Privacy notice.

Controller & contact

The controller is Etzensperger Informatik AG, Kirchweg 24, 3366 Bettenhausen, Switzerland. Responsible contact person: David Etzensperger.

For tender correspondence, use only the project email address in the message you received or in the project documents. Independently of this, privacy requests and the exercise of your rights may also be addressed in writing to the postal address above, for the attention of David Etzensperger.

Data we process

We process data from public procurement portals and notices, and from documents and messages supplied by contracting authorities, contacts or project partners. This may include names, business contact details, roles, organisations, tender and bid documents, correspondence and attachments, processing records and evidence.

Where necessary for cooperation, business contact details and communication preferences may be linked across projects. Public availability does not remove the protection of personal data contained in such information. Please provide only necessary information.

Purposes & legal bases

We use this data to assess suitable tenders, prepare and administer bids and contracts, communicate about projects, maintain records, secure IT systems and protect legal claims.

As a software and hardware partner, we observe the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the EU General Data Protection Regulation (GDPR). Where the GDPR applies, processing is based, depending on the circumstances, on pre-contractual or contractual measures (Article 6(1)(b)), legal obligations (c), legitimate interests in orderly procurement communication, security and evidence (f), or consent where required (a). We take data subjects’ interests and rights into account.

AI-assisted tools may support document analysis, message allocation and drafting, including processing project and contact data. External messages and submissions require human review and approval. We do not make solely automated decisions producing legal or similarly significant effects on individuals.

Access, providers & international transfers

Access is available to authorised staff and, where necessary, service providers for hosting, IT operations, email, document processing, AI support or backups. Project partners, advisers or authorities receive data only as necessary for the stated purposes or as legally required. Confidential project files are not published.

We provide for appropriate technical and organisational safeguards and necessary processor agreements. International transfers must meet legal requirements, such as an adequate level of protection or appropriate contractual safeguards. Details of the specific recipients, processing countries and safeguards are provided separately before a relevant transfer.

Archiving & retention

A project file is archived after processing is completed or the procurement procedure ends. Starting from that documented archiving date, tender data, documents and project correspondence may be retained for up to five additional years, insofar as necessary for documentation, evidence or legal claims.

Different contractual provisions apply where lawful. Mandatory statutory retention and legitimate requirements arising from ongoing proceedings take precedence; some documents may therefore need to be kept longer. Personal data that is no longer needed is deleted or anonymised before five years have elapsed if no lawful retention ground remains.

Once all retention grounds have ceased, data is deleted or anonymised. Backups are cleared through the applicable backup and deletion cycles; lawfully deleted data is not made available again for ordinary operations following restoration.

Website & external links

This website uses no analytics or marketing cookies. Fonts and graphics are served locally; there are no embedded external maps or contact forms. Technical connection data such as IP address, time, requested URL and browser details may be processed to serve and secure the website. Operational logs are not automatically subject to five-year project retention and are kept only as long as necessary for operational or security purposes.

When you open an external link, for example to edoobox or a mapping service, the respective provider’s privacy notice applies to its processing.

Your data protection rights

Subject to applicable law, you may request access, rectification, erasure, restriction, release or portability of your data and object to processing. You may withdraw consent prospectively. Statutory exceptions and retention requirements remain applicable.

Send requests via your project email address or by post to David Etzensperger at the address above. We may require proportionate identity verification and handle requests within statutory deadlines. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB) or, where the GDPR applies, a competent EU/EEA supervisory authority.

Applicable law & jurisdiction

Swiss law applies unless mandatory applicable provisions require otherwise. Where validly agreed and legally permissible, jurisdiction lies with the courts competent for our registered office in Bettenhausen, Switzerland. Mandatory venues, data protection rights and rights to complain or bring proceedings remain unaffected.

This notice explains data processing. It does not constitute blanket consent or establish a jurisdiction agreement merely through a website visit.