Privacy policy

Protecting your personal data matters to us. This policy explains the nature, scope and purpose of personal data processing on zahnarzt.feedback.

Controller

8am GmbH, Birkenweg 1, 9404 Rorschacherberg, Schweiz · [email protected]

Hosting and data location

This website and the zahnarzt.feedback platform run on servers in Switzerland and the EU; on a customer's request we run their instance in Switzerland only. Personal data from the platform is not transferred to countries without an adequate level of protection. Apart from the font service described below, this page loads no third-party resources: no maps, no analytics services, no ad networks. The next section lists every provider involved in running it.

Service providers and infrastructure

We use service providers to run the platform. They process personal data solely on our behalf and on our instructions; a data processing agreement is in place with each of them. This list is complete:

Infomaniak (Switzerland) – servers and storage in Switzerland.
Hetzner (Germany) – servers in Germany and Finland.
Contabo (Germany) – servers in Germany for secondary services such as build and test environments.
Bunny, BunnyWay d.o.o. (Slovenia) – content delivery network, media storage, video and Bunny Fonts.
Emailit (EU) – sending transactional email such as notifications and form confirmations.
Mailomat (Switzerland) and Mailpro (Switzerland) – email delivery where a customer requests it for their instance.
Cloudflare (US) – DNS and protection against denial-of-service attacks. Cloudflare processes connection data such as IP address and requested address, but no content from the platform. The transfer to the US is based on the Standard Contractual Clauses.

Umami for traffic measurement and Listmonk for the newsletter run on our own servers from this list; they are not additional recipients.

Which provider does what, and why, is explained in full on the alpin.cx infrastructure page.

Typefaces (Bunny Fonts)

For typography we use Bunny Fonts, a font service operated by BunnyWay d.o.o., based in Slovenia (EU). When a page loads, your IP address is transmitted to its servers so that the typefaces can be delivered. The provider states that it sets no cookies and evaluates no personal data in the process. The legal basis is our legitimate interest in a consistent presentation.

Local storage instead of cookies

We set no tracking or marketing cookies. Your browser's local storage holds only your language preference and the acknowledgement of this notice. That information never leaves your device and can be cleared at any time in your browser settings.

Demo requests

When you use the enquiry form we process your name, email address, organisation and message solely in order to answer your request. The legal basis is pre-contractual communication (art. 31 para. 2 lit. a FADP, resp. art. 6 para. 1 lit. b GDPR). No data is passed on to third parties.

When you subscribe to our newsletter, we process your e-mail address as well as the language and the website you signed up from. For sending and managing it we use Listmonk – newsletter software we run ourselves. The operator is 8am GmbH; no external newsletter provider is involved and your address is not passed on to third parties. We do not measure open or click rates: the newsletters contain neither tracking pixels nor redirected links.

Signing up uses the double opt-in procedure: you first receive an e-mail with a confirmation link, and only after you confirm do we send you the newsletter. The legal basis is your consent (Art. 6(6) FADP and Art. 6(1)(a) GDPR); this also satisfies the requirements of Art. 3(1)(o) UCA. You may withdraw your consent at any time – via the unsubscribe link in every message or informally to [email protected]. We then delete your address from the list.

To protect the signup form against automated abuse, we briefly count signup attempts per IP address. That count is held in memory only and is not stored permanently.

Personal data of your patients

Personal data of your patients collected through the platform is processed exclusively on behalf of our customers. We do not combine data across organisations, produce no cross-organisation benchmarks and pass no data to advertising partners.

Retention

We retain personal data only for as long as the respective purpose requires or statutory retention periods demand. Enquiries sent through the form are deleted no later than twelve months after they have been handled.

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Please contact [email protected].

Legal basis

This policy follows the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the European GDPR.

Web analytics (Umami)

To measure reach, zahnarzt.feedback uses Umami, privacy-friendly web analytics self-hosted by 8am. Umami works without cookies and without cross-site tracking: no user profiles are built and no IP addresses are stored. Only aggregated information is collected – pages visited, country of origin, browser type – on our own servers, with no disclosure to third parties.