Privacy policy

1. Preamble

H-Robotics Sàrl attaches great importance to protecting the personal data of visitors to its website and of people who get in touch. This policy aims to inform you, clearly and accessibly, about the processing of data carried out in the context of the use of h-robotics.com and related services.

This policy complies with:

• the new Swiss Federal Act on Data Protection (nFADP) in force since 1 September 2023;
• the Data Protection Ordinance (DPO);
• the EU Regulation 2016/679 (GDPR) where applicable to data subjects residing in the European Economic Area.

2. Data controller

The data controller is:

Contact person for data protection questions:
Alexander Cesari — alexander.cesari@h-robotics.com

H-Robotics Sàrl is not legally required to appoint a Data Protection Officer (DPO) under the nFADP. The contact person above nevertheless acts as the single point of entry for any data protection request.

3. Personal data collected and purposes

3.1 Data actively provided by the user

When you fill out a contact or demonstration request form on the site, we collect the following information:

Data	Status	Purpose
First and last name	Required	Identify you and personalise our exchanges
Professional e-mail address	Required	Reply to you and send a proposal
Company name	Required	Qualify your request in its professional context
Phone number	Optional	Call you back if requested
Role / function	Optional	Adapt our reply to your decision level
Free-form message	Optional	Understand your need

3.2 Data collected automatically

When you visit the site, certain technical data is collected automatically by the hosting server and, where applicable, by audience measurement tools:

• IP address (anonymised or truncated where applicable);
• browser type and version;
• operating system;
• pages viewed, date and time of consultation;
• referring site (to understand how you arrived on our site).

This data is used for aggregated statistical purposes (audience measurement, site improvement) and for security (detection of abusive use).

3.3 Specific purposes

Data is processed for the following purposes:

1. Reply to your requests (contact, demo request, sales question);
2. Prepare and schedule demonstrations on site or by video conference;
3. Manage the commercial relationship and prospect follow-up (internal CRM);
4. Improve the site and our services (usage statistics, audience measurement);
5. Comply with our legal obligations (accounting, contract archiving).

4. Legal bases and justifications for processing

Pursuant to the nFADP (art. 6–8 — principles and lawfulness; art. 31 — overriding interests) and the GDPR (art. 6), each processing operation relies on a specific justification:

Purpose	Justification (nFADP / GDPR)
Reply to your requests (form)	Pre-contractual measures at the request of the data subject (art. 6.1.b GDPR); compliance with nFADP principles
Sales follow-up / CRM	Legitimate interest of H-Robotics Sàrl to conduct its commercial activity (art. 31 para. 2 let. b and c nFADP; art. 6.1.f GDPR)
Anonymised audience measurement	Legitimate interest in improving the site and service quality (art. 31 para. 2 let. b nFADP; art. 6.1.f GDPR)
Named audience measurement or third-party cookies	Prior consent via cookie banner (art. 6 para. 6 nFADP; art. 6.1.a GDPR)
Accounting and tax obligations	Legal obligations (art. 957 ss CO; art. 6.1.c GDPR)

5. Recipients of the data

Your data is accessible only to authorised persons within H-Robotics Sàrl (sales team, management, support).

It may be communicated to the following categories of processors, strictly limited to what is necessary for their services and under contractual confidentiality guarantees:

Category	Provider	Location
Site hosting	Hostpoint AG	Switzerland
Business e-mail and CRM	Microsoft Corporation (Microsoft 365)	EU / United States (Data Privacy Framework)
Audience measurement	Google LLC (Google Analytics 4)	United States (Swiss–US DPF)
Appointment scheduling (if enabled)	Microsoft Bookings	EU / United States (DPF)

Your data is never sold, rented or transferred to third parties for commercial purposes.

6. Data transfers outside Switzerland

Some of the above processors are located outside Switzerland, notably in the European Union and the United States. These transfers are governed by:

• the adequacy decisions of the Swiss Federal Council for the relevant countries;
• standard contractual clauses (SCC) recognised by the Federal Data Protection and Information Commissioner (FDPIC) where applicable;
• certification under the Swiss–US Data Privacy Framework for certified US recipients.

Important — robotic fleet data (Keenon-equipped clients): the Keenon cloud platform for robot management includes technical components operated from China by Keenon Robotics Co., Ltd. This processing does not concern site visitors of h-robotics.com, but only customers who have signed a deployment contract. It is the subject of a specific Data Processing Agreement (DPA) between H-Robotics Sàrl and Keenon, supplemented by a client DPA at each deployment.

7. Retention period

Type of data	Duration
Contact or demo requests with no follow-up	24 months from the last exchange
Active prospects (CRM)	Duration of the commercial relationship + 3 years
Contractual data (quotes, contracts, invoices)	10 years (art. 958f CO obligation)
Technical server logs	12 months maximum

At the end of these periods, data is permanently deleted or irreversibly anonymised.

8. Data security

H-Robotics Sàrl implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. These measures notably include:

• TLS/HTTPS encryption across the entire site;
• data access limited to authorised persons via individual credentials;
• regular CRM database backups;
• internal access and password management policy;
• choice of certified hosting and e-mail providers (ISO 27001 or equivalent);
• internal data breach notification procedure.

9. Your rights

In accordance with the nFADP and the GDPR, you have the following rights regarding your personal data:

• Right of access: confirm that data concerning you is being processed and obtain a copy;
• Right of rectification: correct inaccurate data or complete it;
• Right to erasure ("right to be forgotten"): request deletion of your data in the cases provided by law;
• Right to object: object at any time to processing based on legitimate interest;
• Right to portability (GDPR): receive your data in a structured, machine-readable format;
• Right to restrict processing;
• Right to withdraw your consent at any time (without effect on the lawfulness of prior processing);
• Right to issue directives on the fate of your data after your death.

To exercise these rights, send your request, accompanied by a copy of an ID document, to:

A reply will be provided within a maximum of 30 days.

Right to lodge a complaint: if you believe that the processing of your data does not comply with applicable law, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch. Visitors residing in the European Union may also contact the supervisory authority in their country of residence.

10. Cookies

The use of cookies on this site is described in detail in our Cookie policy.

11. Changes to this policy

H-Robotics Sàrl reserves the right to modify this policy at any time, particularly to adapt to legislative, judicial or technical changes. The date of the most recent update is shown at the bottom of this page. In case of substantial modification, affected users will be informed by appropriate means.

Policy updated 15 May 2026.