Privacy Policy

Fassung vom 21.10.2026

This policy covers the website of Edelweiss Webdesign (edelweiss-webdesign.ch), a service of Cavaler Media GmbH, the order form, the website check, the questionnaire about your project and the application form (closer). It follows the Swiss Data Protection Act (FADP) and, for visitors from the EU and the EEA, the General Data Protection Regulation (GDPR).

Controller

Cavaler Media GmbH, Kelmattstrasse 11, 6403 Küssnacht am Rigi, Switzerland, kontakt@cavalermedia.ch.

What data we process

• Order form: company name, contact person, address, phone, email, your information on services, style and domain, and links to files. We do not ask for payment details.
• Application form (closer): name, email, phone, place of residence, language skills, information on sales experience, closed deals and availability, one reference and, optionally, a LinkedIn link. Purpose: selecting closers. We store this information for no more than 6 months after the selection is completed and then delete it, unless you are engaged. We contact references only with your consent. The information is stored temporarily in encrypted form until we retrieve it and is not passed on to third parties.
• Website check: company name, your website address, email, your country (English and French forms), optionally your name, and your consents with time stamps. Purpose: we check the homepage of the website you named once for technical basics and email you the report. Only if you also tick the corresponding box will we contact you afterwards by email no more than three times with an offer of a call; you can withdraw this at any time with a short reply. The information is stored temporarily in encrypted form until we retrieve it.
• Questionnaire about your project: Your company, your name, the company phone number, your direct number, the time when you are reachable, your e-mail address, your answers on project, timing, budget range, decision process and priority, whether you have already approached agencies, optionally your message, and your consent to the handover with the time it was given. If we sent you a personal link, it contains company and name for pre-filling plus an identifier of your record with us. Purpose: we understand your project and select the right partner agency; the agency then contacts you directly. Questionnaires started but not submitted we treat as an interim state so that we can follow up.
• Files you send us: logo, images and text for your website.
• Server logs: when the site is accessed, our hosting provider stores technical data such as IP address, time and browser to keep the service running securely.

We serve fonts and scripts from our own server. Third-party services (analytics, ad tracking, maps, videos) load only after you consent in the cookie banner; details in the section “Cookies and third-party services”.

Cookies and third-party services

On your first visit, we ask for your consent in the cookie banner. “Reject all” is just as easy as “Accept all”, and nothing is preselected. Before you decide, the site loads nothing from third-party servers and sets no cookies. You can change or withdraw your choice at any time via “Cookie settings” in the footer; on withdrawal, we delete the cookies of the services concerned in your browser. For EU visitors, the legal basis is your consent (Art. 6(1)(a) GDPR) and, for necessary storage, our legitimate interest in operating the site (Art. 6(1)(f) GDPR).

The list of all cookies is in the Cookie Policy.

Consent management

Purpose: stores your choice in the cookie banner with date and version. Provider: self-hosted installation of cookieconsent 3.1.0 (MIT), on our server, no third-party provider. Country: your browser (on your device). Category in the banner: necessary. Storage: browser storage “cookie-wahl-v1” (not a cookie). Retention period: 12 months; we ask again when the version changes.

Language setting

Purpose: remembers the language you chose with the language switch (DE, EN, FR, IT) so the home page does not redirect you again. Provider: our own website, no third party. Country: your browser (on your device). Category in the banner: necessary. Storage: cookie “sprache” (value de, en, fr or it), only once you switch language. Retention period: 12 months.

Hosting

Purpose: delivering the site, server logs for secure operation. Provider: Vercel Inc., San Francisco. Country: USA. Category in the banner: necessary. Storage: no cookies. Retention period: as long as necessary for secure operation.

Google Analytics 4

Purpose: counts visits and page views so we can see which content is read; Google does not store IP addresses, Google Signals is off. Provider: Google Ireland Ltd., Dublin; Google LLC, Mountain View. Country: Ireland, USA. Category in the banner: analytics. Storage: cookies “_ga”, “_ga_<ID>”. Retention period: 13 months. Status: prepared, currently not in use; we will update this policy before it is switched on.

Google Ads Conversion

Purpose: measures whether an ad led to an inquiry. Provider: Google Ireland Ltd.; Google LLC. Country: Ireland, USA. Category in the banner: marketing. Storage: cookies “_gcl_au”, “_gcl_aw”. Retention period: 90 days. Status: prepared, currently not in use; we will update this policy before it is switched on.

Meta Pixel

Purpose: measures whether an ad on Facebook or Instagram led to an inquiry. Provider: Meta Platforms Ireland Ltd., Dublin; Meta Platforms Inc. Country: Ireland, USA. Category in the banner: marketing. Storage: cookies “_fbp”, “_fbc”. Retention period: 90 days. Status: prepared, currently not in use; we will update this policy before it is switched on.

Google Maps

Purpose: shows our location on a map, only after a click or consent to “External media”. Provider: Google Ireland Ltd.; Google LLC. Country: Ireland, USA. Category in the banner: external media. Storage: Google cookies (e.g. “NID”), set by google.com. Retention period: up to 6 months (according to Google).

