Contact
EN

Legal

Privacy policy

How we handle your personal data – transparently and in line with the GDPR and the revised Swiss Federal Act on Data Protection (FADP).

1. Information on the collection of personal data

Below, Nuovia AG informs you about the collection of personal data when using its website. Personal data is any data that can be related to you personally, e.g. name, address, email address, or your user behaviour.

With this information, Nuovia AG fulfils its statutory disclosure obligations, in particular under the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (FADP, SR 235.1), which has been in force since 1 September 2023.

2. Controllers responsible for data processing

Controller within the meaning of the GDPR and the FADP:

Nuovia AG
Uraniastrasse 18
CH-8001 Zurich, Switzerland

Data Protection Officer:

Nuovia AG
Data Protection Officer
Uraniastrasse 18
CH-8001 Zurich, Switzerland

Email: info@nuovia.ch

To exercise your rights as a data subject or if you have questions regarding data processing, please contact: info@nuovia.ch

3. Collection of personal data when visiting the website

When the website is used purely for informational purposes — i.e. if you do not register or otherwise transmit information — Nuovia AG only collects the data that your browser automatically transmits to its web server. This data is technically necessary to display the website to you and to ensure stability and security:

  • IP address
  • Date and time of the request, as well as the time zone difference to GMT
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Volume of data transferred
  • Referrer URL (the website from which the request originates)
  • Browser, operating system, and language version of the browser software

This data is generally deleted within 30 days, unless longer retention is required for security purposes (e.g. to investigate abuse or system malfunctions).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the correct presentation and security of the website) / FADP (processing in accordance with the principles of proportionality and purpose limitation under Art. 6 FADP).

4. Request for a quote

If you submit a request via the website, Nuovia AG collects the personal data marked as mandatory fields in the form (e.g. name, email address, and, where applicable, further contact details) for the purpose of initiating and performing a contract.

Legal basis: Art. 6(1)(b) GDPR / FADP (purpose limitation and proportionality under Art. 6 FADP; contractual basis).

Voluntary information is processed on the basis of your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)). You may withdraw your consent at any time with effect for the future.

If no contract is concluded, your data will be deleted no later than 90 days after notification thereof, unless statutory retention obligations apply. If a contract is concluded, Nuovia AG stores your data for the duration of the business relationship and in accordance with the tax and commercial retention periods in Germany and Switzerland (up to 10 years). Once these periods have expired, the data is deleted or anonymised.

5. Contact

If you contact Nuovia AG by email or via its contact form, the personal data specified as mandatory fields (in particular email address and, where applicable, name and telephone number) will be processed for the purpose of handling your request. Any further information is voluntary and marked accordingly.

Depending on the nature of your request, processing takes place on the basis of either:

  • your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)); or
  • the performance of pre-contractual measures or the performance of a contract (Art. 6(1)(b) GDPR / Art. 31(2)(a) FADP), where your request relates to the conclusion or performance of a contract.

You may withdraw your consent at any time with effect for the future. The data will be deleted as soon as it is no longer required for the purpose, but no later than upon expiry of the statutory retention periods (up to 10 years in accordance with tax and commercial law requirements in Germany and Switzerland). You have the statutory rights of a data subject, in particular the right to access, rectification, erasure, restriction of processing, objection, and withdrawal of any consent given.

6. Customer account

When you open a customer account, Nuovia AG collects the data marked as mandatory fields in the registration form (e.g. name, email address, password) for the purpose of setting up, managing, and using your customer account.

Legal basis: Art. 6(1)(b) GDPR / FADP (contractual basis under Art. 6 FADP). Without this mandatory information, registration is not possible.

Any further voluntary information is processed on the basis of your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)); you may withdraw this consent at any time.

You may close your customer account at any time by notifying Nuovia AG. Once closed, your data will be deleted unless statutory retention obligations preclude this. Data relevant for tax and commercial law purposes is stored for up to 10 years in accordance with the requirements in Germany and Switzerland and is then deleted or anonymised.

