Privacy

The controller is Saygin Menekse, owner of the sole proprietorship Menekse Media, Solibodenstrasse 18, 8180 Bülach, Switzerland.

Privacy enquiries may be sent to info@company.ch.

Depending on how company.ch is used, we process in particular:

• technical connection, device, browser, security and error data;
• email address, language, account, session and verification data, together with the time and version of the legal acceptance;
• contact, company and billing details; required information is indicated in the relevant form;
• specified primary domain, profile details, declaration of authority, activation and change data, and the hostnames and status of domains selected for the editorial Index;
• publicly accessible website text, page titles, descriptions, web addresses and language information, which may include individuals’ names and professional contact details;
• search queries, language settings, and pseudonymised search interactions;
• details from contact, support and optional company enquiries, as well as subscription, invoice, payment and email-delivery data.

We process data to provide company.ch securely, operate accounts and company profiles, activate paid domains and admit editorial domains to the Index, prepare publicly accessible website content for search, process searches and display results, apply the relevant domain weighting, deliver enquiries, administer subscriptions and invoices, provide essential emails and support, prevent abuse, and comply with legal obligations or protect legal claims.

Registration, login and email changes use single-use links. Essential cookies protect the session and sign-in process. Anyone ordering a company profile declares that they are authorised to act for the company and use the specified domain. No technical domain verification by DNS, file or email domain takes place.

For paid website indexing, the company customer provides the primary domain and desired profile details and confirms their authority. The order is stored in the account and for operational handling. Public display begins only after complete content acquisition and indexing. Profile data, enabled contact features and the plan assignment appear after successful technical publication; later changes follow the same process.

After a domain is entered, company.ch reads its public HTTPS homepage to prepare the company or brand name, website icon and a main location provided there as structured information. If no location is found, it may also read one contact or legal-notice page linked from that homepage on the same website. To complete a Swiss canton, company.ch may send the postcode and town to geo.admin.ch, operated by the Federal Office of Topography swisstopo. Neither the billing address nor account details are sent. Subsequent indexing of publicly accessible website content runs separately from the order process.

Custom website- and enquiry-button labels are translated and checked using language models from Google and OpenAI through Vercel AI Gateway. The button text, source and target languages and, for validation, the proposed translation are sent. Other profile, account and billing data are not included. Translations are saved in the profile. Requests use the Gateway setting that excludes use of these texts for model training.

company.ch performs neither advance review nor technical domain verification. The company customer remains responsible for their authority and for the accuracy and currency of the information. In cases of abuse, rights infringement or clearly inaccurate information, company.ch may request evidence and suspend or remove a profile.

company.ch processes the entered search term across languages and returns results from admitted websites. Bright Data retrieves publicly accessible website content for this purpose. Algolia processes text and metadata in a search index and ranks matching results for the entered query. Publicly published names and professional contact details may form part of this content. The sources are the listed websites themselves.

Active paid customer domains, admitted affiliate partners and active domains selected editorially for the administrative ‘Index’ are searched. For relevant searches, Index Pro receives greater priority than Index, and Index Max the greatest. Editorial domains receive no plan-based priority. A higher position for every search or a fixed position is not guaranteed. Admitted websites also include Awin and Adtraction affiliate partners. Admission alone does not confer additional plan-based priority.

Algolia receives the search text, selected country or canton filters, and technical website identifiers, publication versions and plan assignments. Visitor identifiers from our own search statistics are not included. Email addresses, login details, enquiries and invoice data are not added to the search request. However, any information a person types into the search text is processed as part of that text.

Technical providers process only the public website content and search data required for retrieval, preparation, storage and search. This processing is separate from company.ch's own search statistics.

To improve search, company.ch stores result counts, impressions and clicks with random or pseudonymised identifiers. A normalised search term may be stored in bounded form; if it contains technically recognisable contact or payment details, it is not stored in readable form. Titles, descriptions and destination URLs used for results are not stored again in these statistics. A retention period of 90 days is set for search events and impressions. Older records are removed during operational data cleanup, which is initiated administratively rather than automatically on day 90.

