This privacy policy explains how Greentech Solutions GmbH ("Greentech", "we") processes personal data when you visit our website www.gtso.ch and www.greentech-solutions.ch, contact us or place an order. The Swiss Federal Act on Data Protection (FADP, in German DSG) applies.
1. Controller
Greentech Solutions GmbHBernstrasse 55
8952 Schlieren
Switzerland
Email: info@greentech-solutions.ch
Phone: +41 44 500 92 05
For data protection matters, write to us at the same address or by email with the subject "Datenschutz" (data protection).
2. Overview
| When | What we process | Without your consent | Only with your consent |
|---|---|---|---|
| On every visit | Technical access data (hosting), anonymous statistics (Plausible), error logs (Sentry), cookieless measurement signals to Google | yes | - |
| Statistics | Google Analytics 4 with cookies | - | yes |
| Ad measurement | Google Ads cookies, click ID in your browser, enhanced conversions, call tracking, reporting of quotes and orders to Google | - | yes |
| Session analysis | Microsoft Clarity (recording of clicks and scrolling) | - | yes |
| When you send an enquiry | Your details, lead context (section 10) | yes, to handle the enquiry | Order reporting to Google: yes (section 6.5) |
3. Cookie settings, consent and withdrawal
On your first visit we show a notice (cookie banner). You can choose:
- "Accept all": you allow statistics, ad measurement and session analysis.
- "Only necessary": you decline all purposes for which we need your consent.
- "Settings": you choose the purposes individually.
We store your choice in your browser (local storage, entry gt_consent) together
with the time, the purposes chosen and the version of the banner text. It applies until you change
it, for at most 12 months; after that we ask again. When you send an enquiry, we store the consent
status at the time of the enquiry together with the enquiry so that we can respect it later
(section 6.5).
Withdrawal and changes: Using the link at the bottom of every page, you can change your choice or withdraw consent at any time. The withdrawal takes effect immediately: we set the Google signals to "denied", stop Microsoft Clarity and delete the click ID and campaign data stored in your browser (section 6.2). Data transmitted before remains stored by the providers according to their retention periods (section 11). You can also delete or block cookies in your browser.
What runs regardless of your choice: the technically necessary storage of your choice, the access data at our host (section 9), anonymous statistics with Plausible (section 4.1), the error log with Sentry (section 8), the Mapbox map (section 9), which stores a random identifier in local storage, and cookieless measurement signals of the Google tags (section 5). These services do not set cookies.
4. Website analytics and audience measurement
4.1 Plausible Analytics (without cookies)
For anonymous visitor statistics we use Plausible Analytics by Plausible Insights OÜ, Tartu, Estonia. The data is stored in the EU. Plausible does not set cookies and stores nothing in your browser.
Collected are: pages visited, origin of the visit (referring website and campaign data such as utm_source, utm_campaign), country or region, device type, browser and operating system, and the following events: sending an enquiry with the enquiry type (e.g. quote, sewer check, callback, short form, checklist), clicks on phone and email links, and your choice in the cookie banner (accepted, declined or own selection). We do not send names, phone numbers, email addresses, click IDs or lead IDs to Plausible. Plausible removes a Google click ID from the page address before storing it.
Plausible uses your IP address and browser identifier only briefly to form a daily changing visitor key that cannot be reversed. They are not stored. We only receive aggregated figures.
The purpose is statistics on how our website and our campaigns are used. Plausible processes the data on our behalf. Because no personal data is stored and Plausible does not use the data for its own purposes, we rely on our overriding interest in anonymous statistics.
4.2 Google Analytics 4 (only with consent "Statistics")
With your consent we use Google Analytics 4 (GA4) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also go to Google LLC in the USA. Google processes the GA4 data as our processor.
Collected are: pages visited and page address (including campaign data and Google click ID), origin
of the visit, interactions such as clicks on phone or email links and sending an enquiry (without
the content of your details), device, browser, operating system, approximate location and a
pseudonymous identifier in the cookies _ga and _ga_<ID> (lifetime up
to 2 years). For users in Switzerland, Google uses your IP address only to determine the approximate
location. According to Google, it does not log or store it for GA4.
Purpose: understand how our website is used, improve it and evaluate campaigns. We have deactivated Google signals (linking with Google accounts). Event data is deleted after 14 months. Aggregated reports remain longer.
