Privacy notice

Draft. This notice describes how this website actually works (as of 5 October 2026). It must be legally reviewed before publication on novanta.design. The German version is authoritative.

Controller

Novanta, Sinoe Weiss, Wannerstrasse 26, 8045 Zürich, Switzerland. Email: [email protected]. We follow the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU GDPR.

Hosting

This website is delivered by Cloudflare Pages (Cloudflare, Inc., San Francisco, USA). Cloudflare processes technically necessary data such as IP address, time, page and browser to deliver and protect the website. Data may be transferred to the USA (legitimate interest, Art. 6(1)(f) GDPR).

Request form

When you submit the form we process the restaurant name, your name, your email, your message, your request type, language and page. Optional: town, your current website and, for an intro call, your preferred times (time of day and weekdays). We use them to handle your request and contact you by email (Art. 6(1)(b) GDPR). Requests are stored in a Cloudflare D1 database and forwarded to our mailbox. To prevent abuse we store a one-way hash of your IP address, not the address itself.

Delivery to our mailbox uses the email service Resend (Resend, Inc., San Francisco, USA) as our processor. Resend receives the content of your request and sends it to us. As Resend is a US company, access from the USA cannot be ruled out; the transfer relies on the EU Standard Contractual Clauses in Resend's data processing agreement.

We delete your request 12 months after our last communication unless it leads to an order. If it does, statutory retention periods apply.

Abuse protection (Cloudflare Turnstile)

To protect the form from automated requests (bots) we use Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile only loads once you use the form. Technical characteristics of your browser and device and your IP address are sent to Cloudflare and evaluated to tell humans from bots. Turnstile sets no advertising cookies. Legal basis: our legitimate interest in a secure form (Art. 6(1)(f) GDPR). Data may be transferred to the USA.

Statistics without cookies

We count actions such as clicks on “Contact” or form submissions. Only the action name, page and language are sent. No cookies, no IP addresses, no profiles. Counting happens at Cloudflare (Workers Analytics Engine).

Cookies and fonts

This website sets no cookies. Fonts are served from our own server.

Your rights

You can request access, correction, deletion, restriction or a copy of your data, and object to processing: [email protected]. You may also complain to a supervisory authority, in Switzerland the FDPIC, in the EU the authority of your country of residence.