Privacy Policy & Data Protection

1. Data Controller / Verantwortlicher

2. Data We Collect

2.1 Automatically Collected Data

When you visit our website, we automatically collect:

• IP address (anonymized)
• Browser type and version
• Operating system
• Referrer URL
• Date and time of access

2.2 Cookies & Local Storage

We only use essential cookies necessary for the website to function properly. These include:

• Cookie consent preference storage (local storage)
• Session management (local storage)
• Google Maps consent preference (local storage)

We do not use tracking, analytics, or marketing cookies without your explicit consent.

2.3 Location Data via Google Maps

2.4 Spam Protection via Google reCAPTCHA

2.5 Website Analytics via Google Analytics 4

3. Purpose of Data Processing

We process your data for the following purposes:

• To provide and maintain our service
• To ensure website security
• To comply with legal obligations
• To improve user experience

4. Legal Basis for Data Processing

4.1 Swiss Law (FADP)

Under Swiss Federal Act on Data Protection, we process your data based on:

• Article 6 para. 2 FADP - Processing for the performance of a contract
• Article 6 para. 2 FADP - Processing based on consent
• Article 6 para. 2 FADP - Legitimate interests in processing
• Article 6 para. 4 FADP - Compliance with legal obligations

4.2 EU Law (GDPR) - for EU Residents

We process data of EU residents based on:

• Article 6(1)(a) GDPR - Consent (e.g., Google Maps, reCAPTCHA)
• Article 6(1)(b) GDPR - Performance of contract (subscription services)
• Article 6(1)(c) GDPR - Legal obligation (tax, accounting)
• Article 6(1)(f) GDPR - Legitimate interests (security, fraud prevention)

5. Your Data Protection Rights

5.1 Rights Under Swiss Law (FADP)

Under Swiss Federal Act on Data Protection, you have the following rights:

• Right of Access (Art. 25 FADP) - Request information about your personal data we process
• Right to Rectification (Art. 32 FADP) - Request correction of inaccurate or incomplete data
• Right to Erasure - Request deletion of your data where legally permissible
• Right to Object - Object to certain types of data processing
• Right to Data Portability - Receive your data in a structured, commonly used format
• Right to Lodge a Complaint - File a complaint with the Federal Data Protection and Information Commissioner (FDPIC)

5.2 Rights Under EU Law (GDPR) - for EU Residents

If you reside in the EU, you additionally have these rights under GDPR:

• Right of Access (Art. 15 GDPR) - Request copies of your personal data
• Right to Rectification (Art. 16 GDPR) - Request correction of inaccurate data
• Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR) - Request deletion of your data
• Right to Restriction of Processing (Art. 18 GDPR) - Request restriction of processing
• Right to Data Portability (Art. 20 GDPR) - Receive your data in structured format
• Right to Object (Art. 21 GDPR) - Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7(3) GDPR) - Withdraw consent at any time
• Right to Lodge a Complaint (Art. 77 GDPR) - File a complaint with your local data protection authority

5.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at: privacy@listallexperts.com

We will respond to your request without undue delay and in any event within:

• Swiss residents: 30 days (Art. 25 para. 3 FADP)
• EU residents: One month, extendable to three months for complex requests (Art. 12(3) GDPR)

6. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Cookie consent preferences are stored locally in your browser.

7. Data Sharing & Third-Party Services

We do not sell or trade your personal data. We share data with third parties only in the following cases:

• When required by law or legal process
• To protect our rights, safety, and property
• With your explicit consent
• Google Maps Platform: When you consent to use location features, your search queries and IP address are shared with Google LLC
• Google reCAPTCHA: When you consent and submit forms, your interaction data and IP address are analyzed by Google LLC for spam protection

Note: Each third-party service processes data according to their own privacy policies. We carefully select service providers that comply with GDPR and international data protection standards.

8. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). However, when you consent to use Google Maps services or reCAPTCHA spam protection, data is transferred to Google LLC in the USA.

Safeguards for data transfers to the USA:

• Google LLC is certified under the EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Additional technical and organizational measures to ensure data protection

All transfers are conducted in accordance with Chapter V of the GDPR and only occur after your explicit consent.

9. Security Measures

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure data storage, and regular security assessments.

10. Right to Lodge a Complaint / Beschwerderecht

10.1 Switzerland

If you believe your data protection rights under Swiss law have been violated, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC):

10.2 European Union

If you reside in the EU, you have the right to lodge a complaint with your local data protection supervisory authority. You can find your local authority at:

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated date. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us