7. Data security

Nuovia AG employs appropriate technical and organisational security measures to protect your personal data against accidental or intentional manipulation, partial or complete loss, destruction, and unauthorised access by third parties (e.g. TLS encryption for its website).

When selecting these measures, Nuovia AG takes into account the state of the art, the costs of implementation, the nature, scope, context, and purpose of the data processing, as well as the existing risks of a data breach, including their likelihood and potential impact (Art. 32 GDPR / Art. 8 FADP). Its security measures are reviewed regularly and adapted to technological developments. Further information is available upon request.

8. Cooperation with processors

To conduct its business operations, Nuovia AG engages external domestic and foreign service providers (e.g. in the areas of IT, hosting, logistics, telecommunications, sales, and marketing). These providers process personal data exclusively on the instructions of Nuovia AG and are contractually obligated, pursuant to Art. 28 GDPR and Art. 9 FADP, to comply with data protection provisions and appropriate technical and organisational security measures.

Where personal data is exchanged between Nuovia AG and companies within its corporate group (e.g. for administrative or promotional purposes), this takes place on the basis of existing data processing agreements or other appropriate legal bases under data protection law.

9. Cookie consent tool

To obtain valid user consent for cookies and cookie-based applications requiring consent, Nuovia AG uses the open-source library vanilla-cookieconsent, which runs directly on the website; no data is transmitted to any external provider in the process.

When you visit the website, a banner is displayed through which you can grant or refuse your consent to certain cookies. The tool blocks the setting of cookies requiring consent until you grant your consent. You may withdraw or adjust your consent at any time via the consent tool.

In order to fulfil statutory proof and documentation obligations, consent settings, including relevant user data (e.g. IP address, timestamp, consent status), are logged, stored for the duration of the session and beyond for up to 12 months, and attributed to the respective user.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR (legal obligation to document) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management) / FADP (Art. 6 FADP). Insofar as German data protection law is applicable, the storage of and access to information on your device is additionally based on Section 25 TDDDG.

10. Use of cookies

Nuovia AG uses cookies on its websites. Cookies are small text files that are stored on your device and are assigned to the browser you use by means of a unique string of characters. They cannot execute programs or transmit viruses and do not cause any damage to your device. They serve to make the online offering of Nuovia AG more user-friendly, effective, and secure.

Nuovia AG uses cookies of the following categories:

Strictly necessary cookies (type a)

Absolutely necessary for the operation and basic functions of the website (e.g. page navigation, security functions). Legal basis: insofar as German law is applicable, Section 25(2) No. 2 TDDDG; otherwise Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website) or FADP (processing in accordance with the principles under Art. 6 FADP; technically necessary).

Functional and performance cookies (type b)

Used to optimise and personalise the offering and to analyse website usage. Used only with your consent. Legal basis: Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP); insofar as German law is applicable: Section 25(1) TDDDG.

Marketing and analytics cookies (type c)

Used for marketing and analytics purposes, in particular to measure reach and for personalised advertising. Used exclusively with your prior consent. Legal basis: Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP); insofar as German law is applicable: Section 25(1) TDDDG.

You may withdraw or adjust your consent at any time with effect for the future in the cookie settings of the website. Information on managing and deleting cookies can be found in your browser settings.

10.1 Web tracking using Google Analytics

  1. This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»). It is used to analyse website usage and to generate reports on website activity for the continuous improvement of the offering of Nuovia AG.
  2. Google Analytics uses cookies and other technologies that enable an analysis of your use of the website (e.g. device/browser information, IP address, usage data, interactions, referrer URL). Your IP address is shortened by IP anonymisation («IP masking») within the EU/EEA prior to storage, so that a direct link to you as a person is excluded.
  3. Google acts as a processor on the basis of an agreement pursuant to Art. 28 GDPR. A transfer of data to the USA cannot be excluded. Google is certified under the EU-U.S. Data Privacy Framework (DPF), thereby ensuring an adequate level of data protection pursuant to Art. 45 GDPR.
  4. Legal basis: your explicit consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)). The storage period is a maximum of 14 months. You may withdraw your consent at any time with effect for the future via the consent manager, or install Google’s browser add-on: tools.google.com/dlpage/gaoptout
  5. Further information:
    marketingplatform.google.com/about/analytics/terms/us/
    support.google.com/analytics/answer/6004245
    policies.google.com/privacy

10.2 Adobe Fonts

For the consistent display of its website, Nuovia AG uses fonts from Adobe Fonts, a service provided by Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland («Adobe»).

When you visit the website, your browser loads the required web fonts directly from Adobe’s servers into the browser cache. In doing so, a connection is established to Adobe’s servers, through which Adobe becomes aware that the website was accessed from your IP address.

Legal basis: your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)); insofar as German law is applicable, additionally Section 25(1) TDDDG; provided that consent has been given via the consent tool. Adobe is certified under the EU-U.S. Data Privacy Framework (DPF) (Art. 45 GDPR). You may withdraw your consent at any time. Further information:

adobe.com/privacy.html
adobe.com/privacy/policies/adobe-fonts.html

10.3 Google Tag Manager

Nuovia AG uses Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»), for the central management and triggering of website tags.

Google Tag Manager itself does not set cookies and does not directly process any personal data. It serves exclusively to integrate and control further tags (e.g. for analytics or marketing purposes). Information on these third-party providers can be found in the respective sections of this privacy policy.

Google Tag Manager automatically takes into account your settings in the consent tool or in your browser settings and passes these preferences on to the integrated tags. Google is certified under the EU-U.S. Data Privacy Framework (DPF) (Art. 45 GDPR).

Legal basis for the integration and management of tags that process personal data or store information on your device: your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)); insofar as German law is applicable: Section 25(1) TDDDG, unless a different legal basis applies to individual services. Further information:

marketingplatform.google.com/about/analytics/tag-manager/use-policy/

10.4 Google reCAPTCHA

To ensure security when submitting forms and to protect against abuse through automated access (bots), Nuovia AG uses the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»). In this process, your IP address and other data required for this function are transmitted to Google and processed there. This may also include a transfer to servers of Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework (DPF) (Art. 45 GDPR).

Legal basis: your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)); insofar as German law is applicable: Section 25(1) TDDDG. You may withdraw your consent at any time via the consent tool. Further information:

cloud.google.com/terms/data-processing-addendum
google.com/recaptcha/about/

11. Integration of social networks

The website incorporates components of various social networks. The processing of personal data takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP); insofar as German law is applicable: Section 25(1) TDDDG), provided that you have given this consent via the consent management tool. You may withdraw your consent at any time with effect for the future.

LinkedIn

Nuovia AG uses links and, where applicable, components of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When you visit the site, your IP address, browser/device data, and interaction data may be transmitted to LinkedIn. LinkedIn is certified under the EU-U.S. Data Privacy Framework (DPF); access by U.S. authorities cannot be excluded.

Nuovia AG has entered into an agreement on joint controllership with LinkedIn (Art. 26 GDPR / Art. 5(7) FADP). Further information:

legal.linkedin.com/pages/joint-controller-addendum
linkedin.com/legal/privacy-policy

Vimeo

Nuovia AG embeds videos from the platform provider Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA. When a page with Vimeo videos is accessed, a connection is established to Vimeo’s servers, whereby technically necessary data and, where applicable, cookies are processed. Vimeo is certified under the EU-U.S. Data Privacy Framework (DPF). Further information:

vimeo.com/privacy

12. Newsletter

To sign up for its newsletter, Nuovia AG uses the double opt-in procedure: after signing up, you will receive an email with a confirmation link, which you must actively click to complete your registration. The entire registration process — including your consent, IP address, timestamp, and confirmations — is logged in order to ensure compliance with statutory proof and documentation obligations.