For a completed enquiry, company.ch processes the person's name, email address, optional phone number and message, together with answers to questions configured by the selected company. The details are delivered directly to that company by email. The company is then responsible for its own processing of the enquiry.

For paid plans, we process the order, plan, price, term, billing address, invoices and payment status. If support is contacted, we process the submitted details and technical data needed to prevent abuse. Postmark (ActiveCampaign) sends access links and essential messages about accounts, enquiries, activation, invoices and payments. Open and link tracking are disabled for email delivery. An overdue invoice may automatically suspend the public display of a profile. Affected individuals may request correction of the payment status and review by a person at info@company.ch. To match incoming payments, we also process payment details shown on the business account at PostFinance.

Essential cookies and browser storage support sign-in, security, forms, preferences and consent management. On public pages outside the admin area, dashboard and web search results, company.ch uses Google Tag Manager and Google Analytics 4. Web search result pages are excluded from these Google tags. Other public areas may include page addresses, including search and filter parameters, in measurement. No analytics cookies are set without consent; on other public pages Google tags may send cookieless measurement signals while storage permissions are denied. Advertising storage and personalised advertising remain disabled.

The cookie choice is stored for 180 days. You can withdraw consent by deleting the cookies for company.ch in your browser and selecting “Necessary only” on your next visit. This does not affect processing that has already lawfully taken place.

Vercel Speed Insights is integrated to measure loading times and responsiveness, including on search pages and in signed-in areas. It processes in particular the page address and route, performance metrics, device type, browser, operating system, country and time. Vercel describes the stored measurements as not associated with individual visitors. This technical performance measurement is separate from Google Analytics and the analytics-cookie choice.

Frequently used flags are served locally. For other country flags, the browser may retrieve the image directly from flagcdn.com; the service then receives in particular the IP address, browser details, requested file and time of retrieval.

Website icons may be loaded directly from the relevant company website or an image provider specified there. That provider receives the IP address, browser details, image address and retrieval time, but no referrer sent by company.ch. Uploaded icons are served through company.ch. When you open an external website or make a phone call, the relevant provider’s privacy terms also apply.

We store listings, their association with the existing account, editing and publication states, and private contact details. Titles, descriptions, category, location, financial and offer details are public and may be indexed by search engines. The contact name, company name, phone number and contact email remain private unless you explicitly choose to display each detail in the listing. Published contact details may also be indexed by search engines. The account email is not published automatically. Information you enter into public text remains public.

When an enquiry is submitted, we forward the sender’s name, email address and message to the advertiser. We store the enquiry and delivery status for reliable delivery and abuse prevention. Parties may reply directly by email under their own responsibility. The provisions below concerning providers, security, retention and individual rights apply. Paused or closed listings are no longer public; removal from external search engines may take time.

We obtain public register data from Zefix, LINDAS and the SOGC publications supplied through those sources, store it in our database and update it from official sources. This may include company names, registered offices and business addresses, identifiers, status, purpose, and information about natural persons, their roles and signing authority. Company profiles are public and may be indexed by search engines, including for deleted companies. Deletion from the register does not automatically remove historical publications from company.ch.

For register search and suggestions, search terms, identifiers and necessary filters are sent server-side to the Confederation’s Zefix services. We retrieve current details when needed. Account and billing data are not sent. Opening official extracts or publication files transmits your browser’s technical connection data to the external service concerned. You can request correction or removal of our presentation at info@company.ch, specifying the profile URL; changes to the official register must be requested from the competent office.

For own projects, we store the account association, content, location, category, budget, deadlines and editing and publication states. Contact details marked public in the project form are published with the project and may be indexed by search engines. Email and telephone contacts take place directly with the project owner; further processing is the parties’ responsibility.

For public procurement, company.ch processes search terms and supported filters through the SIMAP API. Public publications may contain names and professional contact details of contracting authorities or other participants. We retrieve necessary data and cache responses temporarily. We do not send account or billing data to the API. SIMAP’s or a linked authority’s own privacy information applies when you visit their sites.

