with Umami, provided your interests do not override ours.

• Compliance with legal obligations:
  In some cases, we are legally obliged to process your data to comply with our legal obligations.

These legal bases ensure that your data is processed in accordance with applicable data protection laws and regulations and that your privacy is protected.

Data Processing

Protecting your personal data is our highest priority. We take comprehensive security measures to ensure the confidentiality and integrity of your data. Our data processing practices include:

• Secure data transmission:
  We use secure data transmission protocols such as SSL to protect your data during transmission.

• Regular security updates:
  We regularly update our security software to detect and ward off potential threats, thereby ensuring the protection of your data.

• Access restriction:
  Access to your data is only permitted to authorized employees who need this information to perform their duties. We implement strict access controls to ensure security.

• Updating data protection policies and security procedures:
  We regularly review and update our data protection policies and security procedures to ensure they comply with current best practices and legal requirements.

• Data retention:
  Your data is only stored for the period required for the stated purposes (see “Purpose of Data Collection”). After this period expires, the data is securely deleted or anonymized.

Cookies

This website does not use marketing or tracking cookies. Usage analysis with Umami is carried out without cookies. The Tally contact form is only loaded when you click a contact button; a script from tally.so is then loaded. A cookie banner is therefore not required.

Data Sharing

Netlify

Netlify is a platform we use to host this website. When you visit, technical access data (e.g. IP address, timestamp) may be processed in server logs.

Privacy Policy Netlify

Tally

For contact requests we use Tally (Tally Forms, Inc.) as a data processor. When you click a contact button, the embed.js script from tally.so is loaded and the form is shown as a lightbox. The data you submit (e.g. name, email address, message) is transmitted to Tally and used by us to handle your enquiry.

Tally privacy policy

Umami

We use Umami, a privacy-friendly open-source web analytics tool, to evaluate user behavior on our website. Umami does not set cookies and does not store personal data. IP addresses are hashed and not stored in plain text. Users cannot be identified and are never tracked across websites.

Privacy Policy Umami

International Data Transfer

We occasionally transfer personal data to the USA and to countries within Europe. When transferring data to countries outside Switzerland, we take appropriate data protection measures to ensure that your data is adequately protected. These measures may include the use of standard contractual clauses, data protection shields, or other recognized mechanisms to safeguard data protection.

We carefully select service providers and partners and ensure that they comply with applicable data protection laws and regulations. Please note that data protection laws in countries outside Switzerland may differ. If you have questions or concerns about international data transfer, you can contact us at any time.

Retention Period

We retain personal data for as long as necessary to fulfill the purposes stated above or as required by law. The retention period may vary depending on the type of data and legal requirements. After the retention period expires, the data is securely deleted or anonymized to ensure it is no longer identifiable.

Your Rights as a Data Subject

Under data protection laws, you have the right to access, rectify, delete, object to, and request the portability of your personal data. Individuals in the European Economic Area may additionally exercise these rights under the GDPR, where applicable. To exercise any of these rights or to obtain further information, please contact us using the contact details provided in the “Contact Details” section.

Right to Lodge a Complaint with a Supervisory Authority

In Switzerland, the cantonal data protection commissioners as well as the Federal Data Protection and Information Commissioner (FDPIC) are responsible for data protection matters. If you believe that your data protection rights have been violated or if you have concerns regarding the processing of your personal data, you have the right to contact the competent data protection authorities:

Website of the FDPIC

Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed to reflect changes in our data protection practices or legal requirements. The updated version of this privacy policy will be published on our website, and the date of change at the top of the page will be updated to indicate when the privacy policy was last revised.