Privacy Policy

1. Data Controller

The entity responsible for processing personal data in connection with this website is:

estcontrolling GmbH

Hardstrasse 73, 5430 Wettingen, Switzerland

Email: info@estcontrolling.ch · Phone: +41 79 171 30 00

If you have any questions regarding data protection or exercising your rights, please contact us at this address.

2. Principles and Scope

We process personal data in accordance with the Swiss Data Protection Act (DSG) and—to the extent that our services apply to individuals in the European Economic Area—in accordance with the EU General Data Protection Regulation (GDPR). We collect only the data we need to operate the website, respond to your inquiries, and improve our services.

This statement applies to the website www.estcontrolling.ch. The processing of client and accounting data in connection with our fiduciary and controlling services is also governed by the contractual agreements and our Terms and Conditions.

3. Hosting and Server Log Files

The website is operated by Vercel Inc. (USA). When you visit the website, technical data is automatically processed: IP address, date and time of access, page viewed, referrer URL, and browser and device type. This data is technically necessary for the delivery of the website and is used for operational security, error analysis, and the prevention of misuse. This data is not combined with other data sources.

4. Contact Form and Email Contact

Through the contact form, we collect your first name, last name, email address, and message, as well as—on a voluntary basis—your phone number and subject line. This information is used exclusively to process your inquiry and, if applicable, to initiate a contract.

The data is sent via email through the service provider Resend (Resend, Inc., USA) to our mailbox; the delivery itself takes place via servers located in the European Union (Ireland). The data is not stored in a website database. To protect against automated abuse, we check the number of requests per IP address; this check is performed briefly in RAM and is not permanently stored.

If you contact us directly by email or phone, we will process your information for the same purpose.

5. Schedule an appointment at Calendly

The Calendly LLC (USA) appointment scheduler is embedded on our contact page. When the widget loads, a connection is established to servers at Calendly; your IP address and browser data are transmitted during this process, and cookies from Calendly may be set. When you book an appointment, Calendly processes the information you enter on our behalf—name, email address, phone number (the initial consultation takes the form of a callback), and any additional details. For more information: Calendly Privacy Policy.

6. Content Management System

The content on this website is managed using Sanity (Sanity AS / Sanity Inc.). When a page is viewed, text and images are delivered via the Sanity content network, which involves the collection of technical connection data. No visitor profiles are created in the process.

7. Cookies and Local Storage

This website uses technically necessary cookies for its operation and—only with your express consent—statistical cookies. The following cookies are used:

• _vercel_* — Operation and load balancing of the hosting infrastructure (technically necessary), Duration: Session
• cookie-consent-v1 — stores your cookie preference in your browser's local storage (technically necessary); duration: until you clear your browser's cache
• _ga, _ga_* — Google Analytics 4, only with consent, duration: up to 2 years

You can change or withdraw your consent at any time by clicking the “Cookie Settings” link in the footer. You can also block or delete cookies in your browser; the website will generally remain usable.

8. Web Analytics with Google Analytics 4

This website uses—solely with your consent—Google Analytics 4, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). The data collected includes, among other things, truncated IP addresses, pages visited, time spent on the site, and device and browser information. This data may be transferred to Google’s servers, including those in the United States.

We use Google Consent Mode v2: Unless you have given your consent, no analytics cookies will be set and no personal data will be transmitted to Google. For more information, please see the Google's Privacy Policy.

9. Performance Measurement

We usVercel's Speed Insights to measure page load speed. This collects anonymous technical metrics on page performance. No cookies are set, and no visitor profiles are created for this purpose.

10. Disclosure to Third Parties and Transfer Abroad

We share personal data with service providers who assist us in operating this website and process the data on our behalf: Vercel (hosting), Sanity (content management), Resend (email distribution, delivered via EU servers), Calendly (appointment scheduling), and Google (web analytics, only with consent).

In doing so, data may be transferred to the United States. We base these transfers on recognized safeguards—in particular, the European Commission’s Standard Contractual Clauses with the Swiss Supplement, as well as, where providers are certified, the Swiss-U.S. Data Privacy Framework. We do not share personal data for advertising purposes or sell data.

11. Retention and Deletion

We retain personal data for as long as necessary for the respective processing purpose or as required by statutory retention obligations—namely, the ten-year retention requirement under Art. 958f of the Swiss Code of Obligations (OR) for business-related documents. After that, the data is deleted or anonymized.

12. Data Security

We take appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access. These measures include encrypted transmission of all content via HTTPS, restricted access rights, and regularly updated systems. However, complete security during data transmission over the Internet cannot be guaranteed.

13. Your Rights

Under applicable law, you have the following rights in particular:

• Information About the Personal Data We Process
• Correction of Inaccurate Data
• Erasure or Restriction of Processing
• Objection to Processing
• Disclosure or transfer of your data in a commonly used format
• Withdrawal of Consent with Future Effect

To exercise this right, simply send a message to info@estcontrolling.ch. We may require appropriate identification for identity verification.

You also have the right to file a complaint: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and in the European Economic Area with the data protection supervisory authority responsible for you.

14. Changes to This Privacy Policy

We may update this Privacy Policy at any time, particularly if our website, the services we use, or legal requirements change. The version published on this page at any given time is the authoritative one.

As of August 2026