Privacy Policy
Last updated: 9 November 2026
This privacy policy explains how Kayma GmbH processes personal data when you visit kayma.swiss, use our contact form or write to us by email. It is based on the revised Swiss Federal Act on Data Protection (FADP) and, where it applies to us, the EU General Data Protection Regulation (GDPR).
1. Controller
Kayma GmbH, Grossächerstrasse 70, 8966 Oberwil-Lieli, Switzerland. Email: info@kayma.swiss. For any question about your data or to exercise your rights, please write to this address.
2. Visiting our website: hosting and server logs
Our website is hosted by Netlify, Inc., San Francisco, USA. When you open a page, your browser automatically sends technical data, which Netlify processes in server logs: your IP address, the date and time of access, the page requested, the referring page, and your browser and operating system. We need this data to deliver the website securely and reliably and to detect misuse. Netlify keeps these logs for a limited period under its own retention rules.
Fonts and images on this site are hosted together with the website. We do not load fonts from Google Fonts or other external font services, and we do not embed external images.
We do not use analytics, tracking or advertising tools, and we do not create user profiles.
3. Contact form
When you send us a message through the contact form, we process your name, your email address, your company (optional) and your message, so that we can answer your enquiry. The form is provided by Netlify Forms: Netlify stores the submission and forwards a notification to our business mailbox.
To protect the form against spam and automated abuse, we use three measures:
- a hidden field (honeypot) that people do not see and only bots fill in. It does not collect any personal data from you;
- automatic spam filtering of submissions by Netlify, which uses the Akismet service (Automattic Inc., USA) and may analyse the content of the submission and technical data such as your IP address;
- Google reCAPTCHA, provided by Google Ireland Limited, Dublin, Ireland, and Google LLC, USA. reCAPTCHA checks whether the form is filled in by a person. For this, Google processes your IP address, information about your browser and device, and how you interact with the page, and it may set or read cookies (see section 6). Google's privacy policy applies: https://policies.google.com/privacy.
4. Email
If you write to info@kayma.swiss, or we reply to your form submission, we process your email address, the content of your message and any further details you share. Our email runs on Google Workspace, a service of Google Cloud EMEA Limited, Ireland.
5. Purposes and legal basis
We process personal data only for the purposes described above: to operate the website securely, to answer enquiries and, where an enquiry leads to an engagement, to prepare and carry out that engagement.
Where the GDPR applies, our legal bases are: steps prior to entering into a contract and the performance of a contract (Art. 6 para. 1 lit. b GDPR), our legitimate interest in a secure website, protection against spam and answering enquiries (Art. 6 para. 1 lit. f GDPR), and legal obligations (Art. 6 para. 1 lit. c GDPR).
6. Cookies
Our own website does not set cookies, and Netlify does not set tracking cookies for us. On the page with the contact form, Google reCAPTCHA may set or read cookies (for example the cookie _GRECAPTCHA) to distinguish people from bots. These cookies serve security purposes only. You can block or delete cookies in your browser settings. If you block them, the contact form may not work; you can always write to us directly at info@kayma.swiss instead.
7. Service providers and transfers abroad
We use the following service providers, who process personal data on our behalf or as independent controllers: Netlify, Inc. (hosting and contact form, USA), Automattic Inc. (spam filtering through Netlify, USA) and Google (reCAPTCHA and Google Workspace email, Ireland and USA).
Some of this data is therefore processed in the USA and possibly in other countries. Transfers to the USA rely on the Swiss-U.S. Data Privacy Framework, under which Switzerland recognises an adequate level of data protection for certified companies, and on the EU-U.S. Data Privacy Framework where the GDPR applies. Netlify, Inc. and Google LLC are certified under these frameworks. Where a provider is not certified, the transfer relies on the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.
8. Retention
We keep enquiries and our correspondence for as long as we need them to deal with your request. If an enquiry leads to a business relationship, the related correspondence becomes part of our business records, which Swiss law requires us to keep for ten years (Art. 958f of the Swiss Code of Obligations). Other enquiries we delete within 12 months after the last contact. We delete form submissions stored at Netlify after we have moved them to our mailbox.
9. Your rights
Within the limits of the applicable law, you have the right to:
- ask whether we process data about you and receive a copy of it (right of access);
- have incorrect data corrected;
- have your data deleted or its processing restricted;
- object to processing based on our legitimate interests;
- receive data you provided to us in a common electronic format, or have it sent to another controller (data portability);
- withdraw any consent you have given, with effect for the future.
To exercise these rights, write to info@kayma.swiss. We may ask you to confirm your identity. You can also complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch); in the EU or EEA, the authority in your country of residence.
10. Security
We use appropriate technical and organisational measures to protect your data. This website is delivered only over an encrypted connection (HTTPS).
11. Changes
We may update this privacy policy when our website or the services we use change. The version published on this page applies.