Skip to content

Privacy policy

Last updated: 9 October 2026 · This is a translation. The German version is legally binding.

1. Controller

The controller responsible for processing personal data on this website is:

Webula – Evgenii Zhdanov
St. Gallen, Switzerland
Email: info@webula.ch · Phone: +41 79 710 34 92

Please contact us at this address with any privacy questions or to exercise your rights.

2. Principles and legal bases

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: your consent (Art. 6(1)(a) GDPR), steps prior to and performance of a contract (b), legal obligations (c) and our legitimate interests in a secure, working website and in communicating with prospective clients (f).

We only process the data required for the respective purpose.

3. Visiting the website and hosting

The website runs on servers in Europe. When you visit it, the server automatically stores technical information: IP address, date and time, the page requested, referrer URL, browser and operating system. We need this data to operate the website securely and reliably (legitimate interest). It is not combined with other data and is usually deleted after 90 days at the latest, unless it is needed to investigate a security incident.

Fonts are served locally from our server; there is no connection to Google Fonts.

4. Contact form, questionnaire and website audit

When you contact us through the contact form, the “Start” questionnaire or the AI website audit form, we process the data you provide — depending on the form: name, email address, phone number, company, website address, your message and your answers — to respond to your request and, if appropriate, to send you an offer.

Requests are sent to us by email and stored in our internal customer management system (CRM), which we operate ourselves on servers in Europe. We also document further communication with you there. Clients receive access to a client portal with files, approvals and invoices as part of a project.

AI website audit: for the free audit we retrieve the publicly accessible website you entered and analyse it automatically. Third-party AI services may be used for this (e.g. Anthropic PBC or OpenAI, L.L.C., USA). This primarily involves processing the content of the audited website. We provide the report via a non-guessable link and send it to your email address.

5. Email, phone, WhatsApp and Telegram

When you contact us by email or phone, we process your information to answer your request. We use an external email service provider to send emails.

If you write to us via WhatsApp (WhatsApp Ireland Limited / Meta Platforms, Inc.) or Telegram (Telegram FZ-LLC, Dubai), your messages and contact data are also processed by these providers under their own privacy policies, partly in countries outside Switzerland and the EU. We only use these channels if you contact us through them. If you prefer not to, please write to us by email.

6. Cookies and similar technologies

We use necessary cookies without which the website would not work as intended. Analytics cookies are only set with your consent. You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.

CookiePurposeCategoryDuration
webula_consentStores your cookie choicenecessary12 months
themeLight or dark themenecessary12 months
NEXT_LOCALESelected languagenecessarysession
_GRECAPTCHASpam protection for forms (Google reCAPTCHA)necessary6 months
_ga, ga*Google Analytics 4: distinguishing visitsanalytics (consent only)up to 2 years

7. Google Analytics 4 (only with consent)

With your consent we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. We use Google Consent Mode: without consent, Google Analytics is not loaded and no analytics cookies are set.

With consent, pseudonymous usage data is collected — such as pages viewed, time on page, device type, approximate location and referring page — as well as the submission of a form as an event (without the form content). Google Analytics 4 does not store full IP addresses. Advertising features are disabled. Data is deleted after 14 months. Data may be transferred to the USA; Google LLC is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via “Cookie settings”.

8. Google reCAPTCHA

To protect our forms against spam and abuse we use Google reCAPTCHA (Google Ireland Limited / Google LLC). reCAPTCHA is only loaded when a form is displayed and checks, based on information such as IP address, browser data and interactions, whether the input comes from a human. Cookies may be set and data may be transferred to the USA. The legal basis is our legitimate interest in protection against abuse. More information: Google privacy policy.

9. Disclosure to third parties and abroad

We only share personal data with the service providers named in this policy (hosting, email, Google, messengers, AI services) and only to the extent necessary for the purposes described. Some of these providers are located in the USA or other countries without an adequate level of data protection. In these cases we rely on Data Privacy Framework certification, standard contractual clauses or your consent. We do not sell personal data.

10. Retention

Requests: as long as needed to handle them; if no contract follows, we delete them after two years at the latest.
Contract and accounting records: 10 years under statutory retention obligations (Art. 958f Swiss Code of Obligations).
Server log files: usually no longer than 90 days.
Google Analytics: 14 months.

11. Your rights

Within the scope of applicable law, you have the right to access, rectification, erasure, restriction of processing, data portability, to object to processing and to withdraw consent at any time with effect for the future. To exercise your rights, write to info@webula.ch.

You may also lodge a complaint with the competent supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU the data protection authority of your country of residence.

12. Data security

We protect your data with appropriate technical and organisational measures, including encrypted transmission (TLS), access restrictions and regular backups.

13. Changes

We may update this privacy policy if our website or legal requirements change. The version published on this page applies.