Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

This privacy policy explains which personal data we process when operating Elevate Page (website builder with hosting, elevate-page.ch). It is based on the Swiss Federal Act on Data Protection (FADP).

1. Controller

The controller for the processing of personal data within the meaning of the FADP is:

Schmid IT-Solution
Wässerwiesenstrasse 67h
8408 Winterthur
Switzerland
Email: info@elevate-page.ch

2. Visiting our website

When you visit our website and the websites we host, your browser technically transmits information to our server, in particular:

• IP address of the requesting device
• date and time of access
• address (URL) requested and the website from which access is made (referrer URL)
• browser and operating system used

We use this information to deliver the pages, to ensure the security and stability of the system and to prevent misuse (e.g. by limiting very large numbers of requests). We do not keep access logs with IP addresses. IP address and browser identifier are only stored for signed-in sessions and security-relevant events (e.g. sign-ins and password changes). The justification is our overriding interest (Art. 31 para. 1 FADP).

If you write to us through the contact form, we process your name, your email address, optionally your phone number and company, and your message in order to answer your enquiry (Art. 31 para. 1 FADP). We store the enquiry and delete it after 24 months at the latest.

Templates in the editor: When you open a template or the section library in the editor, we log this fetch with the time, the template, the language, your account (if you are signed in) and the IP address. The delivered template contains an invisible mark that refers to this fetch. We process this data to enforce the fetch limits, to detect misuse and to prove unauthorised copies of our templates (overriding interest, Art. 31 para. 1 FADP). We delete the IP address after 90 days and the rest of the log after 24 months.

3. Visitor statistics without cookies

For our website and for the websites of our customers we count page views without cookies. We record the page viewed, the origin (domain of the referring website), the device type and the language. No IP addresses are stored for this; returning visits are only recognised during one day by means of an irreversible value that changes daily.

4. Registration and user account

When you register with Elevate Page, we process the following personal data:

• name
• email address
• password (only stored as a secure hash, never in plain text)
• preferred language

Before the first publication of a website and before a package request, we also collect your invoice details: whether you order as a private person or a company, where applicable the company name and company/VAT number, postal address (Switzerland or Liechtenstein), phone number and, if you wish, a separate email address for invoices. When you switch on the online shop or online booking, we suggest this address for QR-bills, pickup and appointments. We use this data exclusively to provide and manage your account and to deliver the contractually agreed services (Art. 31 para. 2 let. a FADP).

5. Use of Elevate Page (processing on behalf)

When you use Elevate Page, we process the data you enter or that arrives through your website, in particular the content of your website, enquiries via contact forms, appointments and course registrations, orders in the online shop and the visitor statistics of your website. You are the controller of this data within the meaning of the FADP; we act as processor in accordance with Art. 9 FADP.

The details are set out in our data processing agreement (DPA). You are responsible for the imprint and privacy policy of your own website.

If you set up your own sender address for your website, we store the access data of your mailbox (server, user name and password) encrypted and use it only to send your website’s emails to your customers. You can remove it at any time; we then delete it at once.

6. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• you have given your express consent (Art. 6 para. 6 FADP),
• the disclosure is necessary to perform a contract with you,
• there is a legal obligation to disclose it, or
• the disclosure is necessary to safeguard overriding legitimate interests (Art. 31 para. 1 FADP).

We use the following service providers to operate the platform:

• Hosting: servers in a data centre in Switzerland
• Email delivery: Infomaniak Network SA, Geneva (Switzerland)
• SSL certificates: Let’s Encrypt (Internet Security Research Group, USA); only domain names are transmitted
• Card payments: Stripe, only if you switch on card payments in your online shop. To open your payment account, we pass the email address, phone number, address and, where applicable, the company name from your invoice details to Stripe; further details such as identification and bank account you enter directly with Stripe. Stripe processes these details and the payment data as an independent controller.
• Payment for hosting: Stripe. For the subscription, we pass your name, email address, phone number, billing address and, where applicable, company name and UID from your invoice details to Stripe. You enter your payment method (e.g. card details) directly with Stripe; we do not receive it. Stripe processes these details and the payment data as an independent controller.
• Automatic translation: DeepL SE (Germany), only if this function is switched on and you use it; the texts to be translated are transmitted.

If personal data is transferred to countries without an adequate level of data protection, we ensure appropriate safeguards (e.g. standard contractual clauses in accordance with Art. 16 para. 2 let. d FADP).

7. Cookies

Elevate Page only uses a technically necessary cookie for your sign-in (session cookie). It does not require prior consent. We do not use advertising or tracking cookies. Settings such as language and appearance are stored in your browser’s local storage.

8. Retention period

The personal data we collect is deleted or anonymised as soon as the purpose of storage no longer applies. We keep account data for as long as your account exists. By default, form enquiries and past appointments are deleted automatically after 24 months and visitor statistics after 13 months. The email delivery log (recipient, subject, time and delivery status, so that delivery problems are noticed) is deleted after 90 days.

Orders in the online shop are not deleted automatically because business records must be kept for ten years (Art. 958f CO). If you delete your account, your websites and data are deleted immediately; they remain in backup copies for at most 30 days. Export records you are required to keep (e.g. orders as CSV) beforehand.

9. Your rights

Under the FADP you have the following rights regarding the personal data concerning you:

• right of access (Art. 25 FADP)
• right to rectification (Art. 32 para. 1 FADP)
• right to erasure (Art. 32 para. 2 let. c FADP)
• right to have a certain processing prohibited (Art. 32 para. 2 let. a FADP)
• right to data portability (Art. 28 FADP)
• right to prohibit disclosure to third parties (Art. 32 para. 2 let. b FADP)
• right to withdraw consent at any time with effect for the future

You can change much of your data directly in your account settings, where you can also delete your account yourself. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) if you believe your personal data is being processed unlawfully.

10. Data security

All connections are encrypted with TLS (HTTPS). We only store passwords as a secure hash (Argon2id). We also use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access by third parties (Art. 8 FADP in conjunction with Art. 1 ff. DPO).

11. Changes to this privacy policy

This privacy policy is currently valid (as of October 2026). The further development of Elevate Page or changes in legal requirements may make it necessary to change this privacy policy. The current version can be accessed on this page at any time.