5. Google Consent Mode: what goes to Google without your consent
We use Google Consent Mode. The Google tags (Google Tag Manager, GA4, Google Ads) load on every page view, also before and without your consent. They follow your choice in the banner:
- Without consent the Google tags do not set or read cookies. They do, however, send cookieless measurement signals to Google: time, browser and device data (user agent), referring page, the address of the page visited, a random number generated anew on each page view, your consent status and whether the page address contains an ad click ID. Google Ads truncates the IP address at collection. We redact click IDs in the Google Ads signals. GA4 receives the full page address, including campaign data and click ID where present. Google uses these signals to estimate visits and conversions statistically (modelling).
- So that an ad click ID is still available when you send an enquiry without being stored in your browser, the Google tags append it to links within our website.
- With consent the tags work with cookies within the purposes chosen (sections 4.2 and 6).
6. Google Ads and conversion measurement
6.1 What this is about
We run search ads on Google Ads. We want to know which ads lead to enquiries, calls and orders so that we spend our advertising budget sensibly. Measurement at Google only takes place with your consent "Ad measurement". Independently of this, we evaluate campaign data in your enquiry internally (section 10) without sending this data to Google.
6.2 Conversion tracking (consent "Ad measurement")
If you come to us via a Google ad, the page address contains a click ID from Google (gclid, gbraid
or wbraid). With your consent, Google stores it in cookies (_gcl_au,
_gcl_aw, _gcl_gb, lifetime 90 days). In addition, we store the click ID,
campaign data (utm parameters) and your entry page for 90 days in your browser's local storage
(gt_gclid, gt_utm, gt_landing) so that we can assign them to a
later enquiry. Without consent we do not store this data in the browser and only read it from the
current page address.
If you send an enquiry, click a phone or email link or call us (section 6.4), the Google tag reports this as a "conversion" to Google Ads: type of action, time, click ID or cookie identifier, page address, browser and device data, your IP address and, for enquiries, a random enquiry number (lead ID) so that the same enquiry is not counted twice. Google also uses the IP address for ad measurement. If your browser is linked to a Google account, Google can assign the conversion to that account. We only receive aggregated reports without data on individual persons.
Google is itself responsible for conversion tracking and may also use the data for its own purposes.
6.3 Enhanced conversions (consent "Ad measurement")
If you send an enquiry with consent "Ad measurement", we transmit your email address and phone number (where provided) to Google. Beforehand they are converted with the SHA-256 method into a check value (hash) that cannot be reversed. Google matches these check values with signed-in Google accounts that were in contact with our ads and only reports aggregated results to us. For this function Google is our processor.
6.4 Calls via a Google forwarding number (consent "Ad measurement")
If you come via a Google ad and have consented to ad measurement, our website may show a Google
phone number (forwarding number) instead of +41 44 500 92 05. If you call it, Google forwards the
call to us. Google records the start and duration of the call, whether it was connected and, for
calls over 15 seconds, your phone number, and counts the call as a conversion. For this Google also
uses the cookie gwcc. Google is itself responsible for this call data. Without consent
you always see our own number.
6.5 Reporting quotes and orders to Google (offline conversion import)
If your enquiry results in a quote or an order, we report this to Google Ads so that we can see which ads lead to quotes and orders. We do this only if you
- had consented to ad measurement in the cookie banner when sending the enquiry, or
- ticked the optional order reporting box in the enquiry form.
What is reported: the click ID of the ad (if available) and/or your email address and phone number as a hash (SHA-256), the quote or order value, date and time of the quote or order, an order number (the pseudonymous lead ID) and your consent status. We do not report your name, address or the description of your request. We do not allow Google personalised advertising with this report.
The report is made via a Google Sheets table and the Google Ads import function. Google assigns the order to the ad click. Google is itself responsible for matching via the click ID. For matching via the check values, Google acts as our processor. Google only accepts reports up to 90 days after the ad click (63 days when matching via check values only). Without consent we report nothing to Google.
You can withdraw your consent to order reporting at any time by email to info@greentech-solutions.ch. After that we report nothing more. Quotes and orders already reported remain stored at Google.
6.6 Personalised advertising
We do not use personalised advertising or remarketing. The corresponding Google signal always stays "denied".
6.7 More information about Google
For users in Switzerland, Google Ireland Limited, Dublin, Ireland, is responsible for Google's own processing. Data may be transferred to Google LLC in the USA (section 12). Google explains how it uses data from websites like ours here: How Google uses data. More information: Google privacy policy.
