Privacy policy

This policy explains, in accordance with the Swiss Data Protection Act (FADP) and — where applicable — the EU GDPR, how personal data is processed on this website.

Controller

Data Holdings OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia (Registrikood 17512052). Data protection questions: info@chdata.ch.

Commercial register data

The company data displayed (including names of sole proprietorships) comes from the public commercial register (Art. 936 CO, Art. 14 CRO) and is reproduced unchanged and free of charge. Data protection law applies to this reproduction too: you can object to data about you being shown on this website (Art. 30 FADP, Art. 21 GDPR). We review every objection and remove the data unless there is an overriding interest in reproducing the public register. Corrections to the register itself are made by the cantonal commercial register office.

People in commercial register publications

For each company we show the people published in the Swiss Official Gazette of Commerce (SOGC) with their function and signing authority. We only use the data the register itself publishes (name, place of origin or nationality, municipality of residence, function, signing authority, date) — no addresses, birth dates or data from other sources, and no ratings. Mandates that ended more than ten years ago are not shown on person pages. You can object to the presentation of your person at any time (Art. 30 FADP, Art. 21 GDPR): write to us via the contact form; we remove your person page, the links and the entry in the person search. The company history keeps the entry as a reproduction of the official publication.

Email alerts

If you follow a company, we store your email address and the chosen company to send you new publications (confirmation by link, double opt-in). Every message contains an unsubscribe link; after unsubscribing we delete the entry.

Forms

Details from the contact, request and order forms (name, e-mail, company, UID, message or order) are stored to process your request and to invoice you. We record exports, unlocked contacts and API calls with the account or e-mail address, time, volume and filters, and may add control records to exports, to protect the database and prove claims (terms of use art. 9; legitimate interest); we keep these records as long as claims may arise from them, at most 10 years (art. 127 CO).

Account and payment

For an account we keep your e-mail address, sign-ins, credit, unlocked companies with their contacts, and orders for as long as the account exists. Payments are processed by Stripe (Stripe Payments Europe Ltd., Ireland; Stripe Inc., USA); we never receive card data, only the payment status. Business contact details of companies (phone, e-mail, website) come from our contact database, compiled from publicly accessible sources such as company websites — never contacts of sole proprietorships. We provide them to business customers for a fee, for information: to identify a company, match a call or reach a business partner. A company can check, correct or remove its contacts at any time: through "Is this your company?" on its profile, after confirming with an e-mail sent from one of the company's addresses (otherwise by phone, on the company's number), or by e-mail to info@chdata.ch. Removed contacts are never passed on again; for this we keep only a hash.

Cookies, server logs & usage statistics

We only use technically necessary cookies (e.g. to store your cookie choice and to keep you signed in to your account). For our own usage statistics we count page views, searches (search term, filters, number of results) and steps such as an order or an unlock – without cookies and without third parties. We store the time, the page, the referring page, the device type and the IP address; the IP address is deleted after 12 months. To count visitors per day, we also store with each page view a checksum computed from the date, the IP address, the browser identification (user agent) and a random value that is new every day. It only tells browsers apart within one day: we delete the random value when the day ends, after which the checksum can no longer be recomputed and does not link visits on different days. Until it is deleted, the IP address is stored next to it. The purpose is running and improving the website and protecting it from abuse (legitimate interest). Our web server logs every request (time, IP address, requested address, browser identifier, referring page, response time); we use these logs only for speed, errors and robot detection and delete them after 14 days.

Recipients and countries

We pass on personal data only as far as the service requires: to customers who buy exports (including the people entered in the commercial register) or contact details; to our hosting provider Hetzner (servers in the EU); to Hostcreators (Slovakia) for sending e-mail; to Stripe (Ireland, USA) for payments. Our contact database is partly hosted in the USA. For transfers to the USA we rely on the Swiss-U.S. or EU-U.S. Data Privacy Framework or on standard contractual clauses.

Legal bases and retention

We process register data, person pages, contacts and usage statistics on the basis of our legitimate interest in a transparent company directory and in business contacts (Art. 31(1) FADP, Art. 6(1)(f) GDPR); accounts, orders and payments to perform the contract (lit. b); accounting data under a legal obligation (lit. c). We keep data only as long as needed: IP addresses 12 months, accounts while they exist, accounting records 10 years (Art. 958f CO). Mandates that ended more than ten years ago are not shown on person pages.

Your rights

You have the right of access (free, within 30 days), rectification, erasure, objection and data portability (Art. 25–32 FADP, Art. 15–21 GDPR). Write to info@chdata.ch or use the contact form. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC) or to the Estonian data protection authority (Andmekaitse Inspektsioon).