Privacy

Menekse Media, Solibodenstrasse 18, 8180 Bülach, Switzerland, is responsible for data processing on company.ch.

Privacy enquiries may be sent to info@company.ch.

This privacy policy applies to the public website, company search, registration and login, customer accounts, website listings, indexing subscriptions, optional leads and quote enquiries, administrative review, emails and invoices provided by company.ch. The privacy information of the relevant operators applies to the independent websites and services of listed companies.

Depending on how company.ch is used, the data processed includes in particular:

• Technical connection, device, browser, security and usage data.
• Email address, verification status, preferred language, session and account data.
• Time and version of the terms accepted at registration and the privacy policy acknowledged at that time.
• Contact, company and billing details provided voluntarily.
• Source and destination addresses of a company website, company or brand name, favicon, locations, website button, selected indexing plan, subscription period, phone number, availability hours and configuration of the optional enquiry form.
• Publicly accessible website content, stored search text, page titles, meta descriptions, headings, technical crawl metadata and search documents created from that data.
• Search queries, filters, pseudonymised search interactions and derived search attributes and relevance signals.
• Name, email, optional telephone number, optional message and answers forming part of a lead or quote enquiry.
• Paid subscriptions, transmitted enquiries, invoices, payment records and data required for accounting.
• Contact, support, sending, delivery, bounce and suppression data relating to emails.

company.ch processes data to deliver the website securely, create and protect accounts, crawl company websites within the selected plan, index the page text actually read, determine relevant search results and rank them according to relevance and the placement level of the selected plan, transmit optional enquiries, manage subscriptions and invoices, send operational emails, provide support, prevent misuse and meet legal obligations and claims.

Technically necessary data is generated when company.ch is accessed, including the IP address, address requested, time, referrer, browser and device information, and security and error data. It is used for transmission, stability, error analysis and preventing misuse. An external hosting service processes such data for hosting, content delivery, network and server functions.

Registration, login and confirmation of a new account email address are completed through a single-use link sent by email. The link is valid for 20 minutes. Only a cryptographic hash of the token is stored in the authentication database. For repeat delivery attempts, the full link address may temporarily be held in encrypted form in the email queue.

Requesting a registration link creates an account that has not yet been verified. Confirmation takes place when the link is used and leads directly to adding a website. A customer session may keep the device logged in for up to 180 days. In production, session cookies are configured as HttpOnly, SameSite=Lax and Secure.

The available account, language, contact and billing details can be edited in the dashboard. A new email address only becomes active after confirmation through the link sent to it. Starting Index or Index Pro constitutes a binding order and begins external indexing even if the billing address is not yet complete. If the complete address is missing, it is collected after successful indexing in the resumable completion step that follows the click on “Publish”. Publication remains blocked and the invoice cannot be made available until the address is complete and the technical checks have finished. While a paid activation or website exists, the billing address may only be replaced with another complete billing address. Account and billing data is not used as content in the website search index.

A new website listing is prepared solely from the company website provided. company.ch processes the address, normalised hostname, preferred language and the data required to assign it to the customer account. As long as an existing draft has not been deleted, it can be reused when the same domain is entered later. After deletion, the website can be added and indexed again.

company.ch uses an external crawling service for Free, Index and Index Pro. Publicly accessible HTTP and HTTPS pages are retrieved without logging in and in accordance with robots.txt. Free includes only the corresponding homepage of each detected supported language version, up to four pages in total. Index includes up to 100 technically suitable pages and Index Pro up to 1,000 technically suitable pages per detected supported language version. Each language homepage is included. Technical time, size, security and accessibility limits still apply.

The crawler reads publicly visible page text, page titles, meta descriptions, main headings, language, canonical declarations and possible favicons. Robots declarations are processed as technical exclusion signals but are not included in the published search representation. The crawler does not generate summaries, search evidence or translations. A cleaned search representation limited to no more than 12,000 characters is stored for each indexed page. Data that may be retained includes the URL, canonical address, page title, meta description, short search extract, main heading, language, content hash, crawl depth and crawl time. A favicon that is retrieved or uploaded is checked and served by company.ch.

