This translation is provided for convenience; the German version is binding.

What this website learns about you, and what the application does with your data.

Controller

Dynamic Peg AG, Hardturmstrasse 161, 8005 Zurich, Switzerland, mirko@dynamicpeg.com. The Swiss Federal Act on Data Protection (FADP) applies; for persons in the EU, the GDPR applies as well.

This website (bluebooks.ch)

The website sets no cookies, uses no analytics or advertising services and embeds no third-party content, with one exception: the fonts are loaded from Google Fonts, which gives Google your IP address. The web server at Hetzner Online GmbH (Germany) logs requests with IP address, time, page requested and browser details (for example the language setting we use to send you to the matching language version) for no more than 14 days, for troubleshooting and to fend off attacks. Name resolution (DNS) runs through Cloudflare, Inc.; the website’s traffic itself does not pass through Cloudflare.

If you e-mail us, we process your details to answer your enquiry and prepare a quote.

The application (app.bluebooks.ch)

In the application we process our clients’ financial and personnel data on their behalf. The basis is the service agreement and a data processing agreement with each client; the client remains the controller of its books. Access is personal and secured with a second factor and a passkey; every action is logged and visible to the client.

Every client has its own database. Documents are stored encrypted. Operations run at Hetzner Online GmbH in Germany, daily backups are kept encrypted with a second provider in the EU; on request a client is operated in a Swiss data centre.

Machine reading of receipts by a language model (xAI) can be switched off per client and is only active with the client’s express consent. The sub-processors we use are listed in the list of sub-processors.

Retention

We keep business records, receipts and logs on the client’s behalf for as long as the client requires and the Swiss Code of Obligations prescribes (usually ten years). We delete website logs after 14 days at the latest, e-mail enquiries once they are dealt with, and quote documents after two years.

Your rights

You have the right to access, rectification, erasure, restriction and portability of your data, and the right to object. Contact the address above. For data we process on behalf of a client, contact that client; we support them in responding. You may lodge a complaint with the competent supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner.