Legal
Privacy.
Version: October 2026
1. General Information
Protecting your personal data is a matter of course for us. GRADweight GmbH processes personal data in accordance with the Swiss Federal Act on Data Protection (FADP). To the extent that the EU General Data Protection Regulation (GDPR) applies to your request, we also comply with its provisions. This policy explains which data we collect, what we use it for, and what rights you hold.
2. Data Controller
GRADweight GmbHSpiegelgutstrasse 148200 SchaffhausenSwitzerlandE-mail: mail@gradweight.ch3. Data Protection Contact
For any data-protection-related enquiries, you can contact us directly at mail@gradweight.ch. No separate Data Protection Officer (DPO) has been appointed; this is not required for our size of operation.
4. Data Collected When Visiting the Website
When you access our website, your browser automatically transmits the following connection data to our host:
- IP address
- Date and time of the request
- Page requested
- Volume of data transferred
- Browser and operating system
- Previously visited page (referrer URL)
Our host uses this data to generate an anonymous traffic statistic. No linkage with other data sources is performed.
5. Contact via E-mail or Form
When you contact us by e-mail or through the contact form, we process:
- Name, company, e-mail address
- Content of your enquiry
Upon submission of the form, a pseudonym is derived from your IP address (timestamp + anonymised key) that we cannot trace back to you. This pseudonym is used solely to protect the form against automated abuse (spam).
6. GRADcheck: Data Stored in Your Browser
The results of the GRADcheck are stored exclusively locally in your browser's storage. We do not receive this data and have no access to it. The results remain available until you click «Start over» in the result view or clear your browser's website data. The GRADcheck also functions when your browser blocks website data storage (e.g. localStorage).
7. Cookies and Trackers
Our website uses no cookies, no trackers, no third-party scripts, and no identifiers in your browser. The traffic statistic mentioned in Section 4 is generated exclusively server-side from log files and cannot be linked to your device.
8. Purposes and Legal Bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Responding to your enquiry | Contract / pre-contractual obligation | FADP Art. 31 para. 2 lit. a; GDPR Art. 6(1)(b) |
| Pseudonymisation (form) | Abuse prevention | FADP Art. 31 para. 1; GDPR Art. 6(1)(f) |
| Server logs, traffic statistics | Secure operation, troubleshooting, reach measurement | FADP Art. 31 para. 1; GDPR Art. 6(1)(f) |
| GRADcheck in browser | Continuation of calculation | No server-side processing; no legal basis required |
9. Retention Periods
| Data | Duration |
|---|---|
| Enquiries in our mailbox | 12 months, after which they are deleted if no follow-up contact occurs |
| IP pseudonym (form) | Minimum 1 hour after the last enquiry; deleted when a later form submission occurs |
| Server logs / traffic statistics | As long as our host deems necessary for operational security, troubleshooting, and abuse prevention; the host determines the exact duration |
| GRADcheck results in browser | No expiry on our side; can be cleared at any time via «Start over» or your browser's website-data settings |
10. Data Processors
| Service | Provider | Location |
|---|---|---|
| Hosting, mailbox, e-mail delivery | Infomaniak Network SA, Geneva | Data centres in Switzerland |
No further services (analytics, chatbots, marketing tools) are integrated into the website. Enquiries are not forwarded to any third-party provider.
11. International Data Transfers
At present, no personal data is transferred outside of Switzerland. The server infrastructure is located in Swiss data centres.
12. Your Rights
At any time, you may contact mail@gradweight.ch to request:
- Access to the data we hold about you
- Rectification of inaccurate data
- Erasure of your data
- Data portability in a commonly used format
- Objection to an ongoing processing operation
You also have the right to lodge a complaint with a supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- EU: the data-protection authority of your member state
13. Data Security
We implement appropriate technical and organisational measures (encrypted connections, access controls at the host, restricted storage scope) to protect your data.
14. Languages and Precedence
This privacy policy is available in German and English. In the event of any discrepancy between the two versions, the German version shall prevail.
15. Changes
We reserve the right to update this policy in the event of changed processing activities or regulatory adjustments. The current version is always available on our website.