Clear rules, without hidden fine print.

Last updated: 16 August 2026

Privacy policy

Strongflow processes personal data with care, in accordance with applicable Swiss data protection law and, where applicable, the European General Data Protection Regulation.

Data controller

Strongflow Sàrl, Chemin du Bel-Air 33, 1470 Estavayer-le-Lac, Switzerland, is responsible for the processing described here. You can contact it at info@strongflow.ch.

Data processed

Depending on how you use the website, Strongflow may process:

• information you submit through the form or by email, including your name, email address, company and message;
• technical data required to operate and secure the website, such as IP address, request date, device, browser, Railway request identifiers and error logs;
• your language preference and your choices in the cookie panel;
• only with your permission, pages viewed, calls-to-action clicks, the form result, UTM campaign parameters, referring domain and an anonymous browser identifier. Form field contents are never sent to the audience measurement service.

Purposes and legal grounds

This data is used to answer enquiries, prepare or perform an engagement, operate and secure the website, prevent misuse and comply with legal obligations. Depending on the circumstances, processing is based on pre-contractual steps, performance of a contract, a legal obligation, your consent or Strongflow's legitimate interests in communicating and providing a secure service.

Providers and recipients

Data is accessible only to Strongflow and the providers required for the service: Railway for hosting, security and technical logs, Infomaniak for email and delivery and, after consent, PostHog for audience measurement. No recipient receives this data for advertising purposes.

Processing abroad

The service is deployed in Railway's Europe West region in the Netherlands. Infomaniak processes email primarily in Switzerland. After consent, audience measurement events are sent to PostHog's European cloud in Frankfurt, Germany. As these providers may use international subprocessors, some administration, support or security data may also be processed in other countries under an applicable adequacy decision or recognised contractual safeguards.

Retention

An enquiry that does not lead to a contractual relationship is deleted no later than twelve months after the last exchange. Correspondence related to an engagement is retained for the duration of the relationship and then for applicable statutory periods. Application logs are retained for no more than thirty days unless a documented security need requires longer. Cookie durations are listed below.

Your rights

Within the limits of applicable law, you may request access to, correction or deletion of your data, receive a copy, restrict its processing, and withdraw consent for the future. You may also contact the Swiss Federal Data Protection and Information Commissioner or the competent authority where you live.

Cookies

Necessary cookies remember your language and preferences. PostHog remains fully disabled until you agree to audience measurement. After acceptance, an anonymous identifier may be kept in browser local storage. Autocapture, identified profiles and session recording are disabled. You can withdraw consent at any time.

Security

Strongflow applies proportionate technical and organisational measures to protect data. As no system can guarantee absolute security, transmissions over the Internet remain subject to certain risks.

Changes

This policy may change when services, providers or legal requirements change. The date at the top of the page identifies the latest version.

For any question about this information, write to info@strongflow.ch.