Legal Notice & Privacy Policy

1. Legal Notice (Impressum)

Information about the operator of this website.

Operator of this website

Company

Numainu GmbH

Address

Florastrasse 15
8008 Zürich
Switzerland

Legal form

Gesellschaft mit beschränkter Haftung (GmbH), registered seat in Zürich, Switzerland

Managing Director

Thomas Biedermann (with sole signing authority)

Email

hello@numainu.com

Commercial register

Commercial Register Office of the Canton of Zurich

Company ID (UID)

CHE-159.084.543

Responsible for content

Thomas Biedermann, address as above

Disclaimer

The content of this website has been prepared with care. Nevertheless, Numainu GmbH gives no warranty as to the correctness, accuracy, timeliness, reliability or completeness of the information provided. Liability claims against Numainu GmbH for material or immaterial damage arising from access to, use or non-use of the published information, from misuse of the connection, or from technical faults are excluded to the extent permitted by law.

All offers on this website are non-binding. Numainu GmbH expressly reserves the right to change, supplement or delete parts of the site or the entire offering without prior notice, or to discontinue publication temporarily or permanently.

Links to third-party websites

This website contains links to external websites operated by third parties (for example the project references). Numainu GmbH has no influence over the content of those websites and accepts no responsibility for them. The operator of the linked site is solely responsible for its content, and for any damage arising from its use. Any use of such links is at the user's own risk.

Copyright

The copyright and all other rights to the content, images, photographs and other files on this website belong exclusively to Numainu GmbH or to the specifically named rights holders. Written consent from the rights holder must be obtained in advance for the reproduction of any element.

Governing law and place of jurisdiction

Use of this website is governed exclusively by Swiss law. The exclusive place of jurisdiction is Zurich, Switzerland, subject to any mandatory statutory places of jurisdiction.

2. Privacy Policy

How we handle personal data on numainu.com.

2.1 Controller

The controller responsible for the processing of personal data on this website is:

We have not appointed a data protection officer, and we are not required to do so. Please direct all data protection enquiries to the address above.

2.2 Scope and legal framework

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/DSG) and its Ordinance (DPO/DSV). Where visitors from the European Economic Area use this website and the General Data Protection Regulation (GDPR) applies to that processing, we also process personal data in accordance with the GDPR.

Where the GDPR applies, we rely on the following legal bases: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures taken at your request (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), and our legitimate interest in operating a secure, functional website and communicating with prospective clients (Art. 6(1)(f) GDPR). Under Swiss law, processing described here is carried out on the basis of the principles of Art. 6 FADP; no separate justification is required for processing that is transparent, proportionate and carried out for the stated purpose.

We have not appointed a representative in the EU under Art. 27 GDPR, as our processing of EEA residents' data is occasional, low-risk and does not involve special categories of data.

2.3 Server log files

When you visit this website, our hosting provider automatically records data that your browser transmits. This is technically necessary to deliver the website and to keep it secure. The following data may be recorded:

• IP address of the requesting device
• Date and time of the request
• Name and URL of the file requested
• HTTP status code and volume of data transferred
• Referrer URL (the page from which you came)
• Browser type, browser version and operating system

Purpose: delivery of the website, ensuring stability and security of the infrastructure, detection and investigation of attacks and misuse. Where the GDPR applies, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).

Retention: log data is deleted or anonymised after 30 days unless it is needed longer to clarify a specific security incident.

2.4 Contact form and contact by email

If you use the contact form on our website, we process the data you enter — your name, your email address and the content of your message. All three fields are mandatory; without them we cannot process your enquiry. The same applies if you contact us directly by email at hello@numainu.com.

Purpose: processing and answering your enquiry, and any follow-up communication resulting from it. Where the GDPR applies, the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries addressed to us).

Transmission: messages submitted via the contact form are not stored in a database on this website. They are forwarded directly as an email to our mailbox using the email delivery service described in section 2.5.

Retention: we retain your enquiry and our correspondence for as long as is necessary to answer it and to handle any resulting business relationship. Where a business relationship arises, statutory retention obligations apply — in particular the ten-year retention obligation for business records under Art. 958f of the Swiss Code of Obligations. Enquiries that do not lead to a business relationship are deleted after 12 months.