7. Microsoft Clarity (only with consent "Session analysis")
With your consent we use Microsoft Clarity by Microsoft Ireland Operations Limited, Dublin, Ireland, or Microsoft Corporation, Redmond, USA. Clarity records how you use the page (mouse movements, clicks, scrolling, page content shown) and creates session recordings and heatmaps from this. Entries in form fields are always masked and not transmitted to Microsoft.
For this Clarity sets cookies, including _clck (pseudonymous identifier) and
_clsk (links the page views of a session), with a lifetime of 1 year and 1 day
respectively. We pass your consent to Clarity and explicitly keep sharing with Microsoft Advertising
deactivated. Microsoft stores recordings for 30 days; individual recordings marked by us or selected
at random for up to 9 months. The data is held in the Microsoft Azure cloud.
Purpose: identify usability problems and improve the website. Without consent Clarity does not load. If you withdraw your consent, we stop Clarity and have the Clarity cookies deleted.
8. Sentry (error log)
To detect technical errors quickly, we use Sentry by Functional Software, Inc., San Francisco, USA. The data is stored in Frankfurt, Germany. Sentry processes it as our processor.
If an error occurs, we transmit: error message and technical sequence, the page address without parameters, browser, operating system, device type and time. In addition, we measure loading times for around 10 % of page views. We remove form entries, cookies and headers with personal data before sending. Sentry does not store IP addresses. We do not use screen recordings (session replay). According to our configuration, Sentry does not set cookies.
We rely on our overriding interest in a functioning, secure website. Error data is deleted after 30 days at the latest.
9. Hosting, map and email delivery
- Hosting: Our website runs on Vercel Inc., USA, with servers in Frankfurt, Germany. Vercel delivers static content via a worldwide network. On every request Vercel processes technical access data (IP address, time, address requested, browser data) for operation and security and deletes it after a short time, after one day at the latest.
- Map: For the map of our service area we use Mapbox by Mapbox, Inc., USA. When the map loads, Mapbox receives your IP address and technical browser data. The map stores a random identifier, which changes every 24 hours, in your browser's local storage, keeps map tiles in the browser cache and reports the map view to Mapbox.
- Email delivery: We send your enquiry to ourselves by email via the Resend service of Plus Five Five, Inc., USA, and send you requested documents by email. Resend only processes the data needed for delivery.
10. Enquiries via forms, phone and email
10.1 What data
Depending on the form, we process the details you provide: name, phone number, email address, address and role (e.g. owner or property management) for the sewer check, requested service, description of your request, callback request and your answers in the standards checker.
In addition, your browser transmits this enquiry context with every enquiry:
- a random enquiry number (lead ID), time, language and form type;
- the page on which you send the enquiry and the page on which your visit began (the latter only with consent "Ad measurement");
- campaign data (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and an ad click ID with type (gclid, gbraid or wbraid), if available. Without consent only from the current page address, with consent also from your browser's storage (section 6.2);
- your consent status for statistics and ad measurement and, where applicable, your consent to order reporting with the time.
We use your IP address when you submit to prevent misuse (at most three enquiries per hour and form type).
If you call us or write to us directly, we record your name, contact details, request and, if you tell us, how you found us.
10.2 For what purpose
- answer your enquiry, prepare a quote, arrange appointments and carry out the order;
- evaluate internally which channels and campaigns lead to enquiries, quotes and orders. This evaluation stays with us. Only what is described in section 6 goes to Google;
- prevent misuse and spam.
Processing to answer your enquiry is necessary for the contract or the quote. For internal evaluation and protection against misuse we rely on our overriding interest.
10.3 Where your enquiry goes
- The website transmits your details to our own server (Vercel).
- We receive the enquiry by email via Resend in our mailbox at Microsoft 365 of Microsoft Ireland Operations Limited, Ireland (data location Europe).
- At the same time a copy goes to our n8n automation (server n8n.x-group.xyz, operated by X-Group GmbH at Hetzner Online GmbH in Frankfurt, Germany). n8n enters the enquiry in our enquiry list in Google Sheets (Greentech’s Google account).
- We manage quotes and orders in bexio (bexio AG, Switzerland).
- Another copy goes to our own order management system Kanal-OS. Incoming email is handled by Resend and Cloudflare, Inc. (USA); the system runs on Vercel in Frankfurt and its database at Neon, LLC (Databricks group, USA), stored in Frankfurt, Germany.
The service providers named process the data on our behalf. Google Sheets is an exception: we use Google Sheets via a Google account; Google processes this data under its own terms. Google receives data from your enquiry for its own purposes only as described in section 6.
