Privacy Policy
This Privacy Policy explains how Enblex GmbH processes personal data in connection with the website enblex.com and its business activities.
1. Controller
Enblex GmbH
Neudorfstrasse 7
6312 Steinhausen
Switzerland
Email: info@enblex.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the European Union General Data Protection Regulation (GDPR) applies to particular processing activities, we also comply with its requirements. The GDPR legal bases mentioned below apply only in those circumstances.
2. Website operation, cookies and analytics
Our website is hosted by Infomaniak Network SA in Switzerland. When the website is accessed, technical access data such as IP address, time of access, requested pages and browser and device information are processed. This is necessary to operate and secure the website and troubleshoot errors. These data are retained only as long as necessary for those purposes.
We use strictly necessary cookies to operate the website and save your privacy preferences. Optional analytics cookies are used only with your consent.
We use Google Analytics and Plausible Analytics to assess how our website is used. Google Analytics processes information such as page views, website usage, browser and device characteristics, and may use cookies and online identifiers. The provider is Google Ireland Limited (Ireland). We use Google Tag Manager to manage Google services technically. When Google services are loaded, technical data, including IP addresses, may be transmitted to Google.
Google Analytics and the associated Google tags are activated only after you have given consent. You can withdraw your consent at any time through the website's cookie or privacy settings. Where the GDPR applies, the legal basis for Google Analytics is Article 6(1)(a) GDPR (consent).
We use Plausible Analytics in its standard, cookieless configuration to obtain aggregated visitor statistics. The provider is Plausible Insights OÜ (Estonia), and analytics data are processed in the European Union. In this configuration, Plausible does not place analytics cookies or create persistent personal visitor profiles. Where the GDPR applies, we rely on our legitimate interest in improving the website under Article 6(1)(f) GDPR for this privacy-friendly statistical analysis.
Where the GDPR applies, processing technically necessary data to operate and secure the website is based on Article 6(1)(f) GDPR.
3. Contact and business relationships
When you contact us by email or telephone, or deal with us in a business context, we process information such as names, job titles, companies, business contact details, correspondence, and information relating to quotations, contracts, projects and invoicing. We use these data to respond to enquiries, establish and perform contracts, issue invoices and maintain business relationships.
We may also obtain business contact details from publicly available sources, particularly corporate websites and LinkedIn. We may use such details for individual, legally permissible outreach to prospective business customers and for further relevant business communications.
Where the GDPR applies, the legal bases, depending on the circumstances, are Article 6(1)(b) GDPR (contract or pre-contractual steps involving the data subject), Article 6(1)(c) (legal obligations), or Article 6(1)(f) (legitimate interests in business operations and maintaining business contacts).
4. Recipients and international transfers
Where necessary, we share personal data with IT and cloud service providers, project partners, subcontractors, accounting and legal advisers, banks and public authorities. These include Infomaniak (hosting in Switzerland), Microsoft 365 (email, office applications and data storage), and Google and Plausible (website analytics). Data may also be processed on local systems.
Personal data are processed primarily in Switzerland and the European Economic Area (EEA). In connection with Microsoft and Google, personal data may also be processed in or accessed from the United States.
Microsoft Corporation and Google LLC are certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework. Transfers to appropriately certified US recipients may rely on the applicable adequacy arrangements. Where required for particular transfers, recognised standard contractual clauses may also apply, either additionally or as an alternative. Transfers to any other country without an adequate level of protection require appropriate safeguards as provided by law.
5. Retention
We retain personal data for as long as necessary for the purposes described, to protect legitimate interests recognised by law, or to meet legal obligations. Business and accounting records subject to statutory retention obligations are generally kept for ten years. Other data are deleted or anonymised once there is no longer a valid reason to retain them. We periodically assess whether business contact data remain relevant.
6. Your rights
Subject to applicable law, you may request access to, rectification or erasure of your personal data, and, where provided by law, disclosure or portability of those data. Where the GDPR applies, you may also have further rights, including restriction of processing and withdrawal of consent with future effect, subject to the applicable legal conditions.
To exercise your rights, contact info@enblex.com. You may also contact the competent data protection supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC) and, where applicable, a competent EEA supervisory authority.
Right to object under Article 21 GDPR
Where the GDPR applies, you may object at any time to the processing of your personal data based on legitimate interests for reasons relating to your particular situation. You may object to the use of your personal data for direct marketing at any time without giving reasons; we will then stop using your data for direct marketing. Please email info@enblex.com.
7. Changes
We update this Privacy Policy when our data processing activities or legal requirements change. The version published on this website is the current version.
Last updated: October 2026