Privacy

Privacy Notice

As of: 12 Dec 2025

Controller

rici.ch – IT Support
Email: support@rici.ch
Website: rici.ch

Applicable law

We process personal data in accordance with Swiss data protection law (DSG/nDSG). Where the GDPR applies, we also rely on the legal bases under Art. 6 GDPR.

Categories of data

  • Master data: Name, address, ZIP/city, email address, phone number (Switzerland).
  • Service data: Selected service, preferred date/time, message, service location.
  • Confirmation data: Email confirmation token and status for service requests.
  • Geodata: Distance calculation (km) within Switzerland based on customer ZIP and/or coordinates. Primary source: plz (Swiss ZIP centroid/CSV); geocode (Nominatim/OSM) only where required. Stored: ZIP/lat/lon.
  • Technical data: IP address, user agent, timestamps, session ID, rate limiting counters (abuse/attack prevention).
  • Cookies/local storage: Session cookies (essential) and local UI settings (e.g. contrast/motion preferences).
  • Contract / pre-contract (GDPR Art. 6(1)(b), where applicable): Handling service requests, scheduling appointments, communication.
  • Legitimate interests (GDPR Art. 6(1)(f), where applicable): Matching/assignment (e.g. based on distance/availability), ensuring system security, preventing abuse and attacks, operating and troubleshooting the service.
  • Consent (GDPR Art. 6(1)(a), where applicable): Where required, e.g. for optional information. Consent can be withdrawn at any time with effect for the future.
  • Legal obligations (GDPR Art. 6(1)(c), where applicable): Compliance with statutory retention and documentation duties.

Recipients & processors

Depending on the specific process, data may be shared with:

  • Hosting / IT service providers (server operation, database, security, backups).
  • SMTP / email providers (sending confirmation and system emails).
  • OpenStreetMap / Nominatim (only where required for distance calculation; only the necessary ZIP/city or address components).
  • Technicians / service providers (where assignment or cooperation requires it; only the data necessary for providing the service).

Transfers to third countries

Where service providers outside Switzerland or the EU/EEA are used, transfers take place only based on an appropriate safeguard (e.g. adequacy decision, standard contractual clauses) or based on your explicit consent.

Retention periods

  • Service / request data: Generally until the request or assignment is completed, and afterwards in line with statutory retention periods (e.g. tax-related obligations).
  • Confirmation tokens: Typically around 72 hours, then deletion or anonymisation.
  • Logs: Server and security logs are regularly rotated and kept only as long as necessary for security and diagnostics.

Cookies & local storage

rici.ch uses technically necessary session cookies (e.g. for CSRF protection, session IDs) and local browser settings (e.g. contrast or motion preferences). No third-party tracking cookies (such as advertising network cookies) are set.

Server logs

When you access the website, the following data is typically logged: IP address, date and time of access, requested URL, referrer (if available), user agent, HTTP status code. This processing helps to ensure technical operation, defend against attacks, and troubleshoot errors.

Security

  • TLS/HTTPS encryption of data in transit.
  • Use of security headers (e.g. CSP, HSTS, X-Frame-Options).
  • CSRF protection, prepared SQL statements and other technical safeguards.
  • Access limited on a need-to-know basis.

Your rights

Under applicable data protection law, you in particular have the following rights:

  • Right of access to your personal data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure, where no retention obligations prevent this.
  • Right to restriction of processing under certain conditions.
  • Right to data portability (where applicable).
  • Right to object to certain processing (especially where processing is based on legitimate interests).
  • Right to withdraw any consent given, with effect for the future.

You also have the right to lodge a complaint with a competent supervisory authority (e.g. the FDPIC in Switzerland).

Changes to this notice

We may update this privacy notice from time to time, for example if we introduce new functions or services. The version published on this page is the one currently in force.

Contact

For privacy-related requests, please contact:
Email: support@rici.ch

Note: Distance calculation uses geocoding services (e.g. Nominatim/OSM) and/or a Swiss ZIP code CSV. Only the data necessary for this purpose is transmitted.

Contents

German version: Datenschutzerklärung