Websiteclarvane.com
ControllerClarvane
AnalyticsConsent-based GA4
01 · Scope and controller
Who this notice applies to.
This notice applies to visitors to clarvane.com and people who contact Clarvane through the website. Clarvane is responsible for the personal information described here.
Location: Kloten, Switzerland. Privacy questions can be sent to [email protected] or raised through the Speak with us page.
03 · Purposes and legal basis
Why information may be processed.
Operate and protect the website
To deliver pages, maintain availability, diagnose faults, and prevent misuse. Where a legal basis must be identified, this is generally Clarvane’s legitimate interest in operating a secure business website.
Respond to enquiries
To understand your request, prepare a conversation, and manage follow-up. The basis may be steps requested before a potential engagement or Clarvane’s legitimate interest in responding to business enquiries.
Understand website use
To assess whether the site is useful and improve its structure and content. Google Analytics is used for this purpose only after consent.
Meet legal obligations
Information may be used or preserved where necessary to comply with applicable law, establish or defend legal claims, or respond to a lawful request.
References to consent, contractual steps, legitimate interests, and legal obligations apply where the relevant Swiss, EEA, or UK data-protection framework requires that basis.
04 · Google Analytics
Measurement only with your choice.
Clarvane uses Google Analytics 4 to understand how the website is used. Analytics storage is denied by default and enabled only after you consent through the website’s cookie controls.
Analytics identifiersGA4 commonly uses the first-party cookies _ga and _ga_<container-id> to distinguish users and maintain session state. The implementation limits these cookies to six months. See the cookie information for the current inventory.
Regional IP handlingGoogle states that, for visitors in Switzerland, the EEA, and the UK, IP addresses are used to derive approximate location and are then discarded before the data is logged.
Initial scopeThe implementation is for aggregate website measurement. It does not include Google Ads conversion tracking, remarketing, or Google Signals unless those uses are separately assessed, approved, and disclosed.
Your controlYou can reject analytics or withdraw consent later through the cookie controls. Withdrawing consent does not affect processing that occurred before withdrawal.
Further information: Google Analytics data collection · regional data and privacy · Google privacy policy
05 · Sharing and transfers
Access is limited to a defined purpose.
Personal information may be made available to suppliers that support website hosting and security, contact delivery, and consent-based analytics. This includes GoDaddy for hosting, Cloudflare Turnstile for form-abuse checks, Upstash for rate limiting using hashed identifiers, Resend for delivering enquiries by email, Microsoft 365 for the protected internal mailbox, and Google for consent-based analytics. Information may also be shared with professional advisers or public authorities where necessary and legally permitted.
A supplier may process information outside Switzerland, the EEA, or the UK. Where required, Clarvane will use an applicable transfer mechanism and contractual safeguards.
06 · Retention
Kept only for as long as the purpose requires.
Retention depends on the type of information, the purpose for which it is used, ongoing correspondence, security needs, and applicable legal requirements. Information is deleted or anonymised when it is no longer required, subject to any necessary legal hold.
- Contact enquiries are delivered to the protected internal mailbox and are not copied into a website database. They follow the mailbox retention schedule and are deleted or retained only where a continuing business or legal purpose applies.
- Hosting and security logs will follow the verified production provider configuration.
- Hashed form-abuse identifiers are limited to the configured rate-limit windows and are not used as contact records.
- GA4 user- and event-level data is configured for two-month retention without resetting the period after new activity. Analytics cookies are limited to six months.
07 · Your rights
Access, correction, and control.
Depending on the law that applies, you may ask whether Clarvane processes your personal information and request access, correction, deletion, restriction, objection, or a portable copy. You may withdraw consent at any time where processing is based on consent.
You may also raise a concern with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner. Rights can be subject to legal conditions, exceptions, and identity verification.