Privacy Policy

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP) is:

Natter Solutions GmbH
Gewerbeweg 1, 9486 Schaanwald
Principality of Liechtenstein
Email: office@natter.li
Phone: +423 798 77 98

You can reach us at this address for all data protection matters.

We process personal data only to the extent necessary to operate this website, to handle your enquiries and, with your consent, to analyse how the website is used.

• When you visit the website, technical access data is processed.
• When you use the contact form, we process the details you provide in order to answer your enquiry.
• Your visit is only analysed if you agree in the cookie banner.

We do not sell data and do not use it for third-party advertising. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Server logs

When you visit the website, the web server automatically processes technical access data: IP address, date and time, requested address, amount of data transferred, browser type and operating system. This data is needed to deliver the website, keep it running reliably and fend off attacks. It is deleted after 30 days at the latest.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

Hosting

The website and its database run on servers in the European Economic Area (EEA). A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

Fonts

Fonts are loaded from our own server. No fonts or scripts from Google or other third parties are embedded.

When you write to us using the contact form, we process the details you enter:

• Name and email address (required)
• Company, phone number and budget range (optional)
• Type of enquiry, selected topic and your message
• Language of the page and time of the enquiry

We need your name and email address to be able to reply. Without them we cannot handle the enquiry. All other details are optional.

The purpose is to answer your enquiry and to prepare a possible contract. Legal basis: Art. 6(1)(b) GDPR (steps at your request prior to entering into a contract), for general enquiries Art. 6(1)(f) GDPR (legitimate interest in answering them).

Storage and delivery

The enquiry is stored in the database of our website in the EEA. It is also delivered to us by email. For this we use the service Resend, provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the content of the email on our behalf on servers in the USA and usually stores it there for 30 days.

The transfer to the USA is based on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR), supplemented by the adaptations for Switzerland. Resend privacy policy: resend.com/legal/privacy-policy

If you contact us directly by email or phone instead, we process your details on the same basis.

Only if you agree in the cookie banner do we analyse the use of this website with PostHog. Without your consent PostHog is not loaded, no analytics cookies are set and no usage data is collected.

What is recorded

• Pages viewed, time spent, scroll depth and the page you came from
• Clicks and other interactions, for example opening a question or using the calculator
• Technical details such as browser, operating system, screen size and approximate origin (country, region)
• Session recordings: a replay of your visit with mouse movements, clicks and scrolling. Anything typed into form fields is not recorded.
• Browser error messages, so that we can fix technical problems

The data is stored under a random identifier (pseudonymous). We do not send your name or email address to PostHog. PostHog does not store your IP address.

Link to an enquiry

If you have agreed to analytics and send us an enquiry through the contact form, we store the random identifier and a reference to the session recording together with your enquiry. This lets us see which content mattered for your enquiry and advise you more specifically. Without consent this link is not made.

Purpose and legal basis

We want to understand how the website is used in order to improve its content and usability. The legal basis for storing and reading information on your device is your consent under Art. 61(4) of the Liechtenstein Communications Act (KomG), and for the further processing Art. 6(1)(a) GDPR.

Provider and storage location

The provider is PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use PostHog Cloud EU: the data is stored in a data centre in Frankfurt am Main, Germany. Requests from your browser go through our own domain and are forwarded to PostHog by our server.

PostHog processes the data on our behalf (Art. 28 GDPR). As PostHog is a company based in the USA, access from the USA cannot be ruled out. PostHog is certified under the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework. In addition, the Standard Contractual Clauses of the European Commission have been agreed. PostHog privacy policy: posthog.com/privacy

Retention

Session recordings are deleted after 30 days at the latest, event data after 12 months at the latest.

Withdrawal

You can withdraw your consent at any time with effect for the future using the link "Cookie settings" at the bottom of every page. On withdrawal PostHog is stopped immediately and the entries PostHog stored in your browser are deleted. The lawfulness of processing carried out before the withdrawal remains unaffected.

We use as few browser entries as possible. In detail:

Strictly necessary (no consent required)

• natter_consent: stores your decision in the cookie banner. Lifetime 6 months.
• NEXT_LOCALE: remembers the selected language. Lifetime: until the browser is closed.
• payload-token: only set when an editor signs in to the administration area.

Legal basis: Art. 61(4) KomG (strictly necessary) and Art. 6(1)(f) GDPR.

Analytics (only with consent)

• ph_…_posthog (cookie and local storage): random visitor identifier and session data of PostHog. Lifetime 12 months.
• ph_…_window_id and related entries in session storage: distinguish browser windows. Lifetime: until the window is closed.
• __ph_opt_in_out_…: records that you agreed to analytics.

These entries are only created after your consent and are deleted when you withdraw it.

Your data is only received by parties that need it for the purposes described:

• Hosting provider of the website (servers in the EEA)
• Resend, Plus Five Five, Inc., USA: delivery of the notification about a new enquiry
• PostHog Inc., USA, with storage in Germany: analytics, only with consent

Data processing agreements are in place with all service providers. Countries to which data may be disclosed: Germany and the USA. For the USA the safeguards named in sections 04 and 05 apply (Standard Contractual Clauses, and for PostHog additionally the certification under the Data Privacy Framework). We provide a copy of the safeguards on request.

Beyond that we only disclose data where we are legally obliged to do so.

We store personal data only for as long as the respective purpose requires:

• Enquiries: until they have been dealt with conclusively. If no contract results, we delete them afterwards unless statutory retention duties apply.
• Business correspondence and contract documents: in line with the statutory retention period of 10 years
• Notification emails at Resend: usually 30 days
• Server logs: 30 days at most
• Analytics data at PostHog: session recordings 30 days at most, event data 12 months at most
• Consent cookie: 6 months

You have the following rights towards us:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on a legitimate interest (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Persons in Switzerland have the corresponding rights under the Swiss Federal Act on Data Protection.

To exercise your rights, a message to office@natter.li is sufficient.

Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority, in particular at your place of residence or with the authority responsible for us:

Datenschutzstelle Fürstentum Liechtenstein (Data Protection Authority)
Kirchstrasse 8, P.O. Box 684, 9490 Vaduz
Phone: +423 236 60 90
Email: info.dss@llv.li
datenschutzstelle.li

In Switzerland the Federal Data Protection and Information Commissioner (FDPIC) is responsible: edoeb.admin.ch

The website is delivered exclusively over an encrypted connection (HTTPS). Enquiries can only be viewed in the administration area by signed-in, authorised persons. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

We update this privacy policy when the website, the services used or the legal situation change. The version published on this page applies.