Privacy Policy (Last updated: 19 December 2025)
1. Privacy at a Glance
This Privacy Policy explains what personal data we collect, how we process it, and what
rights you have when you visit our website or interact with us.
Personal data means any information that can identify you directly or indirectly (e.g., name, email address, IP address).
Personal data means any information that can identify you directly or indirectly (e.g., name, email address, IP address).
2. Controller (Responsible Entity)
Tithonos GmbH
Ruhsitzstrasse 15
9000 St. Gallen
Switzerland
Email: info@tithonos.ch
Website: www.tithonos.ch
Ruhsitzstrasse 15
9000 St. Gallen
Switzerland
Email: info@tithonos.ch
Website: www.tithonos.ch
3. What Data We Collect
Depending on how you use our website and services, we may process the following
categories of personal data:
3.1 Technical data (collected automatically):
IP address
Date and time of access
Browser type/version
Operating system
Referrer URL
Host/device information (where transmitted)
Access status/error codes
IP address
Date and time of access
Browser type/version
Operating system
Referrer URL
Host/device information (where transmitted)
Access status/error codes
3.2 Communication data (when you contact us):
Name
Email address, phone number
Content of your request and any attachments
Communication metadata (time, channel)
Name
Email address, phone number
Content of your request and any attachments
Communication metadata (time, channel)
3.3 Contract and customer data (when you purchase/engage services):
Identification and contact details
Billing details and payment-related information (depending on payment method)
Contract/project data and correspondence
Identification and contact details
Billing details and payment-related information (depending on payment method)
Contract/project data and correspondence
3.4 Applicant data (if you apply for a role):
Application documents (CV, certificates, cover letter)
Notes from interviews (where applicable)
Application documents (CV, certificates, cover letter)
Notes from interviews (where applicable)
3.5 Analytics/marketing data (only where enabled / consented):
Usage behaviour (e.g., page views, time on site, click paths)
Marketing/conversion data (e.g., campaign parameters)
Usage behaviour (e.g., page views, time on site, click paths)
Marketing/conversion data (e.g., campaign parameters)
4. Why We Use Your Data (Purposes)
We process personal data primarily for:
Operating, securing, and maintaining our website (including troubleshooting and abuse
prevention)
Responding to inquiries and communicating with you
Initiating, concluding, and performing contracts and services
Billing, accounting, and claims enforcement
Improving our website, services, and user experience
Analytics and marketing (only within the scope of configured tools and your choices)
Compliance with legal obligations (e.g., retention duties)
5. Legal Bases (Switzerland / EU)
Switzerland (revDSG)
We process personal data in accordance with Swiss data protection law, including the
principles of purpose limitation, proportionality, and data security.
EU / GDPR (where applicable)
Where GDPR applies (e.g., visitors from the EU/EEA), processing may be based on:
Consent (e.g., analytics/marketing cookies)
Contract / pre-contractual measures (e.g., o`ers, onboarding)
Legitimate interests (e.g., website security, service optimisation)
Legal obligation (e.g., statutory retention)
6. Hosting and Processors
Our website may be hosted by an external service provider. Personal data collected via
the website (especially technical data and logs) may be processed on the host’s servers.
The hosting provider processes data only as necessary to provide its services and
according to our instructions (as a processor).
7. Cookies and Similar Technologies
We use cookies and similar technologies. Cookies are small text files stored on your device.
7.1 Types of cookies
Strictly necessary cookies: essential for basic functionality/security
Functional cookies: e.g., preferences such as language
Analytics cookies: measuring usage to improve performance
Marketing cookies: conversion tracking and remarketing
7.2 Managing cookies
You can delete or block cookies via your browser settings. Disabling cookies may reduce website functionality.
If we use a cookie banner/consent tool, analytics and marketing technologies are only activated if you consent.
You can delete or block cookies via your browser settings. Disabling cookies may reduce website functionality.
If we use a cookie banner/consent tool, analytics and marketing technologies are only activated if you consent.
8. Server Log Files
To ensure technical operation and security, we process server log data (e.g., IP address,
access time, browser, referrer). As a rule, this data is not merged with other data
sources.
9. Contacting Us
If you contact us (via form, email, or phone), we process your data to handle your
request and follow up where necessary. Retention: until completion of the request, then according to statutory retention duties
or as long as needed to establish, exercise, or defend legal claims.