Stored real page text, page titles, locations, technical ranking attributes and private additional information for AI search are sent as a search projection to an external search service in the Frankfurt region. The service processes cleaned search queries and selected filters lexically and through semantic models for vector search and reranking. Private additional information for AI search and the combined semantic text remain internal search fields; public search requests use a fixed source-field allowlist and public search responses contain only opaque technical identifiers from that projection and no stored page search text.

For the editable website draft, limited page evidence may be sent to an external AI service to identify company or brand names and locations supported by the website. Customer-defined button labels may be translated once by an external AI service. These AI services do not process public search queries and do not generate offers, product claims or search evidence.

Model requests for the separate draft and translation assistance include a technical instruction not to use the input for training. General zero retention by every model and search provider involved is used only where technically configured for the specific processing and is not promised across the board. If the separate draft or translation services fail, the crawler and public search remain independent of them.

Before page text is sent, company.ch removes recognised email addresses, telephone-like character sequences, Swiss IBANs and web addresses so far as technically detected. This filtering cannot guarantee that publicly accessible text contains no personal data. Account, billing and enquiry data is not sent as website search text to search or model services.

An active listing may display the company or brand name, favicon, preferred location and website button. With Free, the destination address, page title, meta description or short extract is derived only from a captured language homepage. With Index and Index Pro, relevant captured subpages may also be used. The destination address leads to the company’s external website. Phone and form extensions can appear with Index and Index Pro.

Stored search text, private additional information for AI search, internal search documents, ranking/version attributes, technical crawl details and review notes are not displayed publicly. With Index or Index Pro, a company may add up to 500 words about genuine offers, services or products. The text is reviewed, assigned to the homepage in the selected primary language, excluded from public search responses and used only for search and ranking.

A submitted listing is reviewed administratively before publication. Crawled page text is neither rewritten nor translated into other platform languages during approval. The last approved version may remain public while a change is under review.

For a search, company.ch sends the cleaned query, language and selected country/canton filters to the external company search index. Short intents are processed conservatively by lexical search; longer natural-language queries may additionally use semantic rank fusion and one rerank. Only after the company order is fixed do separate language page indexes select a suitable destination without adding or reordering companies. company.ch then checks every hit in the operational database against the publication status, approved content version, active page generation and exact document membership.

Recognised email addresses, telephone-like character sequences, Swiss IBANs and web addresses are removed from search text so far as technically detected. Search fields should nevertheless not be used for personal data, confidential information or trade secrets.

For searches, company.ch stores in the operational database a random search ID, the language, result counts and hashes of the cleaned query and a pseudonymous visitor identifier. For internal search statistics, the normalised search term may be stored with a limit of 160 characters. No readable term is retained if it contains a technically recognised email address, telephone-like sequence, IBAN or web address. Results displayed in the browser, clicks and completed enquiries are measured through short-lived signed tickets containing the document, position and search ID. Email addresses, telephone numbers, account IDs, raw IP addresses and browser identifiers are not stored as visitor identifiers. Search events and impressions are deleted no later than 90 days after storage. This is separate from technically necessary connection and retention data held by the providers used.

If a company enables the enquiry extension, the enquirer submits their name, email, optional telephone number and message, together with answers to the configured additional questions. An enquiry is assigned only to the company selected and is not automatically distributed to several companies.

A complete enquiry, including its answers and completed contact details, is delivered directly to the selected company by email. The information required for delivery is stored. A hash is created from the listing, normalised email address, message and answers to recognise identical enquiries for 24 hours.

When a paid subscription is ordered, the plan, amount, time, account, service period and invoice allocation are stored. For successfully transmitted enquiries, assignment and delivery are stored; as a paid-plan service, they are not separately assigned to an invoice. Billing and accounting data is not used as content for website search.

When a message is sent to company.ch, the contact details provided, subject, message, language and technical protection information are processed in order to review and answer it and prevent misuse. Temporary rate limits and honeypot fields may be used.

company.ch uses an external email delivery service for access links and operational messages, including messages concerning accounts, enquiries, website listing reviews, publications, invoices, reminders and payment status. Link and open tracking are technically disabled when messages are sent.

