Oprivia privacy policy

The controller responsible for processing personal data in connection with this website is:

Brander Consulting, operating under the Oprivia brand

Mellingerstrasse 1a
5608 Stetten
Switzerland

Email: info@oprivia.com

The complete legal information is available in the Legal Notice.

This Privacy Policy applies to the public Oprivia website and to the contact and pilot forms provided on it. Additional privacy information may apply to the protected platform, user accounts or activated functions.

‍

Website delivery and security

When you visit the website, Oprivia and the services used for hosting, delivery, performance, and security process technical data. This may include your IP address, the date, time, and duration of access, pages and files requested, the previously visited page, browser and device information, operating system, and error and security logs. This data is required to provide the website, monitor its stability, correct technical errors, and prevent misuse.

Where fonts are loaded directly from Google Fonts, your browser establishes a connection with Google. This may transmit your IP address and browser and device information. The purpose is to provide a consistent visual presentation of the website. This transmission does not occur if the fonts are hosted locally.

Contact and pilot forms

If you use a contact or pilot form, we process the contact, company, and message data you provide, together with the technical data required to submit the form. This processing enables us to review your inquiry, communicate with you, and prepare a potential pilot, contractual, or business relationship. Form data may be forwarded to the responsible person within Oprivia through the configured email service.

Cookie settings

When you make a selection in the cookie banner, a consent identifier, your selection, the time of your decision, the page URL, browser and device information, and technical connection data may be processed. This processing enables us to store and document your choice and apply it during later visits.

Digital assistant “Nico”

When you use the digital assistant “Nico”, the messages you enter, the page you are viewing, your IP address, browser and device information, a randomly generated identifier, and any contact details you voluntarily provide may be processed. This processing enables the automated answering of general questions about Oprivia, the handling of contact inquiries, expressly requested follow-up contact, continuity of the conversation during a later visit, and the secure operation of the service.

Depending on the active configuration, “Nico” may store the random identifier “widget_load_key” in your browser for up to 30 days. According to the provider, this identifier does not contain your name, contact details, or message content. Further information is available in the Boei Cookie Statement.

Please do not submit passport copies, payment information, or other sensitive personal data through the public chat.

Elfsight widgets

Oprivia uses Elfsight widgets to display an invitation to a consultation and selected reviews or references. When these widgets are loaded or used, the data processed may include your IP address, operating system, browser type, the page viewed, and interaction data. Elfsight may also set the “elfsight_viewed_recently” cookie to prevent duplicate view counts. Further information is available in the Elfsight Privacy Policy.

Analytics, maps, and embedded content

Where you have consented through the cookie settings, Google Tag Manager and Google Analytics may be used. The information processed may include page views, interactions, the previously visited page, browser and device information, and approximate location. This processing is used for statistical analysis and to improve the website.

Certain pages may include Google Maps or videos provided by YouTube. When these services are loaded or used, your IP address, browser and device information, the page viewed, and interaction data may be transmitted to Google. Further information and your available choices are provided in the cookie settings and the Google Privacy Policy.

‍

Oprivia uses selected internal and external recipients to operate the website, process inquiries, and provide digital communication functions.

Website, forms, and technical delivery

Webflow, Inc. is used to provide the website and, where configured, process form submissions. Webflow may process technical access data, website content, and information submitted through the website. Further information is available in the Webflow Privacy Policy.

Website Speedy and the CDN infrastructure used by that service are used to improve loading times and technical delivery. Technical requests, IP addresses, browser information, and information about requested files may be processed. Further information is available in the Website Speedy Privacy Policy.

Consent management

Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, is used for cookie and consent management. The service processes the data required to store and document your selection. Further information is available in the Usercentrics legal documents.

Google services

Oprivia may use Google Fonts, Google Maps, YouTube, Google Tag Manager, and Google Analytics. Depending on the service and your choices in the cookie settings, technical access data, usage and interaction data, and device information may be transmitted to Google. Google may also process data in the United States or through an international infrastructure. Further information is available in the Google Privacy Policy.

Elfsight

Widgets provided by Elfsight, SL, C. de la Constitució 17, AD700 Escaldes-Engordany, Andorra, are used for the consultation popup and to display selected reviews or references. Elfsight may process technical access and interaction data when these widgets are loaded. Further information is available in the Elfsight Privacy Policy.

