Privacy policy

1. Controller

Viascom GmbH
Weissbadstrasse 8b
9050 Appenzell, Switzerland
UID: CHE-269.801.554
Email: support@datafjord.io

Viascom GmbH operates datafjord.io and is the controller for the processing described here, under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR). DataFjord is offered through two Viascom companies: Viascom GmbH contracts with clients in Switzerland, and Viascom OÜ (Telliskivi tn 57, 10412 Tallinn, Estonia, registry code 17272180) contracts with customers in the EU and EEA.

2. What this site does not do

datafjord.io sets no cookies, runs no analytics or tracking, and loads no third-party fonts or scripts. The page ships no client-side JavaScript at all, and every asset is served from our own infrastructure, so there is nothing to consent to and no consent banner.

3. Server logs

When you visit the site, our web server and Cloudflare (see below) process technical access data: IP address, date and time, requested page, referrer and browser type. We use this data to deliver the site, keep it secure and diagnose faults. The legal basis is our legitimate interest in operating the site securely (Art. 6(1)(f) GDPR). Log data is not merged with other data and is deleted or anonymised within 30 days at the latest.

4. Content delivery: Cloudflare

The site is hosted on servers in Switzerland and served through Cloudflare, Inc. (USA), which provides DNS, content delivery and protection against attacks, and processes technical connection data for that purpose. Transfers to the USA are safeguarded by the Swiss-US and EU-US Data Privacy Frameworks and by standard contractual clauses.

5. Contact by email

If you email us, we process your email address, your name and the content of your message to handle the enquiry and any follow-up. The legal basis is taking steps prior to entering into a contract and our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR). Correspondence is kept as long as the enquiry requires; where it becomes part of a business relationship, statutory retention duties of up to ten years apply (Art. 958f Swiss Code of Obligations).

6. The DataFjord API

This policy covers the website. If you hold an API account, we additionally process the account and billing details you provide, and we log each API request with its timestamp, the endpoint called and the key that made it. Those logs exist to bill usage accurately, to keep the service secure, and to give you the audit trail the service is built to provide. The legal basis is performance of our contract with you and our legitimate interest in operating the service securely (Art. 6(1)(b) and (f) GDPR).

The business data the API returns comes from public registers, principally the Swiss commercial register. Where such a record contains personal data, the register itself is the source and the original publication is what makes it public; we transmit it to you unchanged, and your own use of it is your responsibility as controller.

API data is stored on dedicated hardware in Switzerland. Where you run DataFjord on your own infrastructure, we process nothing on your behalf at all.

7. Your rights

Regarding your personal data, you have the right to:

• request access to the data we hold about you,
• have inaccurate data corrected,
• have data deleted where no retention duty applies,
• object to processing based on legitimate interest,
• receive your data in a common, machine-readable format.

To exercise any of these rights, email support@datafjord.io. We respond within 30 days.

8. Supervisory authorities

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch

If the GDPR applies to you, you may also complain to the data protection authority of your place of residence.

9. Changes

We update this policy when the site, the service or the law changes; the date above reflects the current version.