Legal basis: your explicit consent (Art. 6(1)(a) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP)).

For sending and analysing the newsletter, Nuovia AG engages BSI Business Systems Integration AG, Täfernstrasse 1, CH-5405 Baden («BSI»), as a service provider. Your email address and other data required for sending the newsletter are stored exclusively on BSI’s servers in Luxembourg.

To optimise the newsletter, Nuovia AG analyses your user behaviour (in particular openings, clicks, interactions, and unsubscriptions). This processing takes place exclusively on the basis of your consent.

You may withdraw your consent at any time with effect for the future — via the unsubscribe link in each newsletter or by email. Your personal data will be deleted following withdrawal, termination of the subscription, or after 24 months of inactivity at the latest.

13. Storage period and erasure

Nuovia AG processes and stores personal data only for as long as necessary for the respective processing purposes — in particular for initiating, performing, and concluding contractual relationships, fulfilling statutory obligations, and maintaining its business relationships.

For the specific storage period applicable to individual processing operations, please refer to the respective sections of this privacy policy. Where no explicit period is stated, the storage period is determined by the statutory retention periods, in particular the tax and commercial law provisions in Switzerland and the EU (generally up to 10 years).

Once these periods have expired or the purpose of processing no longer applies, personal data is deleted or anonymised, unless statutory proof or documentation obligations preclude this. Where processing is based on your consent or the legitimate interests of Nuovia AG, your data will be deleted without delay upon withdrawal or valid objection, unless mandatory statutory retention obligations preclude this.

14. Processing in third countries

Insofar as Nuovia AG processes personal data in countries outside the EU, the EEA, or Switzerland, or this occurs through the use of third-party services, this is done exclusively in accordance with statutory requirements. Such a transfer only takes place if:

  • an adequacy decision by the European Commission or the Federal Data Protection and Information Commissioner (FDPIC) is in place; or
  • appropriate safeguards exist, in particular EU Standard Contractual Clauses (SCC) or Binding Corporate Rules (BCR); or
  • you have expressly consented or a statutory exception applies (e.g. for the performance of a contract or the assertion of legal claims).

Legal bases: Art. 44 et seq. GDPR / Art. 16 et seq. FADP.

15. Your rights as a data subject

You may exercise your rights at any time using the contact details provided at the beginning of this policy. In particular, you have the following rights:

Right of access (Art. 15 GDPR / Art. 25 FADP)

You may request information on the purposes of processing, categories of data processed, recipients, planned storage period, origin of the data, and the existence of automated decision-making, including profiling.

Right to rectification (Art. 16 GDPR / Art. 32(1) FADP)

You may request the immediate rectification of inaccurate data or the completion of incomplete data.

Right to erasure (Art. 17 GDPR / Art. 32(2) FADP)

You may request the erasure of your data, provided that no statutory retention obligations or other exceptions apply.

Right to restriction of processing (Art. 18 GDPR / Art. 30 FADP)

You may request the restriction of processing, in particular if you contest the accuracy of the data or the processing is unlawful.

Right to data portability (Art. 20 GDPR / Art. 28 FADP)

You may receive your data in a structured, commonly used, and machine-readable format, or request that it be transmitted to another controller.

Right to object (Art. 21 GDPR / Art. 30 FADP)

You may object to processing where it is based on Art. 6(1)(e) or (f) GDPR. Unless the objection concerns direct marketing, Nuovia AG asks that you explain your reasons.

Right to withdraw consent (Art. 7(3) GDPR / FADP (consent, Art. 6 in conjunction with Art. 31 FADP))

You may withdraw consent already given at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR / Art. 49 FADP)

You may lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.

16. Competent supervisory authorities

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
Phone: +41 (0)58 462 43 95 | Email: edoeb@edoeb.admin.ch

17. Changes to this privacy policy

As part of the ongoing development of data protection law as well as technological or organisational changes, this privacy policy is reviewed on a regular basis to determine whether adjustments or additions are required.

Last updated: 3 August 2026