Legal

Privacy policy

Deutsche Fassung (massgebend)

This is a translation of our German Datenschutzerklärung. If the two differ, the German version prevails.

This privacy policy explains which personal data we process in connection with this website and our services. The Swiss Federal Act on Data Protection (FADP, in German DSG) applies. Where the EU General Data Protection Regulation (GDPR) applies, for example to clients in the EU, its provisions apply in addition.

To put it in context: data from client projects is processed in Switzerland or the EU (section 7). For contact, bookings and administration, on the other hand, we use common services such as email, calendar, appointment booking and WhatsApp, whose providers also process data in the USA. Sections 2 to 6 list these services one by one.

1. Controller

4XOR Software Schäuble (Sole proprietorship (Einzelunternehmen)), Tobias Schäuble
Dornacherstrasse 17, 4147 Aesch, Switzerland
Email: info@4xor.de · Phone: +41 76 639 66 09

2. Visiting this website: hosting and delivery

This website is hosted by Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; parent company Amazon Web Services, Inc., USA). The servers are inFrankfurt am Main, Germany (EU). It is delivered through the content delivery network Amazon CloudFront. So that pages load fast, a server near you answers each request. It can be at any of CloudFront’s locations worldwide, including outside Switzerland and the EEA, for example in the USA.

When you visit, AWS processes technically necessary data: IP address, date and time, the page requested, referrer, browser and operating system. CloudFront may keep access logs of this. We use this data only to run the website securely and reliably and to analyse errors, not to analyse visitor behaviour, and delete it once it is no longer needed for that. Under the GDPR the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Loading this website sets no cookies, and no analytics or tracking tools and no advertising pixels run. Fonts are served from our own server; no data is sent to Google or other third parties for this. Only the Cal.com booking calendar can set cookies, and only after you click a booking button (section 4).

3. Contact by email, phone and WhatsApp

When you contact us, we process your details (e.g. name, contact details, content of your enquiry) to answer you and, where applicable, to prepare an offer or perform a contract (Art. 6(1)(b) GDPR).

Enquiries that do not lead to an order are deleted once they are dealt with, unless we are required to keep them.

4. Booking through Cal.com

We use the booking service Cal.com (Cal.com, Inc., USA) for intro calls and orders. Only when you click a booking button does the booking calendar open in a window on this page (on phones, on Cal.com’s website) and load from Cal.com’s servers. From that click on, Cal.com receives technical data such as your IP address and browser details and may set cookies. Without such a click, no data is sent to Cal.com.

When you book, Cal.com processes the details you enter on our behalf (e.g. name, email address, time zone, a note on your enquiry) so that we can hold the call (Art. 6(1)(b) GDPR). For this, Cal.com checks our calendar for free times and adds the booked call to it (calendar sync); our calendar is run by Google (see section 3). You receive a confirmation by email. More information is in Cal.com’s privacy policy.

5. Orders, invoices and accounting

When you order a package, we process the order and billing details (company, billing address, contact person, services, amounts, payments) to perform the contract (Art. 6(1)(b) GDPR). We keep business records, invoices and accounting vouchers for 10 years, as Swiss law requires (Art. 958f of the Swiss Code of Obligations; under the GDPR Art. 6(1)(c), legal obligation). After that they are deleted.

6. Links to external platforms

This website links to LinkedIn (LinkedIn Ireland Unlimited Company) and WhatsApp and, only on the websites page, to our gig on Fiverr (Fiverr International Ltd., Israel). These links send no data until you click them. After that you are on the provider’s website and its privacy terms apply. If you order through Fiverr, the contract is made through Fiverr’s platform, and Fiverr processes the data needed for it.

7. Client projects

Where we process personal data on behalf of our clients as part of an order (e.g. when building AI solutions with client data), we do so only on their instructions and under a separate data processing agreement. This project data stays in Switzerland or the EU unless agreed otherwise in writing. We do not use the services for contact, bookings and administration named in sections 2 to 6 to process such project data.

8. Disclosure to third parties and abroad

We do not sell personal data. We share it only with service providers we need for our services, or where the law requires it. Under Art. 19(4) FADP, these are the countries to which personal data may be disclosed:

For the USA we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses as recognised by the Swiss FDPIC. Transfers to other countries without adequate data protection are secured with the same kind of safeguards.

9. Your rights

Within the applicable law, you have the right to:

To do so, write to info@4xor.de. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, to a data protection authority in the EU.

10. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is served encrypted (HTTPS).

11. Changes

We may update this privacy policy at any time. The version published on this website applies.

As of October 2026