Privacy Policy

Last updated: October 2026

This English version is provided for information only. In case of doubt, the German version applies.

Controller

The party responsible for processing your personal data on this website is:

Konvekta AG
Letzistrasse 23
9015 St. Gallen
Switzerland

Phone: +41 71 311 16 16
Email: info@konvekta.ch

If you have questions about data protection or wish to exercise your rights, please contact us at the address above or by email at info@konvekta.ch.

About this policy

This privacy policy explains which personal data we process when you visit konvekta.energy, for what purpose, on what legal basis, and with whom we share it. Personal data means any information relating to an identified or identifiable person.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies – for example because we address people in the European Economic Area – we additionally rely on the following legal bases under Art. 6(1) GDPR:

  • your consent (point a), e.g. for analytics and web fonts;
  • performance of a contract or pre-contractual steps (point b), e.g. when you enquire about a project;
  • legal obligations (point c), e.g. statutory retention periods;
  • our legitimate interests (point f), in particular operating the website securely and reliably and answering enquiries.

Visiting the website and server log files

Our website is hosted by Hoststar in data centres in Switzerland. Each time a page is requested, the server automatically records technical information transmitted by your browser:

  • IP address
  • date and time of access
  • page or file requested
  • previously visited page (referrer)
  • browser type, browser version and operating system

We need this data to deliver the website, keep it secure and detect faults or misuse (legitimate interest). We do not combine it with other data and only analyse it when there is a specific reason. Log files are deleted automatically after a short period.

The connection to our website is encrypted using TLS (indicated by “https://” and the padlock icon in your browser), so data you send to us cannot be read by third parties.

Cookies and consent

We use cookies and similar technologies – small files stored by your browser on your device. Strictly necessary cookies are always set; all others only with your consent.

On your first visit, a banner (Borlabs Cookie) asks which services you agree to. You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page. Withdrawal takes effect for the future.

Strictly necessary cookies:

  • borlabs-cookie – stores your cookie preferences; 60 days
  • pll_language – stores your selected language; 1 year
  • kvk_brand – remembers whether the page is shown with the Konvekta or the Convecta logo (e.g. when arriving via convecta.ch); until you close your browser

Cookies set with your consent (statistics):

  • _ga, _ga_* – Google Analytics, distinguishes visitors and sessions; up to 2 years

You can also delete or block cookies in your browser settings. Some features may then not be available.

Google Tag Manager and Google Analytics

With your consent, we use Google Analytics 4 to understand how our website is used and to improve it. The service is integrated via Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent company is Google LLC, USA.

Google Analytics records, for example, pages viewed, time spent, approximate location (country, city), device type, browser and how you arrived at our site. Google Analytics 4 does not store IP addresses. We use Google Consent Mode: without your consent, no analytics data is sent to Google and no analytics cookies are set.

Data may be transferred to Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework; Google’s standard contractual clauses also apply. More information: https://policies.google.com/privacy

The legal basis is your consent, which you can withdraw at any time via the cookie settings.

Adobe Fonts

To display certain typefaces we use Adobe Fonts, provided by Adobe Systems Software Ireland Ltd., 4–6 Riverwalk, Citywest Business Park, Dublin 24, Ireland. The fonts are only loaded once you have consented to the “External media” category. Your browser then transmits your IP address and technical information to Adobe servers, possibly also in the USA (Adobe is certified under the Data Privacy Framework). Without consent, a substitute font is displayed.

More information: https://www.adobe.com/privacy/policies/adobe-fonts.html

Contact form, email and phone

If you contact us via the contact form, we process your name, your company (optional), your email address and your message. The information is sent to us by email and used solely to answer your enquiry and any follow-up questions. The same applies if you contact us by email or phone.

The legal basis is the initiation or performance of a contract, or our legitimate interest in answering enquiries. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

Job vacancies and applications

Our job vacancies are provided by the Abacus recruiting system (Abacus Research AG, Abacus-Platz 1, 9300 Wittenbach, Switzerland). No data about you is sent to Abacus when the vacancies are displayed.

When you click “Apply now”, you are taken to the Abacus application form (app.jobportal.abaservices.ch). Your application documents are stored there on our behalf and are only accessible to the people involved in the selection process. We use them exclusively for the application process. If you are not hired, we delete your documents once the process is complete, unless you have consented to longer retention. The Abacus privacy notice additionally applies on the application page.

Links to social networks

Our website links to our profiles on LinkedIn, Instagram and YouTube. These are simple links, not embedded plugins: no data is transferred to these networks when you visit our website. Only when you follow a link does the respective provider’s privacy policy apply.

Recipients and transfers abroad

We only share personal data where this is necessary for the purposes described. Recipients are:

  • Hoststar, Switzerland – website hosting
  • Google, Ireland/USA – Tag Manager and analytics (only with consent)
  • Adobe, Ireland/USA – web fonts (only with consent)
  • Abacus Research AG, Switzerland – recruiting
  • IT service providers in Switzerland and Germany who support us in operating and maintaining the website

These service providers process data on our behalf and according to our instructions. Recipients in the USA are certified under the Data Privacy Framework or bound by standard contractual clauses. We only disclose data to authorities where we are legally obliged to do so.

Retention

We keep personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. It is then deleted or anonymised.

Your rights

Within the scope of applicable law, you have the right to:

  • obtain information about the personal data we process about you,
  • have inaccurate data corrected,
  • request deletion or restriction of processing,
  • object to processing,
  • receive your data in a common electronic format (data portability),
  • withdraw your consent at any time with effect for the future.

To do so, please contact info@konvekta.ch. We may ask for proof of identity to make sure that information is given to the right person.

You also have the right to lodge a complaint with a data protection supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EEA with the authority in your place of residence or work.

Data security

We protect your data with appropriate technical and organisational measures against loss, misuse and unauthorised access. Please note that unencrypted emails can be read by third parties in transit.

Changes

We update this privacy policy when our website or the legal requirements change. The version published here applies.