Legal
Privacy policy
As of September 2026
This is a translation for your convenience. Only the German version is legally binding.
This privacy policy explains which personal data we process when operating Elevate Page (website builder with hosting, elevate-page.ch). It is based on the Swiss Federal Act on Data Protection (FADP).
1. Controller
The controller for the processing of personal data within the meaning of the FADP is:
Vincent Schmid
Wässerwiesenstrasse 67h
8408 Winterthur
Switzerland
Email: info@elevate-page.ch
2. Visiting our website
When you visit our website and the websites we host, your browser technically transmits information to our server, in particular:
- IP address of the requesting device
- date and time of access
- address (URL) requested and the website from which access is made (referrer URL)
- browser and operating system used
We use this information to deliver the pages, to ensure the security and stability of the system and to prevent misuse (e.g. by limiting very large numbers of requests). We do not keep access logs with IP addresses. IP address and browser identifier are only stored for signed-in sessions and security-relevant events (e.g. sign-ins and password changes). The justification is our overriding interest (Art. 31 para. 1 FADP).
3. Visitor statistics without cookies
For our website and for the websites of our customers we count page views without cookies. We record the page viewed, the origin (domain of the referring website), the device type and the language. No IP addresses are stored for this; returning visits are only recognised during one day by means of an irreversible value that changes daily.
4. Registration and user account
When you register with Elevate Page, we process the following personal data:
- name
- email address
- password (only stored as a secure hash, never in plain text)
- preferred language
To invoice your package, we also process the billing details required. We use this data exclusively to provide and manage your account and to deliver the contractually agreed services (Art. 31 para. 2 let. a FADP).
5. Use of Elevate Page (processing on behalf)
When you use Elevate Page, we process the data you enter or that arrives through your website, in particular the content of your website, enquiries via contact forms, appointments and course registrations, orders in the online shop and the visitor statistics of your website. You are the controller of this data within the meaning of the FADP; we act as processor in accordance with Art. 9 FADP.
The details are set out in our data processing agreement (DPA). You are responsible for the imprint and privacy policy of your own website.
6. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- you have given your express consent (Art. 6 para. 6 FADP),
- the disclosure is necessary to perform a contract with you,
- there is a legal obligation to disclose it, or
- the disclosure is necessary to safeguard overriding legitimate interests (Art. 31 para. 1 FADP).
We use the following service providers to operate the platform:
- Hosting: servers in a data centre in Switzerland
- Email delivery: Infomaniak Network SA, Geneva (Switzerland)
- SSL certificates: Let’s Encrypt (Internet Security Research Group, USA); only domain names are transmitted
- Fonts in the editor: while you design in the editor, your browser loads fonts from Google Fonts (Google, USA), which transmits your IP address to Google. Published websites serve their fonts themselves.
- Card payments: Stripe, only if you switch on card payments in your online shop; Stripe processes the payment data as an independent controller.
- Automatic translation: DeepL SE (Germany), only if this function is switched on and you use it; the texts to be translated are transmitted.
If personal data is transferred to countries without an adequate level of data protection, we ensure appropriate safeguards (e.g. standard contractual clauses in accordance with Art. 16 para. 2 let. d FADP).
7. Cookies
Elevate Page only uses a technically necessary cookie for your sign-in (session cookie). It does not require prior consent. We do not use advertising or tracking cookies. Settings such as language and appearance are stored in your browser’s local storage.
8. Retention period
The personal data we collect is deleted or anonymised as soon as the purpose of storage no longer applies. We keep account data for as long as your account exists. By default, form enquiries and past appointments are deleted automatically after 24 months and visitor statistics after 13 months.
Orders in the online shop are not deleted automatically because business records must be kept for ten years (Art. 958f CO). If you delete your account, your websites and data are deleted immediately; they remain in backup copies for at most 30 days. Export records you are required to keep (e.g. orders as CSV) beforehand.
9. Your rights
Under the FADP you have the following rights regarding the personal data concerning you:
- right of access (Art. 25 FADP)
- right to rectification (Art. 32 para. 1 FADP)
- right to erasure (Art. 32 para. 2 let. c FADP)
- right to have a certain processing prohibited (Art. 32 para. 2 let. a FADP)
- right to data portability (Art. 28 FADP)
- right to prohibit disclosure to third parties (Art. 32 para. 2 let. b FADP)
- right to withdraw consent at any time with effect for the future
You can change much of your data directly in your account settings, where you can also delete your account yourself. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) if you believe your personal data is being processed unlawfully.
10. Data security
All connections are encrypted with TLS (HTTPS). We only store passwords as a secure hash (Argon2id). We also use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access by third parties (Art. 8 FADP in conjunction with Art. 1 ff. DPO).
11. Changes to this privacy policy
This privacy policy is currently valid (as of September 2026). The further development of Elevate Page or changes in legal requirements may make it necessary to change this privacy policy. The current version can be accessed on this page at any time.