Privacy Policy

Last updated: February 11, 2026

Data Controller

nr8 IT GmbH
Eggstrasse 49
CH-8102 Oberengstringen
Switzerland

Introduction

At nr8 IT, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nr8.ch. Please read this policy carefully to understand our practices regarding your personal data.

This policy complies with the Swiss Federal Act on Data Protection (revDSG) and other applicable Swiss laws.

Data We Collect

Information You Provide

When you contact us through our website or email, we may collect:

Name and contact information (email address, phone number)
Company name and professional details
Your message or inquiry content

Automatically Collected Data

When you visit our website, certain information is automatically collected:

IP address
Browser type and version
Device information
Pages visited and time spent
Referral source

Purpose of Data Processing

We process your personal data for the following purposes:

Communication: To respond to your inquiries and provide customer support
Service delivery: To provide the services you request
Website operation: To maintain, improve, and secure our website
Analytics: To understand how visitors use our website and improve user experience
Legal compliance: To comply with applicable laws and regulations

Third-Party Services

We use the following third-party services that may process your data:

Cloudflare (USA)

Our website is hosted and delivered through Cloudflare, which provides:

Content Delivery Network (CDN)
DDoS protection and security services
Web analytics

Cloudflare may collect and process visitor data including IP addresses, system configuration information, and other information about traffic to and from our website. Cloudflare is certified under the EU-US Data Privacy Framework.

More information: Cloudflare Privacy Policy

Hygraph (Germany)

Our website content is managed through Hygraph (formerly GraphCMS), a content management system hosted in Germany (EU). Hygraph processes content data in accordance with GDPR requirements.

More information: Hygraph Privacy Policy

Cookies and Tracking

Our website uses technical cookies necessary for the operation of the website. These cookies are provided by Cloudflare and include:

__cf_bm: Security and bot management (duration: 30 minutes)
__cflb: Load balancing (session)

These technical cookies are essential for the website to function properly and do not require your consent under Swiss law. We do not use marketing or advertising cookies.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact inquiries: 2 years or until the inquiry is resolved
Server logs: Maximum 90 days
Analytics data: Aggregated and anonymized after 90 days

After the retention period, personal data is securely deleted or anonymized.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data transmission
Secure hosting infrastructure
Regular security updates and monitoring
Access controls and authentication

Your Rights

Under Swiss data protection law, you have the following rights:

Right to access: Request information about the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
Right to restriction: Request restriction of processing under certain circumstances
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing of your personal data
Right to lodge a complaint: File a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC)

To exercise any of these rights, please contact us at contact@nr8.ch.

International Data Transfers

Some of our service providers (such as Cloudflare) are located in the United States. When we transfer data outside of Switzerland or the EU, we ensure appropriate safeguards are in place, such as:

EU-US Data Privacy Framework certification
Standard contractual clauses
Adequacy decisions

Children's Privacy

Our website is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

nr8 IT GmbH
Eggstrasse 49
CH-8102 Oberengstringen
Email: hello@nr8.ch