Privacy Policy
Protecting your personal data matters to us. This policy explains how personal data is processed when you visit this website — under the revised Swiss Data Protection Act (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
Last updated: 2026-06-28
1. Controller
[Rechtsträger / Legal entity — e.g. Sarangua Group GmbH], [Strasse Nr.], [PLZ Ort], Schweiz / Switzerland
Email: privacy@sarangua.ch
2. Principle
We process as little data as possible. This website collects no customer data and creates no accounts. There are no contact or order forms that send data to us.
3. Hosting
The site is hosted on Microsoft Azure Static Web Apps (Microsoft Corp. / Microsoft Ireland) and served via a CDN. The provider processes technically necessary connection data on access. A Data Processing Agreement is in place.
4. Server logs
On access, data is automatically recorded in server log files (e.g. truncated IP address, date/time, requested resource, referrer, browser/OS). Purpose: operation, security and stability. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) / Art. 31 revDSG.
5. Web analytics
No web analytics are currently active. If Google Analytics 4 is introduced later, it will run only after your consent via the cookie banner, and this notice will be updated accordingly.
6. Authentication
For any protected areas we use Zitadel as identity and sign-in provider. Account and sign-in data (e.g. email address, sign-in time) is processed — only for registered users, not for ordinary website visitors.
7. Communication & administration
To communicate with and manage our users we use common services, including Microsoft 365 and other (partly free / NGO) tools. Contact data processed serves only the respective communication purpose and is not used for third-party advertising.
8. Cookies & consent
Strictly necessary storage (e.g. your cookie choice) occurs without consent. Non-essential cookies (e.g. analytics) are set only after your consent via the banner and can be withdrawn there at any time.
9. Legal bases
Consent (Art. 6(1)(a) GDPR), contract (b), legal obligation (c) and legitimate interest (f); supplemented by the revDSG.
10. Disclosure & third countries
Disclosure occurs only to processors (hosting, possibly analytics, auth, communication). For transfers to the USA / third countries we rely on appropriate safeguards (EU Standard Contractual Clauses, EU-US Data Privacy Framework).
11. Retention
We keep personal data only as long as needed for the respective purpose or legal obligations, then delete it.
12. Your rights
You have the right to access, rectification, erasure, restriction, objection and data portability, and to withdraw consent. Contact privacy@sarangua.ch.
13. Complaint
You may lodge a complaint with the competent supervisory authority — in Switzerland the FDPIC, in the EU your local data protection authority.
14. Changes
We may update this policy. The version published here applies.