Controller
Viral Impact GmbH
Münchensteinerstrasse 274
4053 Basel, Switzerland
info@viralimpact.ch
+41 76 575 78 99
This notice describes the processing of personal data when you visit our website or contact us. We follow the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR).
Website and hosting
We host this website with Green in Switzerland. When a page is requested, the hosting infrastructure processes technical information such as IP address, date and time, requested files, browser, operating system and error codes. This information supports delivery, security and troubleshooting.
The hosting provider may keep server logs. The specific retention periods and any additional recipients depend on the hosting configuration and contractual arrangements.
Contact and project enquiries
If you contact us by email, telephone or form, we process your contact details and message. Project enquiries may include your name, company, email address, phone number, service interest, timing, approximate budget and project description. We use this information to reply, prepare a proposal or plan a project.
You are not automatically subscribed to a newsletter. Please do not submit sensitive personal data or confidential material through the contact form. We can agree a suitable channel for sensitive documents.
FormSubmit form service
When you submit the contact form, your browser sends your information over an encrypted connection to FormSubmit (Devro LABS). The service processes your enquiry and technical connection data, checks for spam and forwards the message to our email inbox. The form makes no connection to FormSubmit before submission. We load no FormSubmit widget or reCAPTCHA. Submission works independently of your analytics and video choices.
According to its published documentation, FormSubmit keeps form submissions in an archive for 30 days. Copies in our inbox follow our own retention practices. Processing may take place outside Switzerland. The published privacy policy does not fully identify the countries, subprocessors or transfer safeguards; these details and the contractual requirements must be clarified before this website is published. See the FormSubmit privacy policy and its submission archive documentation.
Google Analytics 4
When Google Analytics is enabled, we load it only after you consent to analytics. Without that consent, we send no analytics requests or cookieless measurement signals to Google.
Google Analytics processes information including page views, technical device and browser details, language, session sources and events such as starting or completing an enquiry. We do not send names, email addresses, phone numbers or message contents as analytics events. URL query parameters are excluded from the page address sent to Analytics.
We use measurement to improve the website. Advertising personalisation, Google Signals and User-ID are not intended for this setup. The intended retention period for user-level and event-level data is two months; aggregate reports may remain available longer. Google may set cookies such as _ga and _ga_….
Google processes data through its international entities and infrastructure, including Ireland and the United States. See Google’s privacy policy. You can withdraw consent through “Privacy preferences” in the footer. We then stop further measurement and remove Analytics cookies accessible to this website. Withdrawal does not automatically erase data already processed.
Vimeo videos
Video previews are served locally. Vimeo players load only after you allow external videos. Without this permission, the play control first opens Privacy preferences. After you allow external videos, we load videos as needed in the visible area. They start automatically, muted and looping, where your browser permits. Only prominent videos play in the phone carousel. Videos outside the visible area or in a hidden browser tab pause. We remove inactive players after a short period. You can pause each video on this website. None of these actions enables Google Analytics.
When the player loads, Vimeo receives technical information such as your IP address, browser details and the referring website. We use the dnt=1 parameter. Essential cookies may still be set and existing Vimeo cookies may be transmitted. Vimeo is a US provider and may process data in the United States and other infrastructure locations. See Vimeo’s privacy notice.
If you turn off external videos in Privacy preferences, we remove players loaded on this page. This does not retrieve information already sent to Vimeo.
Local preferences
We store your privacy choice as vi-consent in your browser’s local storage and ask again after no more than 180 days. We store your selected light or dark theme as vi-theme until you change it or clear browser storage. These entries are not advertising profiles.
If your browser blocks storage, your decisions apply to the current page. You can clear local storage in your browser at any time.
Recipients and international transfers
Personal data may be shared with our hosting, email, form, analytics and video providers where necessary for the relevant purpose. We do not sell your enquiry data.
Transfers to countries without a recognised adequate level of protection require appropriate safeguards or a statutory exception. These may include recognised standard contractual clauses with necessary Swiss adaptations. For US providers, an applicable Swiss–U.S. Data Privacy Framework certification may be relevant. A provider’s general statement does not replace assessment of the actual recipient and transfer.
Retention and security
We retain contact and project information for as long as necessary to handle the enquiry, manage the business relationship and protect legal claims. Statutory retention requirements remain applicable. Storage by the form service and retention in our inbox are separate processes.
We limit access to those who need it and use encrypted HTTPS transmission. No internet transmission can offer absolute security.
Your rights
You may contact us about your personal data and, within the limits of applicable law, request access, correction, release or deletion, or object to processing. Statutory exceptions and retention obligations may limit these rights. You may withdraw consent for future processing.
Email info@viralimpact.ch. We may request reasonable proof of identity to protect your data. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, its additional rights and complaint procedures also apply.
Changes
We update this notice when the website or its services change. Draft dated 29 September 2026.