Digital assistant “Nico”

Oprivia uses the Boei service provided by Ruby Foundry B.V., Mulderstraat 35, 3581 GP Utrecht, the Netherlands, for the digital assistant “Nico”. Boei processes messages entered by users, technical connection data, the page viewed, a random identifier, and contact details provided voluntarily in order to provide the assistant and handle inquiries. Further information is available in the Boei Privacy Statement.

According to Boei’s current subprocessor list, the service uses the following companies and infrastructure in particular:

• Hetzner Online GmbH for the application, primary database, and backups in Nuremberg, Germany;
• Weaviate B.V. for the knowledge and vector database, with processing in Frankfurt, Germany;
• Amazon Web Services EMEA SARL for static assets stored in Ireland;
• Mailgun Technologies, Inc. through an EU endpoint, where email notifications or chat transcripts are enabled;
• Firecrawl to import publicly available website content where this function is used, with processing in the United States;
• Cloudflare, Inc. for CDN, DNS, security, and protection functions through a global network.

To generate responses, Boei uses the AI language model provider selected in Oprivia’s customer configuration. Boei’s subprocessor list identifies Mistral AI SAS in France and, depending on the customer configuration, OpenAI, Anthropic, and Google in the United States. Not every model provider listed by Boei processes data from the Oprivia assistant. Data is transmitted only to the provider used in the active configuration. The current information is available in the Boei subprocessor list.

In its published Data Processing Agreement, Boei undertakes not to use chat and interaction data to train its own models and to use model providers under corresponding business or API terms. Authorized Boei personnel may process data where required for support, troubleshooting, quality assurance, or technical optimization of the configuration.

Email communication and internal recipients

Contact and form data may be transmitted through Oprivia’s configured email services to the responsible persons within Oprivia. Access is limited to persons who require the data to process the relevant inquiry or prepare and manage a business relationship.

International processing

Depending on the service used, personal data may be processed in Switzerland, the European Economic Area, the United States, Andorra, or through a global technical infrastructure. The use of servers in the European Economic Area does not mean that every supporting network, security, or crawling service is provided exclusively within that area.

Where service providers act as processors, they process personal data in accordance with documented instructions and within the scope of their contractual responsibilities. Where a provider determines the purposes or means of an individual processing activity independently, its own privacy notice also applies.

Where personal data is transferred to a country that is not recognized as providing an adequate level of data protection, Oprivia relies on the safeguards prescribed by applicable law. These may include recognized standard contractual clauses, an applicable adequacy mechanism, or other appropriate safeguards.

‍

Personal data is retained only for as long as required for the relevant processing purpose, communication, documentation of an inquiry or compliance with legal obligations. Once the purpose no longer applies, the data is deleted or anonymized unless statutory retention obligations or overriding legitimate interests prevent this.

Form and communication data is generally retained for as long as necessary to process and appropriately follow up the inquiry. Data that becomes part of a business or contractual relationship may be retained for longer in accordance with the applicable documentation and retention obligations.

Oprivia and the service providers used take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or misuse. These measures are designed with regard to the processing purpose, the risk and the relevant state of the art.

‍

You may request information as to whether and which personal data concerning you is being processed. You may request the correction of inaccurate or incomplete information and, where the statutory requirements are met, request the deletion or restriction of processing.

Where applicable, you may also request the disclosure or transfer of certain personal data, object to processing or withdraw consent previously given with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, we may request appropriate proof of your identity. This helps protect personal data against unauthorized disclosure or alteration.

You also have the option of contacting the Swiss Federal Data Protection and Information Commissioner.

No solely automated individual decisions are made via the public website or the forms provided on it that have legal or similarly significant effects on you. Additional functions of the protected platform will be described in separate privacy information where required.

Über die öffentliche Webseite und die dortigen Formulare werden keine ausschliesslich automatisierten Einzelentscheidungen getroffen, die für Sie rechtliche oder vergleichbar erhebliche Auswirkungen haben. Ergänzende Funktionen der geschützten Plattform werden bei Bedarf in gesonderten Datenschutzinformationen beschrieben.

‍

This Privacy Policy may be amended if the website, the services used or the legal requirements change. The version published on this page is authoritative.

For questions about the processing of your personal data or the exercise of your rights, please contact:

Brander Consulting
operating under the Oprivia brand
Email: info@oprivia.com

Where possible, please use the subject line “Privacy request”.

‍

‍