Legal
Privacy policy
Data controller
Niederhauser Consulting, sole proprietorship
Owner: Patrick Manolito Niederhauser
Leimbachstrasse 221 · 8041 Zurich · Switzerland
Email: info@niederhauser-consulting.com
Scope and legal bases
This privacy policy explains how personal data is processed when visiting this website, contacting us and using our customer support. In particular, the Swiss Federal Act on Data Protection (FADP) applies. Where the European Union General Data Protection Regulation (GDPR) applies, processing is based in particular on Article 6(1)(b) GDPR for steps prior to entering into or performing a contract, Article 6(1)(c) GDPR for compliance with legal obligations and Article 6(1)(f) GDPR for our legitimate interests in secure operations, communication and business activities.
Website access and server logs
When the website is accessed, the hosting provider processes technically necessary data. This may include the IP address, date and time, requested page or file, amount of data transferred, referrer URL, browser, operating system, device type and status messages. Processing serves secure delivery, troubleshooting, prevention of misuse and system security. Log data is retained only for as long as required for these purposes or by law.
Hosting
The website is hosted by hosttech GmbH in Switzerland. The hosting provider processes technical data on our behalf where required for operation, security, maintenance and support. The data protection agreements required by law are concluded with service providers.
Contact and Microsoft 365
When you contact us by email, we process the sender address, contact details, content, attachments and communication metadata to handle the enquiry, prepare or perform a contract and maintain records. Email communication is processed through Microsoft 365. Microsoft may act as a processor or sub-processor.
Contact form on this website
When you submit the contact form, we process the information you enter — name, company (optional), email address and message — to review, answer and document your enquiry. The information is transmitted to our web server in encrypted form and sent directly through a server-side interface as a ticket to our self-hosted osTicket system. The ticketing system also stores the ticket number, time, processing status and communication history. The data is not used for advertising without an appropriate legal basis
Customer support and ticketing system
The contact form and support.niederhauser-consulting.com use the same self-hosted osTicket system on our Swiss hosting infrastructure. The data is used to assign, process, document and track contact and support enquiries. For abuse prevention and system security, the IP address, time stamp and limited technical log data may be processed temporarily. Necessary session cookies may be used in the support portal. Please do not submit passwords, access codes or unnecessary sensitive personal data
Technically necessary local storage
This website uses no analytics, marketing or tracking services. Only technically necessary settings are stored locally in the browser, such as the status and playback position of the optional background music. This data is not transmitted to Niederhauser Consulting or third parties and is not used for profiling.
Recipients and processors
Personal data may be disclosed to technical service providers where required for hosting, IT security, email communication, support, maintenance or compliance with legal obligations. Where acting as processors, service providers may process data only for the agreed purposes and in accordance with our instructions.
Disclosure abroad
Some service providers, in particular Microsoft and its sub-processors, may process personal data outside Switzerland or the European Economic Area. Where data is disclosed to a country without an adequate level of data protection, legally recognised safeguards are used, in particular approved standard data protection clauses, unless a statutory exception applies.
Retention period
Contact and support tickets are retained for as long as required to process and document the enquiry, follow up on possible subsequent questions and comply with statutory evidence and retention obligations. Data that is no longer required is deleted or anonymised. Swiss law may require business records to be retained for ten years
Data security
We take appropriate technical and organisational security measures to protect personal data against loss, misuse, unauthorised access and unlawful alteration. Website data is transmitted using HTTPS encryption. Absolute protection cannot be guaranteed for data transmissions over the internet.
Your rights
Under applicable data protection law, you have in particular the right to access, rectification, deletion or restriction of processing and, where provided, data disclosure or portability and objection. Consent may be withdrawn with effect for the future. To exercise your rights, contact info@niederhauser-consulting.com. Reasonable information may be requested to verify your identity. Data subjects may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, a competent European data protection supervisory authority.
NC AI Assistant
The NC AI Assistant provides guided navigation and answers free-text questions about our publicly described services and content. When you submit a free-text question, your text is transmitted to OpenAI through a server-side protected interface and processed automatically. Please do not enter confidential, personal or sensitive information. Niederhauser Consulting does not permanently store chat transcripts. OpenAI may process technical security and abuse-monitoring logs under the data-protection and retention terms applicable to its API. Answers are for general orientation only and do not constitute binding legal, tax, accounting or SAP product advice.
No automated individual decisions
No automated individual decision-making or profiling with legal or similarly significant effects takes place in connection with this website.
Changes to this privacy policy
This privacy policy may be amended if the website, services used or legal requirements change. The version published on this website at the relevant time applies.
Last updated: August 2026