10. Applications
If you submit an application, we process your applicant data exclusively for recruitment
purposes.
Retention: if no employment relationship is established, we generally retain applicant
data for up to 6 months after completion of the process, unless longer retention is
required (e.g., consent or legal claims).
11. Analytics and Marketing Tools (Third Parties)
Depending on configuration, we may use the following tools. These tools may process
data (including IP address and usage data) and may transfer data to countries outside
Switzerland/EEA.
11.1 Google Tag Manager
Used to deploy and manage website tags. Tag Manager typically does not create user profiles by itself, but may transfer technical data (e.g., IP address) in the course of operation.
Used to deploy and manage website tags. Tag Manager typically does not create user profiles by itself, but may transfer technical data (e.g., IP address) in the course of operation.
11.2 Google Analytics
Used to analyse user behaviour (e.g., page views, time on site). Google may process data on servers outside Switzerland/EEA depending on configuration.
Used to analyse user behaviour (e.g., page views, time on site). Google may process data on servers outside Switzerland/EEA depending on configuration.
11.3 Meta (Facebook) Pixel
Used to measure conversions and optimise advertising campaigns. Data may be transmitted to Meta and processed in third countries. Opt-out: via our consent settings and, where applicable, via the provider’s account/ad preferences.
Used to measure conversions and optimise advertising campaigns. Data may be transmitted to Meta and processed in third countries. Opt-out: via our consent settings and, where applicable, via the provider’s account/ad preferences.
12. Embedded Content and Plugins (Third Parties)
12.1 YouTube (Enhanced Privacy Mode where enabled)
If we embed YouTube videos, playing a video may establish a connection to YouTube/Google servers and trigger data processing.
If we embed YouTube videos, playing a video may establish a connection to YouTube/Google servers and trigger data processing.
12.2 Google Maps
Used to display maps. Your IP address may be processed to provide the service.
Used to display maps. Your IP address may be processed to provide the service.
12.3 Google reCAPTCHA
Used to protect forms from abuse/spam. reCAPTCHA analyses behaviour signals (e.g., IP address, interaction patterns).
Used to protect forms from abuse/spam. reCAPTCHA analyses behaviour signals (e.g., IP address, interaction patterns).
12.4 Fonts / Icons (e.g., Font Awesome)
If hosted locally, no connection to external servers occurs. If loaded externally, data transmission may occur.
If hosted locally, no connection to external servers occurs. If loaded externally, data transmission may occur.
13. Data Sharing
We only share personal data where:
necessary for contract performance, you have consented, we are legally required to do so, or necessary to establish, exercise, or defend legal claims. Typical recipients: IT/hosting/support providers (processors) payment and banking providers (if used) authorities/courts (where legally required)
necessary for contract performance, you have consented, we are legally required to do so, or necessary to establish, exercise, or defend legal claims. Typical recipients: IT/hosting/support providers (processors) payment and banking providers (if used) authorities/courts (where legally required)
14. International Data Transfers (e.g., United States)
If we use tools whose providers process data in third countries (e.g., the United States),
the level of data protection may di`er from Switzerland/EEA. Where required and
appropriate, we use safeguards (e.g., standard contractual clauses) and implement
technical/organisational measures.
15. Data Retention
We retain personal data only for as long as necessary for the respective purpose or as
required by law. Thereafter, data is deleted or anonymised.
16. Data Security
We implement appropriate technical and organisational measures to protect data
against unauthorised access, loss, or manipulation. However, complete security of
internet transmissions (e.g., email communication) cannot be guaranteed.
17. Your Rights
Depending on applicable law, you may have the right to:
access your personal data
request correction of inaccurate data
request deletion (where no retention obligation exists)
request restriction of processing (under certain conditions)
object to processing (especially direct marketing, where applicable)
receive your data / data portability (where applicable)
To exercise your rights, contact us at: info@tithonos.ch
18. Complaints Switzerland
You may contact the Swiss Federal Data Protection and Information Commissioner
(FDPIC) regarding data protection concerns.
EU/EEA (where GDPR applies)
You also have the right to lodge a complaint with a competent supervisory authority.
19. External Links
Our website may contain links to external websites. We are not responsible for their
content or privacy practices. Please review their privacy policies separately.
20. Changes to This Privacy Policy
The current version will be published on our website.