Privacy Policy

Last updated: 26 February 2026

woumba gmbh (“we”, “us”, or “our”) places great importance on protecting your personal data and complying with applicable data protection laws, in particular the Swiss Federal Act on Data Protection (FADP) as well as the EU General Data Protection Regulation (GDPR), insofar as individuals from the European Economic Area are affected.

Contact Details

The data controller responsible for data processing is:

woumba gmbh
Mühlackerstrasse 16
9436 Balgach
Switzerland

If you have questions or concerns regarding data protection, you can reach us by email at the following address: info@woumba.com. We are happy to assist you.

Purpose of Data Collection

We collect personal data for various reasons, including:

Processing of services and orders:
Your data enables us to process and deliver your orders and services efficiently.
Customer support and communication:
We use your information to contact you and respond to your inquiries and concerns.
Marketing:
Your data helps us present relevant information about our products and services.
Product improvement:
We analyze your data to continuously improve our products and services and optimize your customer experience.
Compliance with legal obligations:
We process data to meet legal requirements.
Analysis of user behavior: We use your information to analyze user behavior on our website and optimize our online presence.
Internal business analysis:
Data serves internal business purposes and reporting to manage and improve our business processes.
IT security and fraud prevention:
Your data contributes to the security of our IT systems and protects against fraudulent activities.
Personalized recommendations and advertising:
We use your data to offer you personalized recommendations and advertising that match your interests.

Your data is only used for these defined purposes to ensure your privacy and security.

Types of Data Collected

We collect a variety of personal data, including:

Contact information:
This includes your name, address, email address, and phone number to ensure communication.
Date of birth and gender:
In some cases, we collect your date of birth and gender to better tailor certain services to your needs.
Data you provide:
When you contact us, you may submit information such as a subject line or a personal message.
Payment information:
This includes payment information such as credit card numbers and account details, which are required to process transactions. We process credit card payments through third-party providers and do not store this information ourselves.
Usernames and passwords:
To secure your account and access to our services, we collect usernames and passwords.
Technical information:
This includes IP addresses, device information such as device type and operating system, as well as location data to ensure the security of our IT systems and optimize the user experience.
Usage data:
We also collect information about your usage behavior on our website, such as pages visited and click behavior. This helps us improve our online presence.

This information is used to effectively provide our services, ensure your security, and optimize your user experience. We handle this data with the utmost responsibility and protect your privacy in accordance with applicable data protection laws.

Legal Basis

The processing of personal data is based on the following legal provisions:

Consent:
Where required, we process your data based on your explicit consent.
Contract performance:
The processing of your data is necessary to fulfill a contract to which you are a party or to take pre-contractual measures.
Compliance with legal obligations:
In some cases, we are legally obliged to process your data to comply with our legal obligations.

These legal bases ensure that your data is processed in accordance with applicable data protection laws and regulations and that your privacy is protected.

Data Processing

Protecting your personal data is our highest priority. We take comprehensive security measures to ensure the confidentiality and integrity of your data. Our data processing practices include:

Secure data transmission:
We use secure data transmission protocols such as SSL to protect your data during transmission.
Regular security updates:
We regularly update our security software to detect and ward off potential threats, thereby ensuring the protection of your data.
Access restriction:
Access to your data is only permitted to authorized employees who need this information to perform their duties. We implement strict access controls to ensure security.
Updating data protection policies and security procedures:
We regularly review and update our data protection policies and security procedures to ensure they comply with current best practices and legal requirements.
Data retention:
Your data is only stored for the period required for the purposes stated in Section 2 (see “Purpose of Data Collection”). After this period expires, the data is securely deleted or anonymized.

Netlify

Netlify is a platform we use to host and process forms. We use Tally to collect and manage information from leads and customers and to organize our projects. When using Netlify, personal data such as names and email addresses may be collected. This data is treated confidentially and used only for internal business purposes.

Umami

We use Umami, a privacy-friendly open-source web analytics tool, to evaluate user behavior on our website. Umami does not set cookies and does not store personal data. IP addresses are hashed and not stored in plain text. Users cannot be identified and are never tracked across websites.

International Data Transfer

We occasionally transfer personal data to the USA and to countries within Europe. When transferring data to countries outside Switzerland, we take appropriate data protection measures to ensure that your data is adequately protected. These measures may include the use of standard contractual clauses, data protection shields, or other recognized mechanisms to safeguard data protection.

We carefully select service providers and partners and ensure that they comply with applicable data protection laws and regulations. Please note that data protection laws in countries outside Switzerland may differ. If you have questions or concerns about international data transfer, you can contact us at any time.

Retention Period

We retain personal data for as long as necessary to fulfill the purposes stated above or as required by law. The retention period may vary depending on the type of data and legal requirements. After the retention period expires, the data is securely deleted or anonymized to ensure it is no longer identifiable.

Your Rights as a Data Subject

Under data protection laws, you have the right to access, rectify, delete, object to, and request the portability of your personal data. To exercise any of these rights or to obtain further information, please contact us using the contact details provided in Section 1.

Right to Lodge a Complaint with a Supervisory Authority

In Switzerland, the cantonal data protection commissioners as well as the Federal Data Protection and Information Commissioner (FDPIC) are responsible for data protection matters. If you believe that your data protection rights have been violated or if you have concerns regarding the processing of your personal data, you have the right to contact the competent data protection authorities:

Website of the FDPIC

Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed to reflect changes in our data protection practices or legal requirements. The updated version of this privacy policy will be published on our website, and the date of change at the top of the page will be updated to indicate when the privacy policy was last revised.