2.5 Email delivery service (Mailgun)

To deliver messages sent through the contact form to our mailbox we use Mailgun, a service of Sinch Email (Mailgun Technologies, Inc.). In this process, the name, email address and message content you submitted are transmitted to and processed by Mailgun on our behalf, together with the technical metadata required for delivery.

Mailgun acts as our processor on the basis of a data processing agreement. Depending on the region configured for our account, processing may take place on servers in the United States. See section 2.7 on international transfers.

2.6 External resources

This website loads no resources from third-party servers. All fonts, images, stylesheets and scripts are hosted on our own server and are delivered together with the page. No connection to Google Fonts, to a content delivery network, or to any other external provider is established when you visit this site, and no data about you is therefore transmitted to such providers.

2.7 Disclosure and transfer abroad

We do not sell personal data and we do not disclose it to third parties for advertising purposes. Personal data is disclosed only to the processors listed in section 2.8, where we are legally obliged to disclose it, or where disclosure is necessary to assert, exercise or defend legal claims.

Where personal data is transferred to a country outside Switzerland or the EEA, we ensure an adequate level of protection — either because the Swiss Federal Council and/or the European Commission has recognised the country concerned as providing adequate protection (for the United States: the Swiss–U.S. Data Privacy Framework and the EU–U.S. Data Privacy Framework, for certified recipients), or on the basis of the Standard Contractual Clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission, supplemented where necessary by additional safeguards.

2.8 Cookies, tracking and analytics

This website does not set any cookies and does not use local storage, session storage or comparable techniques to store information on your device. We do not use web analytics, conversion tracking, retargeting, advertising pixels, heat maps, A/B testing tools or social media plugins. Consequently, no consent banner is required and no profiling takes place.

Should we introduce such technologies in the future, we will amend this privacy policy and — where legally required — obtain your consent beforehand.

2.9 Data security

This website is delivered exclusively over an encrypted TLS connection (HTTPS), which you can recognise by the lock symbol in your browser's address bar. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and alteration. Please note that data transmission over the internet can never be guaranteed to be completely secure.

2.10 Automated individual decision-making

We do not carry out automated individual decision-making, including profiling, within the meaning of Art. 21 FADP or Art. 22 GDPR on the basis of data collected through this website.

2.11 Your rights

Subject to the conditions and exceptions of applicable data protection law, you have the following rights in relation to the personal data we process about you:

• Right of access — to obtain confirmation as to whether we process personal data about you and, if so, to receive that data and the associated information (Art. 25 FADP, Art. 15 GDPR).
• Right to rectification — to have inaccurate personal data corrected (Art. 32 FADP, Art. 16 GDPR).
• Right to erasure — to have your personal data deleted where the legal conditions are met (Art. 32 FADP, Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to object — to object to processing based on a legitimate interest, on grounds relating to your particular situation (Art. 30 FADP, Art. 21 GDPR).
• Right to data portability — to receive personal data you have provided to us in a common electronic format, or to have it transmitted to another controller (Art. 28 FADP, Art. 20 GDPR).
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time with effect for the future.
• Right to lodge a complaint — with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, where the GDPR applies, with the supervisory authority of your EEA country of residence.

To exercise any of these rights, please write to hello@numainu.com. We may ask you for proof of identity before responding, in order to prevent disclosure of your data to unauthorised persons.

2.13 Changes to this privacy policy

We may amend this privacy policy at any time to reflect changes in our processing activities or in the applicable law. The version published on this page at the time of your visit applies.

3. Accessibility

Our commitment regarding barrier-free access.

We want numainu.com to be usable by as many people as possible. As a private company, Numainu GmbH is not subject to the accessibility obligations that the Swiss Disability Discrimination Act (BehiG) and its ordinance impose on federal authorities. We nevertheless aim to align this website with the Web Content Accessibility Guidelines (WCAG) 2.1, conformance level AA.

Measures currently implemented include: semantic HTML structure with a logical heading hierarchy, text alternatives for meaningful images, keyboard operability with visible focus indicators, a skip link to the main content, labelled form fields, and respect for the operating system setting "reduce motion", which disables the animations and smooth scrolling on this site.

If you encounter a barrier on this website or need information in an alternative format, please contact us at hello@numainu.com. We will look into it and respond as quickly as we can.