Prospect Grid

Legal

Privacy Policy

Last updated: 4 September 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Prospect Grid GmbH
Birmensdorferstrasse 252
8055 Zürich
Switzerland

Email: info@prospectgrid.ch
Phone: +41 76 478 85 88

This policy explains what personal data we process when you visit prospectgrid.ch, why we process it, who receives it and what rights you have. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, for visitors in the European Economic Area, the General Data Protection Regulation (GDPR).

2. Contact Form

When you use the contact form we process the data you enter:

  • Name
  • Email address
  • Your message
  • Date and time of submission

We use this data solely to answer your enquiry. It is stored in Google Cloud Firestore in the region europe-west4 (Netherlands). To notify us of your message, an email containing your name, email address and message is sent to us through the email service Resend (see section 8); our mailbox and our email correspondence with you run on Google Workspace. Enquiries are retained while they are open and deleted no later than 3 years after receipt. Enquiries that lead to a business relationship are kept as part of the records of that relationship.

Legal basis (GDPR): Art. 6(1)(b), steps prior to entering into a contract at your request, and Art. 6(1)(f), our legitimate interest in answering enquiries.

3. Newsletter

If you sign up for our newsletter we process:

  • Email address
  • Subscription status (pending, confirmed, unsubscribed)
  • A random confirmation token
  • Date and time of sign-up, confirmation and unsubscription

We use the double opt-in procedure: after signing up you receive an email with a confirmation link, and we only send you the newsletter once you have clicked it. The newsletter informs you about Prospect Grid product updates. Sign-ups that are never confirmed do not receive any newsletter. The data is stored in Google Cloud Firestore in the region europe-west4 (Netherlands); the emails are sent through Resend (see section 8).

You can withdraw your consent at any time using the unsubscribe link contained in every email we send you (it opens your personal page at prospectgrid.ch/newsletter/manage) or by emailing us at info@prospectgrid.ch. After you unsubscribe we keep your email address marked as unsubscribed so that we do not email you again; you can ask us to delete the entry entirely at any time.

Legal basis (GDPR): Art. 6(1)(a), your consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Protection Against Abuse

To protect the contact form and the newsletter sign-up against automated abuse, we limit the number of submissions per IP address. When you submit a form, your IP address is stored together with a counter for a window of 10 minutes; the entry is then deleted automatically (Google Cloud Firestore removes expired entries, typically within 24 hours). Both forms also contain a hidden field that regular visitors never see; submissions that fill it in are discarded without being stored.

Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in preventing abuse of our forms.

5. Analytics

We use Google Analytics 4 to understand how visitors use this website. Analytics is only activated if you click "Accept analytics" in the banner at the bottom of the page. Until then, no analytics code is loaded and nothing is measured.

If you accept, Google Analytics collects:

  • The pages you view, with date, time and referring page
  • Information about your browser, operating system and screen size
  • Your approximate location (country, region, city), derived from your IP address
  • A random identifier for your browser (Google Analytics client ID) so that repeat visits can be recognised

According to Google, Google Analytics does not log or store the IP addresses of users in Switzerland, the EU or the UK; the IP address is used only to derive the approximate location and is then discarded, and data from these users is collected on servers in the EU, Switzerland or the UK before it is forwarded to the Analytics servers, which may be located in the USA. We have switched off Google Analytics' enhanced measurement (scrolls, clicks, video engagement), Google Signals and advertising features. Google Analytics retains event data for 2 months and user-level data (the data tied to the cookies and identifiers described above) for 14 months; that period starts again each time the same browser returns.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for users in Switzerland and the EEA, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. See Google's Privacy Policy.

You can change or withdraw your decision at any time by clicking "Analytics settings" in the footer of every page, which shows the banner again. If you decline after having accepted, measurement stops immediately.

Legal basis (GDPR): Art. 6(1)(a), your consent. For visitors from Switzerland, the information in this section and the option to decline satisfy Art. 45c of the Swiss Telecommunications Act.

6. Hosting and Server Logs

This website is hosted on Firebase App Hosting, a service of Google (Google Ireland Limited for users in Switzerland and the EEA, Google LLC for the USA, see section 5). The application runs in the region europe-west4 (Netherlands); requests pass through Google's load balancer and are cached in its content delivery network (Cloud CDN), so cached content is answered from the location closest to you.

Each request is recorded in a server log containing your IP address, date and time, the requested URL, the referring page, the HTTP status and your browser and operating system (user agent). We use these logs to operate the website securely and to diagnose faults. They are deleted automatically after 30 days.

Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in operating a secure and reliable website.

7. Cookies and Local Storage

This website stores the following in your browser:

  • pg-analytics-consent(local storage): your decision in the analytics banner, so that we do not ask again. It stays until you clear your browser data or click "Analytics settings".
  • Only after you accept analytics: the Google Analytics cookies _ga and _ga_* (expire after 2 years), used to recognise repeat visits.

No other cookies are set for visitors. The administrative area of the website is used only by our own staff and stores nothing for ordinary visitors.

8. Recipients and Transfers Abroad

We pass personal data on to the following service providers, who process it on our behalf:

  • Google (Google Ireland Limited, Ireland, and Google LLC, USA): hosting, database and analytics as described in sections 2 to 6, and our email (Google Workspace). Website data is stored in the Netherlands; Google LLC may have access from the USA. Guarantee: Google LLC is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.
  • Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA): sending of the contact notification and newsletter emails. Resend processes data in the USA. Guarantee: the EU Standard Contractual Clauses with the modifications for Switzerland, agreed in Resend's Data Processing Addendum.

We do not sell personal data and do not pass it on to anyone else, unless we are legally obliged to.

9. Retention

  • Contact enquiries: while the enquiry is open, at most 3 years; enquiries that led to a business relationship as part of those records
  • Newsletter: until you unsubscribe; afterwards your address stays marked as unsubscribed until you ask us to delete it
  • IP addresses for abuse protection: 10 minutes, deleted automatically afterwards
  • Server logs: 30 days
  • Google Analytics: event data 2 months, user-level data 14 months, restarting with each new visit

10. Your Rights

Under the FADP and, where applicable, the GDPR, you have the right to:

  • Obtain information about the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to processing
  • Receive the data you provided in a portable format
  • Withdraw a consent you have given, with effect for the future

To exercise these rights, email info@prospectgrid.ch. You also have the right to complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA the supervisory authority of your country of residence.

11. Changes to This Policy

We update this policy when our processing changes. The date at the top of this page shows the most recent revision.