Web Privacy Policy

1. Who is responsible

This policy explains how Ombori AG processes personal data when you visit www.ombori.com (the “Site”) or contact us through it.

The controller is Ombori AG, Churerstrasse 80, 8808 Pfäffikon SZ, Switzerland, UID CHE-495.804.105, registered in the commercial register of the Canton of Schwyz (“Ombori”, “we”, “us”). Contact for privacy questions: hello@ombori.com.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to our processing, the EU General Data Protection Regulation (GDPR).

This policy covers the Site only. If you use the PhyStack platform or PhyGrid products, the privacy policies of those companies apply (phystack.com/legal/privacy and phygrid.com/legal/privacy).

2. What we process and why

a) Visiting the Site (server and delivery logs). When you open the Site, your browser automatically sends technical data such as your IP address, date and time of access, the page requested, referrer and browser/device information. The Site is hosted and delivered by Cloudflare, Inc. (Cloudflare Pages and content delivery network), which processes this data on our behalf to deliver the Site, keep it secure and protect it against attacks. Purpose: operating and securing the Site. Legal basis under the GDPR: our legitimate interest (Art. 6(1)(f)).

b) Analytics (only with your consent). If you click “Accept” in the cookie banner, we use Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited and Google LLC, to understand how the Site is used, for example which pages are visited and for how long. IP addresses are not stored by Google Analytics 4. Until you accept, analytics cookies are not set; Google may still receive limited cookieless signals (such as the fact that a page was loaded) under Google Consent Mode. If you click “Reject”, no analytics cookies are set. Your choice is stored in your browser’s local storage. You can change it at any time by clearing your browser’s site data for ombori.com, after which the banner is shown again. Legal basis under the GDPR: your consent (Art. 6(1)(a)). Analytics data is kept only as long as needed for that purpose and then deleted or anonymised.

c) Embedded videos. Some pages embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com). When you play a video, YouTube (Google) receives your IP address and may set cookies or similar identifiers. Legal basis under the GDPR: our legitimate interest in presenting video content, and your action in starting the video.

d) Contacting us. If you email us, we process your name, email address, the content of your message and any other details you provide, to answer your enquiry and, where relevant, to follow up on a business relationship. Our email is hosted by Google (Google Workspace). Legal basis under the GDPR: steps prior to entering into a contract (Art. 6(1)(b)) or our legitimate interest in responding to enquiries (Art. 6(1)(f)). We will only send you newsletters or marketing emails if you have asked for them or where the law otherwise allows it, and you can opt out at any time.

e) Social media. The Site links to our profiles on LinkedIn, YouTube, X and Facebook. These are plain links; no data is sent to these platforms until you click them. When you visit our profiles, the platform’s own privacy policy applies.

We do not sell personal data, and we do not use the Site for automated decision-making or profiling with legal or similarly significant effects.

3. Who receives your data

We share personal data only with service providers who process it on our behalf under data processing agreements (in particular Cloudflare and Google, as described above), with other companies in the Ombori group where needed to handle your enquiry, and with authorities where we are legally required to.

4. Transfers abroad

We are based in Switzerland. Our service providers may process personal data in other countries, including the European Economic Area and the United States. For transfers to countries without an adequate level of data protection as recognised by the Swiss Federal Council or the European Commission, we rely on recognised safeguards, such as the EU-U.S. and Swiss-U.S. Data Privacy Frameworks where the recipient is certified, or the standard contractual clauses of the European Commission as recognised in Switzerland.

5. How long we keep data

We keep personal data only as long as needed for the purposes above or as required by law. Delivery and security logs are kept by Cloudflare for a limited period in line with its standard settings. Emails are kept only as long as needed to handle the enquiry and any resulting business relationship, or as required by statutory retention obligations, and are then deleted or anonymised.

6. Your rights

Subject to applicable law, you have the right to request access to your personal data, correction, deletion, restriction of processing, and to receive your data in a portable format. You may object to processing based on our legitimate interests, and you may withdraw your consent at any time with effect for the future. To exercise these rights, contact us at hello@ombori.com. We may need to verify your identity.

You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). If you are in the EU or EEA, you may also contact the supervisory authority in your country of residence or work.

7. Security

We use appropriate technical and organisational measures to protect personal data, in line with our information security management system. No transmission over the internet is completely secure; please do not send sensitive information by email unless we have agreed a secure channel.

8. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with its “Last updated” date.

9. Contact

Ombori AG Churerstrasse 80 8808 Pfäffikon SZ Switzerland hello@ombori.com +41 55 577 00 10