Privacy policy
How we collect, process and protect personal data. Compliant with the Swiss Federal Act on Data Protection (revDSG, in force since 1 September 2023) and — where applicable — the EU GDPR.
Contents
1. Data controller
2. Which data we collect
When you visit our website
When you access our website, technical data is automatically recorded in server log files:
- IP address (anonymised)
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
When you fill out the contact form
If you use our contact form, we collect the following data:
- First and last name
- Company
- Email address
- Phone number (optional)
- Number of employees (optional)
- Currently used payroll system (optional)
- Your message (optional)
3. Purpose of processing
We process your data exclusively for the following purposes:
- Handling your enquiry and preparing a demo
- Providing and improving the website
- Fulfilling legal obligations
- Safeguarding legitimate interests (e.g. IT security)
4. Legal basis
Processing takes place on the basis of Art. 6 para. 1 lit. a, b and f revDSG and — where applicable — Art. 6 para. 1 lit. a, b and f GDPR (consent, pre-contractual measures, legitimate interests).
5. Disclosure to third parties
We do not disclose your personal data to third parties without your explicit consent. Exceptions apply only for the following processors, with whom corresponding agreements are in place:
- Vercel Inc. (hosting of the marketing website, USA / EU)
- Resend (transactional email delivery for the contact form)
- Microsoft Azure (Switzerland) (hosting of platform data in Switzerland)
Transfers to third countries take place only if an adequate level of data protection is ensured (standard contractual clauses, adequacy decision).
6. Retention period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations.
- Server logs: maximum 90 days
- Contact form data: 24 months from last contact, where no contract is concluded
- Contract data: 10 years after the end of the contract (statutory retention obligation)
7. Cookies & tracking
This website uses only technically necessary cookies that are required for the operation of the website. No tracking or profiling takes place.
As soon as analytics tools (e.g. Plausible, Google Analytics) are used, we will inform you transparently here and obtain your consent where required.
8. Your rights
You have the right, at any time, to:
- access the data we hold about you
- rectification of inaccurate data
- deletion of your data, insofar as no statutory retention obligations apply
- restriction of processing
- data portability
- object to processing
- withdraw any consent given, with effect for the future
To exercise these rights, contact us by phone on +41 43 321 99 82 or via the contact form.
You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).
9. Data security
We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access:
- TLS encryption for all data transmission
- Hosting of platform data in Switzerland on Microsoft Azure
- Regular security audits
- Access to data only by authorised employees on a need-to-know basis
10. Contact
For any data protection questions, you can reach us at:
payrollnow
Vulkanstrasse 105, 8048 Zurich
Phone: +41 43 321 99 82
Contact form: payrollnow.ch/#contact