In business marketplace, franchise and own-project forms, incomplete input is automatically saved in the account as a private working draft. This includes contact and financial details already entered. An account-linked backup may also be kept in the browser’s local storage to preserve input if the connection fails. These drafts are not public; publication requires the corresponding action. Once successfully applied, draft contents are replaced by the saved listing version. Deleting an account removes its associated server-side working drafts; local browser data can also be cleared through your browser’s website-data settings.

When you click an affiliate link, your browser opens the network’s tracking address and then the provider. The network and provider may process your IP address, browser data, time, destination, and partner and click identifiers to attribute visits and transactions and calculate remuneration. Their sites may use cookies or comparable technologies. company.ch does not append your account email or billing data to these links. Awin’s and Adtraction’s privacy notices linked below also apply to their processing. The analytics choice on company.ch does not automatically control cookies on external sites you visit.

We use Vercel for hosting, delivery, technical performance measurement and AI Gateway, Neon for the database, Bright Data for website retrieval, Algolia for search and Postmark (ActiveCampaign) for email. Google and OpenAI process the button texts described above; Google also processes analytics data according to the cookie settings explained above. swisstopo may receive a postcode and town to determine the canton. External image providers receive the connection data described under image retrieval. Vercel also provides private file storage for retrieved website content and website icons. Algolia holds the public content and profile details needed for web search; account, enquiry and invoice data do not belong in that search index.

Other recipients include the company selected for an enquiry, PostFinance for payments, and public authorities, courts and professional advisers where needed to perform a contract, comply with a legal obligation or protect legal claims. The data shared depends on the respective task.

Processing is not limited to Switzerland. The services used include providers based in the United States (Vercel, Neon, Postmark/ActiveCampaign, OpenAI), Israel (Bright Data), France or the United States (Algolia) and Ireland or the United States (Google). A provider’s headquarters are not necessarily the storage location. The application is configured for the Vercel server region Frankfurt am Main (Germany). Postmark operates its email infrastructure in the United States. Cloud services may involve further processing locations depending on the selected region and support services; the provider information linked below describes their locations and subprocessors. Affiliate links additionally involve Awin (Germany) and Adtraction (Sweden). Zefix, LINDAS and SIMAP are Swiss sources. The linked affiliate privacy notices describe the networks’ independent processing and further recipients; processing locations of external providers you visit depend on their own disclosures.

Transfers to countries without adequate protection recognised by the Swiss Federal Council require additional safeguards or a statutory exception. The published data processing terms of Vercel and Postmark provide in particular for standard contractual clauses with Swiss amendments. Where an applicable Swiss-U.S. Data Privacy Framework certification exists, it may safeguard the covered transfers to the United States. You can request details of recipients, countries and safeguards used for a specific processing activity at info@company.ch.

• Vercel
• Neon
• Bright Data
• Algolia
• Postmark
• Awin
• Adtraction
• Google
• OpenAI

Data is retained only as long as needed for its purpose, security, billing, statutory duties or claims. Operational cleanup generally uses a 90-day threshold for personal delivery data from completed email processes and for search events and impressions. Cleanup is initiated administratively; older records may remain until it runs.

When a company profile is deleted, its public presentation and open drafts are removed. The latest stored profile state may remain non-public together with necessary authority and order evidence and existing subscription, enquiry and invoice data for as long as required for account administration, abuse prevention, legal obligations or legal claims. Deleting a profile does not automatically delete the account.

Accounting records, supporting documents and the invoice data required for them are generally retained for ten years from the end of the relevant financial year.

company.ch uses appropriate technical and organisational safeguards to protect data against unauthorised access, loss and misuse in proportion to the relevant risk. Absolute protection cannot be guaranteed.

Within the scope of Swiss data protection law, individuals may in particular request access to, correction, deletion or release of their personal data and may object to specific processing. Consent may be withdrawn for the future. Legal obligations, overriding interests or third-party rights may restrict these rights. Requests should be sent to info@company.ch; proof of identity may be required. A right to receive or transfer data in a commonly used electronic format applies under the statutory conditions.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) about suspected data protection violations. If your request concerns a search result, please include the relevant web address so that we can review a correction or removal.

• FDPIC – Rights and contact

We update this privacy notice if the processing, service providers or legal requirements change materially. The version published on company.ch applies, and material changes will be indicated appropriately.