Privacy Policy
We’re glad you’re interested in CNBS. This policy explains what data is processed when you visit this website, for what purpose, and what rights you have.
Data controller
Responsible for data processing within the meaning of the Swiss Federal Act on Data Protection (FADP) is:
Reinert Digital Services Switzerland (trading as CNBS)
Freihofstrasse 23
8048 Zürich
Switzerland
Email: hello@cnbscorp.com
What data we process
Hosting & server log files
This website is delivered as a statically generated site via Amazon CloudFront (CDN) and Amazon S3. This produces technical access data (including IP address, time of request, resource requested, browser type), used exclusively for the technical delivery, stability, and security of the website.
Appointment booking (Microsoft Bookings)
On our contact page you can book a call with us via Microsoft Bookings, a service of Microsoft 365. The scheduler is only loaded after you click “Choose a time”; until then, no connection to Microsoft is established. Once loaded, your browser connects to Microsoft’s servers, which transmits your IP address and technical browser information to Microsoft, and Microsoft may set cookies or similar technologies required for the scheduler to function.
If you book an appointment, the data you enter in the booking form — in particular your name, email address and, where provided, phone number and notes — as well as the selected date and time are processed in order to schedule and confirm the appointment, send you a calendar invitation and reminders by email, and prepare and conduct the call. If the appointment takes place online, it is held via Microsoft Teams, in which case Microsoft also processes the data required to run the meeting (e.g. name, participation times and, if enabled by you, audio and video).
Microsoft Bookings and Microsoft Teams are provided by Microsoft Ireland Operations Limited, Ireland (parent company: Microsoft Corporation, USA), which processes this data on our behalf as a processor under Microsoft’s Data Protection Addendum. Booking data is stored in our Microsoft 365 environment.
Google Fonts
This website embeds the “DM Serif Display” typeface via the Google Fonts API, which is loaded from servers operated by Google LLC or Google Ireland Limited. In doing so, your IP address is transmitted to Google. We have no influence over whether or how Google further processes this data.
No tracking
This website does not use analytics, marketing, or tracking cookies and does not use web analytics services (e.g. Google Analytics). No user profiles are created. The only exception to cookie-free browsing is the Microsoft Bookings scheduler described above, which may set cookies once you actively choose to load it.
International data transfers
The services named above — Google Fonts and Microsoft Bookings / Microsoft Teams — are operated by providers headquartered or with server locations in the USA. This may result in personal data being transferred to countries outside Switzerland and the EEA. These providers base such transfers on standard contractual clauses or equivalent certifications intended to ensure an adequate level of data protection; Microsoft Corporation is additionally certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework.
Retention period
We retain appointment data from Microsoft Bookings for as long as is necessary to process your request, conduct and follow up on the appointment, and maintain the business relationship; the data is subsequently deleted or anonymized, unless a statutory retention obligation applies. Technical server log files are automatically rotated after a short period.
Your rights
Under Swiss data protection law, you have in particular the following rights:
- Information about whether and which personal data we process about you
- Correction of inaccurate personal data
- Deletion of your personal data, unless a statutory retention obligation applies
- Restriction of processing
- Objection to processing
- Release or transfer of your personal data in a common electronic format (data portability)
To exercise these rights, please contact us at the address given above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) at any time.
Data security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse — including transport encryption (TLS) for all data transfers and restricted access to our backend infrastructure. Complete protection of data transmitted over the internet cannot be technically guaranteed.