YouTube (privacy-enhanced mode)

Purpose: shows videos, only after a click or consent to “External media”. Provider: Google Ireland Ltd.; Google LLC. Country: Ireland, USA. Category in the banner: external media. Storage: storage by youtube-nocookie.com only when a video is played. Retention period: up to 6 months (according to Google). Status: prepared, currently not in use; we will update this policy before it is switched on.

Appointment booking (calendar service)

Purpose: book an appointment directly online, only after a click or consent to “External media”. Provider: will be named here before use. Country: will be named here before use. Category in the banner: external media. Storage: depends on the service. Retention period: depends on the service. Status: prepared, currently not in use; we will update this policy before it is switched on.

WhatsApp

Purpose: message to us, only if you tap the WhatsApp button; the site loads nothing from WhatsApp. Provider: WhatsApp Ireland Ltd.; Meta Platforms Inc. Country: Ireland, USA. Category in the banner: none (link). Storage: no cookies on this site. Retention period: messages as long as needed for the inquiry.

For providers in the USA, we rely on the Data Privacy Framework (Swiss-U.S. and EU-U.S.) where the provider is certified, and otherwise on standard contractual clauses. Even so, U.S. authorities may be able to access data under certain circumstances.

Why we process data

To process your enquiry, put you in touch with the right web agency and communicate with you about it. We keep invoicing data for as long as the law requires (usually 10 years).

Who receives the data

• Vercel Inc. (USA): runs this website and stores incoming orders, website check requests and applications until we retrieve them (encrypted).
• Telegram (Telegram Messenger Inc., servers outside Switzerland): we receive a notification with your order, your website check request or a summary of your application, so that we can respond quickly.
• Web agencies: one partner agency selected by us, only with your express consent in the questionnaire. The handover is the purpose of the questionnaire, not the exception. Details in the section “Handover to the right web agency”.
• IONOS SE (Germany): runs our email mailbox. We use it to send you quotes and invoices and to receive your replies and files.
• File transfer: if you send us a link to a service such as WeTransfer or Google Drive, you choose that service yourself; its terms apply.

These providers may process data in countries without an equivalent level of data protection (e.g. the USA). In doing so, we rely on the providers' standard contractual clauses or on the performance of our contract with you (Art. 17(1)(b) FADP). Your data is not sold and is not passed on to third parties for advertising.

Handover to the right web agency

Edelweiss Webdesign refers projects from small and medium businesses to web agencies. If you fill in the questionnaire about your project and tick the consent box, we pass your details from this form, including your contact data, to a partner agency selected by us. That is the purpose of the form and therefore the normal case, not the exception. Without the tick we do not accept the form and pass nothing on.

• Purpose: Referring your project to a suitable web agency. The agency can assess your project, contact you directly and make you a quote. We do not pass your data on for any other purpose. We do not sell address lists and do not pass your data on for third-party advertising.
• What is passed on: Your company, your name, the company phone number, your direct number, the time when you are reachable, your e-mail address, your answers in the questionnaire and, if you wrote one, your message.
• Recipient category: Web agencies in Switzerland and Liechtenstein that we work with (partner agencies). For each project it is a single agency, selected by project, region, timing and budget range, not several at once. On request we tell you which agency received your details. We pass your details only to agencies that have committed to us in writing to use them exclusively for this purpose; for the processing after that the agency is itself responsible.
• Rechtsgrundlage: your consent, which you give explicitly in the form. Without the tick we do not accept the form; you can call or write to us directly instead.
• Widerruf: You can withdraw your consent at any time and without giving reasons by email to kontakt@cavalermedia.ch . After that we pass nothing on; we cannot undo transfers that have already happened, but at your request we ask the agency to delete the data.
• Retention period: We delete your details from the questionnaire at the latest 12 months after your last response if no contact with a partner agency and no engagement comes about. If an engagement does come about, the periods below apply. We keep the record of your consent (wording, time) for as long as we have to be able to prove it, at most 3 years after withdrawal.

How long we store data

• Order form (questionnaire): as long as necessary to handle the order, then deleted. Until we retrieve it, the request is stored in encrypted form in Vercel's storage. We retain accounting records (e.g. accepted quote, invoices) for 10 years (Art. 958f of the Swiss Code of Obligations, CO).
• Files you send us: as long as necessary to handle the order, then deleted.
• Server logs: as long as necessary for secure operation, then deleted by the hosting provider.
• Telegram notification: as long as necessary to handle the order, then deleted.
• Website check: if no project results, we delete your information and the report no later than 6 months after our last email.
• Questionnaire about your project: at the latest 12 months after your last response if no contract comes about; record of consent at most 3 years after the withdrawal. Partial entries of questionnaires that were started are deleted at the latest 3 months after they were abandoned.
• Application form (closer): as described above, no more than 6 months after the selection is completed.

Your rights

You can request information about your data, have incorrect data corrected and have data deleted, unless a statutory retention obligation applies. To do so, write to kontakt@cavalermedia.ch. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).