To support reliable delivery, company.ch processes the recipient, subject, encryptable repeat-delivery content, status, errors, provider identifier, and bounce, spam and suppression information. Personal sending data in completed outbox entries is redacted after 90 days; webhook duplicate data is deleted after 30 days and suppression audit details are minimised after 90 days.

company.ch uses necessary cookies and browser storage for sessions, magic-link handover, security, forms, consent management, colour scheme and conversion deduplication. With consent to measurement, a random pseudonymous search identifier may also be stored in an HttpOnly cookie for up to 180 days so searches and interactions can be associated with the same browser and search quality can be improved. A customer session may remain for up to 180 days, the stored analytics decision for up to 180 days and the colour scheme for up to one year. Some local settings remain until changed or deleted in the browser. Expired or completed authentication and rate-limit records are cleaned up after the designated technical grace periods.

On public pages outside the administration and customer areas, company.ch uses Google Tag Manager and Google Analytics 4 to measure reach, usage and conversions. Registrations may be recorded as key events. Submitted quote enquiries are not recorded as Google Analytics key events. Operational account, subscription and enquiry totals are obtained independently from company.ch’s own database.

company.ch uses Google’s advanced consent mode. Without consent, analytics_storage, ad_storage, ad_user_data and ad_personalization remain ‘denied’. The Google Tag Manager container and Google tag may nevertheless load and send cookieless measurement signals. If analytics is allowed, Google Analytics may use analytics cookies and process page views, events, URLs, referrers, browser, device, approximate region and campaign information. Advertising storage, personalised advertising and transmission of usage data for advertising remain technically denied.

The analytics decision can be changed by deleting the website data in the browser and then making a new choice.

Frequently used country flags are served locally. For other flags, the browser may retrieve the image directly from flagcdn.com. The service then receives technical data including the IP address, browser details, the file requested and the time of retrieval.

company.ch only discloses data as required for the functions described:

• The specifically selected company receives the answers and completed contact details of a complete enquiry directly by email.
• External hosting and infrastructure services for hosting, network and server functions.
• An external crawling service for technically retrieving and preparing publicly accessible website content in all indexing plans.
• An external database service for operational data storage.
• An external search service for the search index, queries, filtering and lexical and semantic ranking.
• An external email service for sending and monitoring delivery of operational email.
• External AI services for the limited profile and button-translation functions described.
• Google for Tag Manager and Analytics in line with the consent settings.
• FlagCDN where a flag not stored locally is retrieved directly by the browser.
• Authorities, courts or professional advisers where legally required or necessary for claims.

The providers used may process data in Switzerland, the European Economic Area, the United States and other locations used by their infrastructure or sub-processors. For disclosures abroad, company.ch uses the safeguards provided by law, in particular adequacy decisions, recognised privacy frameworks or standard contractual clauses with the necessary Swiss amendments and supplementary measures. Information on the mechanism used for a particular provider may be requested from info@company.ch.

company.ch only retains data for as long as required for the relevant purpose, secure operation, deduplication, billing, legal obligations, or reviewing and enforcing claims. Unless a specific period is stated above, there is no general fixed deletion period; retention depends on the purpose and legal requirements.

When a website listing is deleted, public content, search documents, crawl pages, the indexing draft and the enquiry form are removed or emptied. A minimal technical record and subscriptions, enquiries, invoice references and evidence already recorded may be retained where required to maintain integrity, bill services, prevent misuse, address claims or comply with legal duties. Deleting a listing does not automatically delete the account.

Business records, accounting documents and the billing data needed for them are generally retained for ten years. Legal duties and overriding protection and evidential interests remain reserved when deletion is requested.

company.ch applies appropriate technical and organisational safeguards. They include encrypted transmission, hashed access, session and visitor identifiers, protected administration areas, transactional database operations, input validation, rate limits and reduction of stored email data. Absolute protection cannot be guaranteed for electronic data processing.

Within the scope of Swiss data protection law, affected individuals may in particular request access to, correction, deletion or release of their personal data and object to specific processing. Consent can be withdrawn for the future. Rights may be restricted by legal obligations, overriding interests or third-party rights. Requests should be sent to info@company.ch; proof of identity may be required.

company.ch updates this privacy policy when processing activities, providers or legal requirements change. The version published on company.ch applies. Material changes will be identified there or through an appropriate contact channel.