Privacy
Last updated: September 2026
Protecting your data matters to us. This statement explains in plain language which data is collected when you visit this website, what we use it for and what rights you have. It follows the Swiss Data Protection Act (revFADP).
1. Controller
The party responsible for processing personal data on this website is:
Click & Flow, Ileana Dolores Bidetti-López Ordóñez, Suurstoffi 31, 6343 Rotkreuz, Switzerland.
For any question about data protection, write to us at hello@clickandflow.ch.
2. What we do not do
So you don't have to read between the lines — on this website there are:
- no advertising or tracking cookies
- no analytics services such as Google Analytics, no Meta or LinkedIn pixels
- no sharing or selling of your data to third parties for advertising
- no profiling and no automated individual decision-making
3. When you visit our website
As with any website, our hosting provider records technical details when a page is opened: IP address, date and time, the page requested, browser type and operating system.
We need these server logs to run the website safely and reliably and to detect faults or attacks. They are deleted automatically after a short period and are not linked to you as a person.
The website is hosted with Cloudflare, Inc. (USA). Data may therefore also be processed in the USA; Cloudflare is contractually bound to an adequate level of protection (standard contractual clauses).
4. Cookies and browser storage
We set no cookies. The only exception is a small entry in your browser's session storage called «cf-mia-seen». It merely remembers that you have already been shown the greeting from our assistant Mia, so that it does not reappear at every click.
This entry contains no personal data, never leaves your device and is deleted as soon as you close the browser tab.
5. Fonts and external content
The fonts we use are stored on our own server and loaded from our own domain. Visiting the website therefore establishes no connection to Google Fonts or any other third-party server, and your IP address is not passed on.
We embed no external maps, video players or social media elements.
6. Mia, our chat assistant
Mia answers the most common questions with pre-written answers. The chat runs entirely in your browser: your selection is not sent to us, not stored and not evaluated by any artificial intelligence.
Only if you deliberately click «Write an email» does your email programme open, and you decide yourself what to send us.
Should we later extend Mia with a genuine AI function, we will update this statement beforehand.
7. Digital Opportunity Check
The answers you select in the check stay in your browser at first. Only when you enter your name and email address at the end and click «Send the result» are those details transmitted to us together with your answers.
To deliver that message we use the service Resend (Resend, Inc., USA). The details are processed on servers in the USA; the provider is contractually bound to an adequate level of protection (standard contractual clauses).
We use these details solely to answer your enquiry – not for advertising and not for third parties. If you would rather avoid this, you can always write to us from your own email programme instead.
8. Contact by email
If you write to us, we process your details — name, email address and the content of your message — solely in order to answer your enquiry and prepare any collaboration.
Our mailbox runs on Google Workspace (Google Ireland Limited, Dublin, Ireland). Data may therefore also be processed outside Switzerland, in particular in the EU and the USA; Google is contractually bound to an adequate level of protection (standard contractual clauses). We keep business correspondence for as long as it is needed and within the statutory retention periods (generally ten years under art. 958f CO).
9. Disclosure to third parties
We pass on personal data only where it is necessary to run the website and our business — for example to our hosting and email providers. These providers process the data on our behalf, are contractually bound to confidentiality and may not use it for their own purposes.
Where data is transferred abroad, we make sure that adequate protection exists there or that contractual guarantees (standard contractual clauses) are in place.
Specifically, these are currently: Cloudflare as our hosting provider, Google Workspace for our mailbox and Resend for delivering form messages.
10. Your rights
You have the right at any time to information about the data we process about you, as well as to rectification, deletion or release of your data. You may also object to processing.
A short email to hello@clickandflow.ch is enough; we reply as quickly as we can. If you are not satisfied with our answer, you may contact the Federal Data Protection and Information Commissioner (FDPIC).
11. Security
The website is transmitted exclusively in encrypted form (HTTPS/TLS). We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Absolute security, however, cannot be guaranteed by anyone on the internet.
12. Changes
We may adapt this privacy statement if the website or the legal situation changes. The version published here is the one that applies.