Legal

Privacy Policy

This Privacy Policy describes how ECOFIN Data Model AG (part of the ECOFIN Group) collects, uses and protects information in relation to your use of the FINSUITE website (finsuite.com). It may be amended at any time; the version published on the website applies.

We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the Swiss Federal Act on Data Protection (FADP).

1. Data Controller

The entity responsible for the processing of personal data described in this policy (the controller) is:

ECOFIN Data Model AG
Schochenmühlestrasse 2
6340 Baar, Switzerland
datamodel-privacy@ecofin.ch

2. Scope of this Policy

This policy applies to the FINSUITE website at finsuite.com. The website is primarily informational. It includes a contact form but no user registrations, comment sections or customer profiles. If you use the contact form, the data you choose to share is processed solely to review and respond to your enquiry.

3. Data We Process and Why

We process the information you submit through the contact form, server log data, website usage information collected through Google Analytics, and technical information used by Google reCAPTCHA to protect the contact form.

Contact Form Enquiries

When you submit the contact form, we process your name, work email address, message, and, if supplied, company name. We use this data to assess and respond to your enquiry and to protect the form from misuse. This processing serves our legitimate interest in managing business enquiries and, where applicable, takes place at your request before entering into a contract. Required fields are identified in the form. Please do not submit confidential, sensitive or special-category personal data.

The submission is transmitted through our hosting provider to Formcarry, our form-processing provider. Formcarry is our system of record for contact-form submissions; we do not retain a separate mailbox copy. Formcarry automatically deletes each submission 30 days after receipt.

Google Analytics

We use Google Analytics to understand how visitors use the website and to improve its content and performance. Google Analytics collects information such as page views and interactions, approximate location, browser and device information, and online identifiers. We use this information to produce website usage reports and do not use it to identify visitors by name.

Google Analytics uses cookies, including _ga and a property-specific _ga_* cookie, to distinguish visitors and sessions. These cookies normally remain on the device for up to two years unless they are deleted or blocked earlier. Analytics event data is retained according to the retention setting configured in our Google Analytics account and is deleted when that period expires. This processing serves our legitimate interest in understanding and improving the website.

Google reCAPTCHA

We use Google reCAPTCHA to protect the contact form against spam, fraud and abuse. When reCAPTCHA is loaded and used, Google processes technical and interaction information such as IP address, browser and device information, and signals about the interaction with the form. Google acts as a processor of this information on our behalf and may set or read the _grecaptcha cookie for its risk analysis. This processing serves our legitimate interest in securing the website and contact form.

Further information about Google’s data practices and service conditions is available in Google’s Privacy Policy and Terms of Service.

Server Log Files

When you visit the website, our hosting provider automatically collects and stores information that your browser transmits in “server log files.” This typically includes:

  • Browser type and version
  • Operating system used
  • Referrer URL (the website you came from)
  • IP address of the accessing device
  • Date and time of the request

This data is generally not attributed to specific individuals and is used to ensure the stability and security of the website. The processing is based on our legitimate interest in maintaining the technical functionality and security of the website. Log data is retained only for as long as necessary for these purposes.

4. Cookies

Google Analytics uses the analytics cookies described in Section 3, and Google reCAPTCHA may set or read a cookie needed for its risk analysis. We do not use cookies for personalised advertising. You can delete or block cookies using your browser settings, although blocking the reCAPTCHA cookie may prevent the contact form from working.

5. Hosting and Data Transfers Abroad

The website is hosted by Vercel Inc. (USA), which processes the server log data described above and transmits contact-form requests on our behalf as a processor. The contact-form function is configured to execute in Frankfurt, Germany. Vercel remains a US provider, and personal data such as IP addresses may also be processed in the United States or other countries in connection with its services.

Contact-form submissions are processed by Teijal, Inc., doing business as Formcarry (USA). According to Formcarry’s data processing agreement, primary form storage and application processing take place in Frankfurt, Germany. Formcarry may permit limited access from the United States and uses sub-processors, including providers involved in email delivery and spam detection, that may process data outside Switzerland or the EEA.

Google processes the Google Analytics and reCAPTCHA information described in this policy on our behalf. Depending on the service and processing operation, data may be processed in the United States or other countries outside Switzerland or the EEA.

Where data is transferred to a country that does not offer an equivalent level of data protection, we rely on appropriate safeguards, such as the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, where applicable, the Swiss–U.S. Data Privacy Framework.

6. Data Disclosure to Third Parties

We do not sell your personal data. We disclose personal data to third parties only as described in this policy (in particular to our hosting provider, Formcarry and its sub-processors, and Google acting on our behalf), where you have consented, or where we are required or entitled to do so by law. Providers acting on our behalf process data under contractual and other appropriate safeguards.

7. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or alteration. Please note that the transmission of data over the Internet can never be fully secure.

8. Your Rights

Under the Swiss Federal Act on Data Protection (FADP), you have rights regarding your personal data, including the rights to information, rectification, erasure, restriction of processing, data portability and objection.

To exercise your rights, please contact ECOFIN Data Model AG using the details in Section 1. We may request proof of identity before acting on your request.

9. Governing Law

This Privacy Policy is governed by Swiss law, in particular the Federal Act on Data Protection (FADP).

Last updated: August 2026