Privacy policy
How we collect, process and protect personal data. Compliant with the Swiss Federal Act on Data Protection (revDSG, in force since 1 September 2023) and — where applicable — the EU GDPR.
Contents
1. Data controller
2. Which data we collect
When you visit our website
When you access our website, technical data is automatically recorded in server log files:
- IP address (anonymised)
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
When you fill out the contact form
If you use our contact form, we collect the following data:
- First and last name
- Company
- Email address
- Phone number (optional)
- Number of employees (optional)
- Currently used payroll system (optional)
- Your message (optional)
When downloading a practical guide
To download our guides (e.g. CFO guide, HR guide) we collect:
- Email address
- Company
We use this information to send you the guide and to follow up on your request.
3. Purpose of processing
We process your data exclusively for the following purposes:
- Handling your enquiry and preparing a demo
- Providing and improving the website
- Fulfilling legal obligations
- Safeguarding legitimate interests (e.g. IT security)
- Reach measurement and performance measurement of our advertising (see section 7)
4. Legal basis
Processing takes place on the basis of Art. 6 para. 1 lit. a, b and f revDSG and — where applicable — Art. 6 para. 1 lit. a, b and f GDPR (consent, pre-contractual measures, legitimate interests).
5. Disclosure to third parties
We do not disclose your personal data to third parties without your explicit consent. Exceptions apply only for the following processors, with whom corresponding agreements are in place:
- Vercel Inc. (hosting of the marketing website; delivery and server functions of this site run in the Frankfurt region, Germany)
- Resend (transactional email delivery for the contact form and guide downloads)
- Microsoft Azure (Switzerland) (hosting of platform data in Switzerland)
- Google Ireland Ltd. (Google Tag Manager, Google Analytics 4 and Google Ads — reach and performance measurement, only after consent, see section 7)
- Leadsy (identification of visiting companies, only after consent, see section 7)
Transfers to third countries take place only if an adequate level of data protection is ensured (standard contractual clauses, adequacy decision).
6. Retention period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations.
- Server logs: maximum 90 days
- Contact form data: 24 months from last contact, where no contract is concluded
- Contract data: 10 years after the end of the contract (statutory retention obligation)
7. Cookies & tracking
This website uses technically necessary cookies. Cookies and comparable technologies for reach and advertising performance measurement are set only with your consent: we ask you on your first visit, and the services below are loaded only after you choose «Accept». If you choose «Essential only», none of them is called. Your choice is stored locally in your browser; you can change it at any time by clearing the website data in your browser.
Once you have given consent, we use:
- Google Tag Manager — manages the services below; it does not set analytics cookies itself.
- Google Analytics 4 — measures how our website is used (pages viewed, time on site, approximate location). Google processes the IP address in truncated form.
- Leadsy — identifies, based on the IP address, which company a visit originates from. No individuals are identified.
- Google Ads — measures the performance of our ads: whether a visit originated from an ad and whether an enquiry followed («conversion»). When you submit our contact form, your email address is transmitted to Google in hashed form («enhanced conversions») so the enquiry can be attributed to the ad.
The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA cannot be ruled out; Google relies on standard contractual clauses and the EU-US Data Privacy Framework.
You can object to collection by Google Analytics at any time by installing Google's browser add-on (tools.google.com/dlpage/gaoptout) or by blocking or deleting cookies in your browser. The website remains fully usable.
No profiling of individuals takes place; the analyses serve statistical reach measurement and the performance measurement of our advertising.
8. Your rights
You have the right, at any time, to:
- access the data we hold about you
- rectification of inaccurate data
- deletion of your data, insofar as no statutory retention obligations apply
- restriction of processing
- data portability
- object to processing
- withdraw any consent given, with effect for the future
To exercise these rights, contact us by phone on +41 43 321 99 82 or via the contact form.
You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).
9. Data security
We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access:
- TLS encryption for all data transmission
- Hosting of platform data in Switzerland on Microsoft Azure
- Regular security audits
- Access to data only by authorised employees on a need-to-know basis
10. Contact
For any data protection questions, you can reach us at:
payrollnow
Vulkanstrasse 106, 8048 Zurich
Phone: +41 43 321 99 82
Contact form: payrollnow.ch/#contact