Privacy policy
Last updated: 5 October 2026
This policy explains how we process the personal data of people who visit sdbid.ch or contact us. It is drawn up under the Swiss Federal Act on Data Protection (FADP) and, for data subjects located in the European Union, under Regulation (EU) 2016/679 (GDPR, Arts. 13 and 14) and the applicable Italian legislation (Legislative Decree 196/2003).
1. Controller
Four us Holding Sagl
Guggerhofstrasse 1, 6374 Buochs (NW), Switzerland
UID: CHE-213.676.521
E-mail: info@sdbid.ch
SdBid is a brand of Four us Holding Sagl. For any request concerning personal data, please write to the address above.
2. Data we process
- Data you provide through the contact form or by e-mail: first and last name, company (optional), e-mail address, content of the message.
- Browsing data: IP address, date and time of the request, page requested, browser type and operating system. These are recorded automatically in the hosting provider's logs to keep the site working and secure.
The site does not use analytics tools, does not profile visitors and does not set marketing cookies. Please do not include special categories of data (such as health data) in your message.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to requests sent through the form or by e-mail and preparing offers | Pre-contractual measures at the data subject's request (Art. 6(1)(b)) and legitimate interest in handling incoming business communications (Art. 6(1)(f)) |
| Technical operation, site security and prevention of abuse and spam | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations and establishment or defence of legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Under the FADP, processing is carried out lawfully, in good faith, proportionately and for the stated purposes. We do not send newsletters or promotional communications unless you ask for them or give specific consent.
4. Whether you must provide data
The fields marked as required in the form are necessary for us to reply. Without them we cannot follow up on your request.
5. Recipients and providers
Data are processed by the controller's authorised staff and by providers acting on our behalf as processors:
- Netlify, Inc. (United States): website hosting and technical handling of the contact form.
- Hostpoint AG (Rapperswil-Jona, Switzerland): domain and e-mail management.
Data may be disclosed to advisers and authorities where required by law. We do not sell personal data or pass them to third parties for marketing purposes.
6. Transfers abroad
The controller is based in Switzerland, a country covered by a European Commission adequacy decision. Hosting involves a transfer of data to the United States, which takes place on the basis of the safeguards provided by law, in particular standard contractual clauses and, where applicable, the Data Privacy Framework (EU–US and Swiss–US).
7. Retention periods
- Contact requests: for as long as needed to handle them and in any case no longer than 24 months after the last contact, unless a contractual relationship arises.
- Data relating to contractual relationships: 10 years, in line with statutory retention obligations.
- Technical logs: for the period set by the hosting provider, normally no longer than 30 days.
8. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting processing already carried out. To exercise your rights, write to info@sdbid.ch: we reply within 30 days.
You also have the right to contact the supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch
- Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it
- Other EU countries: the authority of the place where you live or work.
9. Automated decisions
We do not take decisions based solely on automated processing, including profiling.
10. Security
The site is served exclusively over an encrypted connection (HTTPS). We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure.
11. Changes
We may update this policy. The version in force is always the one published on this page, with the date of the last update shown at the top. In case of discrepancies between language versions, the Italian version prevails.