11. Retention periods
| Data | Where | Duration |
|---|---|---|
Your cookie choice (gt_consent) | Your browser | until you change it, at most 12 months |
Click ID, campaign data, entry page (gt_gclid, gt_utm, gt_landing) | Your browser, only with consent | 90 days, deleted immediately on withdrawal |
Google Ads cookies (_gcl_au, _gcl_aw, _gcl_gb) | Your browser | 90 days |
Call tracking: cookie gwcc and local storage entries | Your browser | as set by Google |
GA4 cookies (_ga, _ga_<ID>) | Your browser | up to 2 years |
| GA4 event data | 14 months | |
Clarity cookies (_clck, _clsk) | Your browser | _clck 1 year, _clsk 1 day |
| Clarity recordings | Microsoft | 30 days, marked ones up to 9 months |
| Plausible | Plausible | no personal data, aggregated figures until our account is deleted |
| Sentry error data | Sentry | up to 30 days |
| Hosting access data | Vercel | after one day at the latest |
| Enquiries without an order | Mailbox, enquiry list, Kanal-OS | 24 months after the last contact |
| Enquiry context (click ID, campaign data, consent status) | Enquiry list | 24 months, then deleted or anonymised |
| Automation logs | n8n server | 14 days |
| Hash check values and order reporting | Import sheet (Google Sheets) | 90 days, then deleted |
| Quotes, orders, invoices and related correspondence | Accounting | 10 years (statutory retention obligation) |
| Conversions reported to Google | according to Google’s retention periods |
12. Disclosure abroad
Some service providers process data outside Switzerland. Personal data may be transferred to the states of the EU and the EEA because the Federal Council has found adequate data protection there. For the USA this applies to companies certified under the Swiss-U.S. Data Privacy Framework.
| Recipient | Purpose | State | Safeguard |
|---|---|---|---|
| Google Ireland Limited / Google LLC | GA4, Tag Manager, Google Ads, Google Sheets | Ireland, USA | Swiss-U.S. Data Privacy Framework, in certain cases standard contractual clauses |
| Microsoft Ireland Operations Ltd. / Microsoft Corporation | Clarity | Ireland, USA | Swiss-U.S. Data Privacy Framework |
| Functional Software, Inc. (Sentry) | Error log | USA (provider), storage in Germany | Swiss-U.S. Data Privacy Framework, additionally standard contractual clauses |
| Vercel Inc. | Hosting | USA | Swiss-U.S. Data Privacy Framework |
| Mapbox, Inc. | Map | USA | Swiss-U.S. Data Privacy Framework |
| Plus Five Five, Inc. (Resend) | Email delivery | USA | EU Commission standard contractual clauses with adaptations for Switzerland |
| Plausible Insights OÜ | Statistics | Estonia (EU) | Adequacy (EU) |
| Hetzner Online GmbH | Automation server (n8n) | Germany | Adequacy (EU) |
| Microsoft Ireland Operations Ltd. (Microsoft 365) | Email mailbox | Ireland/EU (data location Europe) | Adequacy (EU) |
| Cloudflare, Inc.; Neon, LLC (Databricks) | Incoming email and database of our order management system Kanal-OS | USA (provider), database in Germany | Swiss-U.S. Data Privacy Framework, supplemented by standard contractual clauses |
13. Your rights
Under the FADP you have in particular the following rights:
- Access: whether and which personal data we process about you, for what purpose, for how long, where it comes from and to whom it goes.
- Rectification of incorrect data.
- Erasure and objection: you can request that we stop a processing or delete your data, unless statutory retention obligations prevent this. In particular, you can object to the internal campaign evaluation (section 10.2).
- Data portability of the data you gave us, in a common electronic format.
- Withdrawal of consent: in the banner via "Cookie settings" at the bottom of the page, for order reporting by email. Withdrawal takes effect for the future.
Write to us at info@greentech-solutions.ch (subject "Datenschutz") or by post to the address in section 1. We may ask you to prove your identity. We provide access within 30 days. You can also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
14. Visitors from the EU and the EEA
Our services are aimed at customers in Switzerland. Where the EU General Data Protection Regulation (GDPR) applies to your visit, we rely on your consent for all purposes requiring consent (sections 4.2, 6, 7), and on our legitimate interests or the performance of pre-contractual measures for Plausible, Sentry, hosting, handling enquiries and internal evaluation. You also have the right to lodge a complaint with a data protection supervisory authority in the EU.
15. Changes
We adapt this privacy policy when our website or the services used change. The version published here applies.