Privacy

1. Controller

H.O.T. AG, Dufourstrasse 116, 8008 Zurich, Switzerland, is the controller responsible for personal data processed through this website.

Contact: info@hotag.ch · +41 44 380 60 60

2. Principles and applicable law

H.O.T. AG processes personal data transparently, for defined purposes and according to data-minimization principles. Swiss data protection law, in particular the Federal Act on Data Protection (FADP), applies. Where the EU General Data Protection Regulation (GDPR) applies to a specific processing activity, its additional requirements are also taken into account.

3. Website access and server logs

The website is hosted by METANET in Switzerland. When the website is accessed, technically necessary access data may be processed, including IP address, date and time, requested URL, transferred data volume, referrer and browser or operating-system information.

These data are used to operate the website securely and reliably, troubleshoot errors and prevent abuse. They are retained only for as long as necessary for those purposes and operational security requirements, and are then deleted or anonymized unless a legal obligation or specific security incident requires longer retention.

4. Contact form

If you use the contact form, we process the information you provide – first name, last name, preferred form of address, company, business email address, optional phone number, selected topic and optional brief description – solely to handle your inquiry and the related communication.

Contact requests are delivered by email to an H.O.T. AG Microsoft 365 mailbox. They are not currently stored in a separate CRM. Inquiries that do not lead to a mandate or further business relationship are deleted once they are no longer required for the stated purpose, unless legal retention requirements or legitimate reasons for the establishment or defense of claims require longer retention. If a contractual relationship is established, business-relevant correspondence may be kept for the applicable legal and contractual retention periods.

Where the GDPR applies, processing is based, depending on the circumstances, on steps taken prior to entering into a contract or performance of a contract and on our legitimate interest in handling business inquiries.

5. Email and Microsoft 365

We use Microsoft 365 for business email. Sender and recipient information, communication content, metadata and technical log data may therefore be processed by Microsoft as a service provider. Depending on the technical and contractual service setup, processing may also take place outside Switzerland or the European Economic Area. Where legally required, recognized safeguards for international data transfers are used.

6. Protection against automated requests: Cloudflare Turnstile

H.O.T. AG may use Cloudflare Turnstile to protect the contact form from spam and automated attacks. Turnstile performs technical security checks in the browser and processes signals such as IP address, user agent, TLS or browser characteristics, sitekey and origin, as well as other technical information required for bot detection.

According to Cloudflare, Turnstile does not access the contents of the contact form or other page inputs. Processing is limited to the security function. Cloudflare may process data in different countries; where required by law, appropriate safeguards apply to international transfers.

More information is available in Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

7. No web analytics or marketing tracking

H.O.T. AG currently does not use web analytics or marketing/conversion tags such as Google Analytics, Google Ads Conversion Tracking, Meta Pixel or LinkedIn Insight Tag on hotag.ch. There is no newsletter signup. FouAnalytics is currently not used to measure visitors to this website.

8. Cookies and local browser storage

The public website does not use analytics or marketing cookies. For purely functional purposes, a browser may store technical UI state for the current session, for example whether a notice has already been dismissed.

The internal, non-public administration area uses a technically necessary HttpOnly session cookie for authorized H.O.T. AG users. Depending on configuration, Cloudflare Turnstile may use technically necessary browser and security mechanisms.

9. Recipients and processors

Personal data are made available only to internal personnel and external service providers who need them for the relevant purpose. These may include METANET for hosting, Microsoft for email and cloud services, and Cloudflare for bot protection. Service providers are used in accordance with applicable data protection requirements.

10. International transfers

Individual service providers, in particular Microsoft and Cloudflare, may process personal data outside Switzerland. Transfers are made only where the applicable legal requirements are met, for example based on a recognized adequate level of protection, appropriate contractual safeguards or a statutory exception.

11. Retention

H.O.T. AG retains personal data only for as long as necessary for the relevant purpose, contractual performance, legitimate interests or statutory retention and evidence obligations. Data are then deleted or anonymized unless further processing is lawfully permitted.

12. Data-subject rights

Depending on the applicable data protection law, individuals may in particular request access to personal data and, where the legal requirements are met, correction, deletion, restriction or objection to certain processing and, where applicable, data portability. Requests can be sent to info@hotag.ch. Individuals may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, a competent European supervisory authority.

13. No automated individual decisions

hotag.ch does not make solely automated decisions that produce legal effects concerning website visitors or similarly significantly affect them.

14. Data security

H.O.T. AG applies reasonable technical and organizational security measures, including encrypted transmission, access restrictions, input validation, rate limiting and technical protection against automated abuse. No technical system can guarantee absolute protection against every risk.

15. Changes

This privacy notice may be updated when the website, service providers or legal requirements change. The version published on hotag.ch at the relevant time applies.

Last updated

September 2026