Privacy policy

Last updated: 2026-08-23

Who is responsible

Monolith Software, Basel, Switzerland (legal entity details on the imprint page) is responsible for the processing of personal data on this website. Contact: see imprint. This policy is written for the Swiss Federal Act on Data Protection (FADP) and, where it applies to visitors from the EU/EEA, the GDPR.

What we process and why

Enquiry form: name, e-mail address, company, optional role, company size, project type, your description, systems, timeline, budget range, how you heard about us, language, and the time of submission. Purpose: to answer your enquiry and prepare a written assessment. Legal basis (GDPR): pre-contractual measures (Art. 6(1)(b)) and your consent given with the form (Art. 6(1)(a)). The data is transmitted to us by e-mail through Resend, Inc. (USA; data processing agreement and EU standard contractual clauses) and stored in our mailbox and, if we proceed, in our project records. We keep enquiry data for as long as needed to handle it and any resulting business relationship, and delete it at the latest 24 months after the last contact unless legal retention duties apply.

E-mail: if you e-mail us, we process the data you send for the purpose of the correspondence.

Hosting and server logs: the site is hosted on Vercel (Vercel Inc., USA, with EU/CH edge locations). Vercel processes technical data (IP address, user agent, requested URL, time) to deliver the site and for security. Transfers to the USA are covered by Vercel’s data processing terms and standard contractual clauses. See vercel.com/legal/privacy-policy.

Analytics (optional, only with your consent): if you click “Allow analytics” in the cookie banner, we load Google Analytics 4 (Google Ireland Ltd.) to understand which pages lead to enquiries. IP addresses are anonymised; advertising features are disabled. You can withdraw consent at any time via “Cookie settings” in the footer. Without consent, no analytics script is loaded and no analytics cookie is set. Google may transfer data to the USA under the EU–US Data Privacy Framework.

Fonts: web fonts are served from our own hosting; no request is made to Google Fonts or other third parties.

Cookies and local storage

Strictly necessary: none, except a local-storage entry that remembers your cookie choice. Analytics cookies are set only after consent (_ga, _ga_*). No advertising or tracking cookies.

Spam protection

The enquiry form uses a hidden field and a timing check to reject automated submissions. No third-party CAPTCHA service is used.

Your rights

You may request information about, correction or deletion of your personal data, restriction of processing, data portability, and object to processing. You may withdraw consent at any time with effect for the future. Contact us via the details on the imprint page. EU/EEA residents may complain to a supervisory authority; in Switzerland the FDPIC (edoeb.admin.ch) is the competent authority.

Data security

We use transport encryption (HTTPS), access-restricted mailboxes and repositories, and process enquiry data only for the purposes stated.

Changes

We update this policy when the website or our processing changes. The date of the last update is shown above.