This policy explains personal data processing when you visit burri.consulting and sardona.io or send contact and demo enquiries to Burri Consulting GmbH. It covers the public information websites. Data processing, roles and contractual arrangements for the Sardona application and supplier portal are defined separately as part of service provision.
1. Controller and contact
The controller is Burri Consulting GmbH, Birren 10a, 5703 Seon, Switzerland. For privacy matters, contact Felix Burri at contact@burri.consulting or +41 62 776 04 04.
2. Website access and hosting
Both information websites use Microsoft Azure Static Web Apps. Access involves processing connection data, including IP address, requested address, time, browser and device information, and technical status and error data. This supports delivery, availability, troubleshooting and website security. Azure uses globally distributed infrastructure; website hosting is not a commitment to processing exclusively in Switzerland. Fonts and images are served from the respective website.
3. Contact and demo enquiries
The websites offer contact by email and telephone. An email link opens your own email application; a message is transmitted only when you send it. We process contact details, message contents and related correspondence to respond, arrange appointments, prepare a demo and establish or perform a business relationship. We use Microsoft 365 for email; messages are stored in our mailbox. Please do not send credentials or confidential client documents in an initial enquiry.
4. Statistics and local settings
On burri.consulting, cookieless Plausible statistics load only after you choose “Allow statistics”. Without consent, there is no connection to Plausible. Statistics cover pageviews and technical usage attributes; the provider states that processing takes place in the EU without storing raw IP addresses. We send no enquiry contents. Your choice is stored in this browser’s Local Storage for six months, after which we ask again. You can change it at any time through “Statistics settings” in the footer. Withdrawal stops further collection but does not remove statistics already transmitted. Language is determined by the page address. sardona.io has no additional audience analytics. Technical processing by the hosting provider is independent of this.
5. Recipients and processing abroad
Access is limited to people handling the enquiry or website operation at Burri Consulting and the relevant service providers: Microsoft for Azure hosting and Microsoft 365, and Plausible Insights OÜ in Estonia only where Burri statistics have been enabled. We do not sell personal data. Microsoft services can involve group companies and subprocessors in Switzerland, the European Economic Area and the United States. Such disclosures are governed by the service’s data protection agreements, including the standard contractual clauses and supplementary safeguards specified there for countries without an adequate level of protection. Further information: Microsoft Data Protection Addendum and Plausible Data Policy.
6. Retention
We retain personal data for as long as needed to handle the enquiry, conduct the relationship, maintain security or establish and enforce claims. Statutory retention duties remain applicable. Data is then deleted or anonymised. Retention of technical operational and security data depends on its operational purpose and the settings or requirements of the services used.
7. Applicable law and purposes
Processing is governed by the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, necessary pre-contractual and contractual processing relies on Article 6(1)(b), legal duties on (c), and secure operation and general enquiries on legitimate interests under (f). Optional statistics on burri.consulting rely on your consent under (a). The information websites do not make solely automated individual decisions producing legal or similarly significant effects.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or object to processing and, where provided, request delivery or transfer of data. You may withdraw consent at any time for the future; this does not affect the lawfulness of previous processing. Send requests to the contact above. We may require reasonable proof of identity. You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent supervisory authority.
9. Security and external links
We use technical and organisational measures to protect data. The websites use HTTPS. Ordinary email is not end-to-end encrypted throughout its transmission. External links, including LinkedIn, the quality label and Sardona login and portal, lead to separate services with their own processing and notices. Displaying a link does not load an embedded social media plugin from that service.
10. Changes
We update this policy when the websites or processing change. The version published on this page with the date above is the current version.