Privacy policy

1. Controller

The controller is Your Ultimate Workspace, owned by Marco Jucker, Mattenweg 24, 3225 Müntschemier, Switzerland (UID CHE-184.877.966).

Send privacy questions to hello@vendra.ch.

2. Visiting the website, analytics and advertising

When you open the website, our hosting provider processes technically necessary data such as IP address, time, page requested and browser. This data keeps the site secure and running and is not combined with other data.

Audience measurement: A cookieless analytics service from our hosting provider shows us which pages are visited and how often. It records the page viewed, referring website, country, device type, operating system and browser. The service sets no cookies. Visits are counted with a hash that expires after 24 hours, so we cannot recognise you or follow you across other websites.

Search advertising: We may place ads in search engines, for example through Google Ads or Microsoft Advertising (Bing). We then use the provider's conversion tracking to measure whether a click on an ad leads to a request or sign-up. For this the website loads a script from the provider (such as the Google tag). It can set cookies and sends data such as IP address, device and browser details, pages viewed and the ad's click ID. We only receive aggregated statistics that do not identify you personally. The providers also process this data as their own controllers and may transfer it to the USA; their privacy policies apply (policies.google.com/privacy, privacy.microsoft.com).

We advertise only in search results. We do not place ads on other websites and do not use the data to show you ads elsewhere (retargeting).

Audience measurement is based on our legitimate interest in improving the website. We only turn on conversion tracking if you agree in the cookie banner. You can change or withdraw your choice at any time via "Cookie settings" in the website footer. You can also block or delete cookies in your browser and turn off personalised ads with the provider (adssettings.google.com, account.microsoft.com/privacy/ad-settings). The website works fully without consent.

Cookies: NEXT_LOCALE stores your chosen language for one year so the website greets you in your language next time. vendra_consent stores your cookie banner choice for one year. If you agree and we use conversion tracking, the providers set their own cookies as well (such as Google's _gcl_au or Microsoft's _uetsid and _uetvid), kept for up to 13 months.

3. Demo requests and contact form

When you request a demo or write to us through the contact form, we process your name, email address, message and optional details such as company or team size. We use this data only to answer your request.

Requests reach us through an email service provider. We keep them as long as needed to handle them and for any resulting business relationship.

4. Account and use of the app

For an account we process name, email address, team role and sign-in data. With passkey sign-in we store only the public key; the private key stays on your device. If you sign in with Google, Google gives us your name and email address.

Data you enter in Vendra (leads, contacts, appointments, contracts, files) is processed on behalf of your company. Your company is the controller for this data; we process it only to provide Vendra. Each company's data is strictly separated from other companies' data.

5. Company data from public sources

Vendra shows companies from public registers: the Swiss commercial register (Zefix), the UID register of the Federal Statistical Office and the address services of geo.admin.ch. For sole proprietorships this data can include the owner's name.

We also take the phone number and email address a company publishes on its own website, for example in its legal notice. We store them only when the page is verified to belong to the company (matched by UID or name and town), and refresh them regularly.

Our legitimate interest is to give sales teams current, publicly available company data. You can object to the use of your data at any time by writing to hello@vendra.ch.

6. Payments

Subscriptions are billed through Stripe. You enter your payment details directly with Stripe, which processes them; we never receive full card details, only the subscription status and billing information.

7. Service providers and transfers abroad

We use carefully selected service providers that process data on our behalf:

• Website hosting and audience measurement (provider based in the USA)
• App servers and database, located in the EU (provider based in the USA)
• Storage of uploaded files and contract PDFs (provider based in the USA)
• Sending emails (provider based in the USA)
• Stripe Payments Europe Ltd. (Ireland): payment processing
• Google Ireland Ltd. (Ireland): sign-in with Google; for search ads, Google Ads conversion tracking
• Microsoft Ireland Operations Ltd. (Ireland): for search ads, Microsoft Advertising conversion tracking

We will name the individual providers on request. Some are based in the USA. We transfer data there only when adequate protection is ensured, for example through the Swiss-U.S. or EU-U.S. Data Privacy Framework or standard contractual clauses.

We do not sell personal data. Data reaches ad providers only through the conversion tracking described in section 2; data you enter in Vendra is never part of it.

8. Retention and security

We keep personal data only as long as needed for its purpose or required by law. Business records such as signed contracts and invoices are kept for the statutory ten years.

Connections are encrypted (TLS). Access is limited to the people who need it, and different companies' data is separated at database level.

9. Your rights

You can ask for access to your data, have it corrected or deleted, object to its processing and receive it in a common format. Write to us at hello@vendra.ch. If your request concerns data a company entered in Vendra, we forward it to that company.

You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local supervisory authority.

10. Changes

We update this privacy policy when our processing changes. The version published on this page applies.