Privacy policy

AlpenAgent – Tymofii Bondar, Künzistegstrasse 54, 3714 Frutigen, Schweiz. Privacy requests: [email protected].

This policy covers alpenagent.ch, enquiries and the website chatbot. We process only data needed for a stated purpose, protect it appropriately and retain it no longer than necessary. Customer projects are governed additionally by project-specific roles and terms.

When the site is used, IP address, time, requested URL, browser/device data and security events may be processed in server and CDN logs. Website and chatbot infrastructure is operated partly in Switzerland; Cloudflare may process delivery and security data through its international network. Purposes are secure delivery, troubleshooting and abuse prevention.

We may process name, company, email, telephone, message, language and technical submission evidence. Cloudflare Turnstile, Resend and Zoho support this process. Enquiries that do not become a customer relationship are normally deleted after 24 months unless legal retention or evidence needs apply.

The chatbot is an AI system and may be wrong. Do not enter sensitive, confidential or third-party personal data. Message, session ID, page, language and browser data are processed. Content is sent to the OpenAI API to generate a response; API data is not used to train OpenAI models by default, although limited abuse-monitoring processing may occur. Chat history on our Swiss VPS is normally deleted automatically after 30 days. Contact us for binding information.

Necessary storage supports language, design, security, chat sessions and your consent choice. Google Analytics and external Calendly content load only after voluntary consent. You can reject, choose separately and change the choice at any time through “Privacy settings” in the footer.

With consent, Google Analytics measures reach and Calendly supports bookings. Usage, device, IP and interaction data may be transferred abroad. We use appropriate safeguards where required. Consent may be withdrawn for the future at any time.

Only authorised persons and processors receive data. They may include Infomaniak, Cloudflare, Resend, Zoho, Google, Calendly and OpenAI. International disclosures rely on adequacy, recognised standard clauses or another lawful basis.

Risk-appropriate measures include TLS, access controls, anti-abuse controls and security logging. Absolute security cannot be guaranteed. Business records are generally retained for up to ten years where legally required; other data is deleted or anonymised when no longer needed.

Subject to applicable law, individuals may request access, correction, delivery or portability, deletion, restriction or objection, and withdraw consent. Identity verification may be required. Complaints may be addressed to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Providers, storage, recording, retention, notices and human escalation are defined per customer project. Calls are recorded only where agreed, lawful and appropriately disclosed. This website makes no solely automated decisions with legal or similarly significant effects.

This policy may change when services or law change. Last updated: 28 July 2026.