Privacy policy

Who is responsible for your data

The company below decides what happens to the personal data collected through this website. Under the Swiss Data Protection Act and the EU General Data Protection Regulation, that makes us the controller for it.

Company

Twin Pines GmbH

Address

Denter Ers 14
7403 Rhäzüns
Switzerland

Email

hello@quaryan.com

Our representative in the EU

We are based in Switzerland. Anyone in the European Union can raise anything in this policy with the representative below, as well as with us directly:

What this policy covers

This page is about this website — the pages you are reading now. The Quaryan app is a separate service with its own account and its own privacy policy, which you see before you sign up.

We do not sell personal data, and we pass it to nobody except the providers named further down, who handle it on our instructions.

When you open a page

Our hosting provider records every request to the server. That log is how we know the site is up, and how we find the cause when it is not. Each entry holds:

• the IP address the request came from
• the date and time it arrived
• the page or file asked for, and whether it was delivered
• the browser and operating system the request announced
• the page that linked you here, when your browser sends one

We do not use these logs to work out who anybody is, and we do not join them to anything else. The legal basis is our legitimate interest in running a site that stays up and is not under attack (Art. 6(1)(f) GDPR).

When you type your web address into the field

The field on the home page sends nothing to us. Submitting it opens the Quaryan app with what you typed in the address, and from that point the app's privacy policy applies. What you type is not stored on this website, and it never goes to analytics.

When you write to us

If you email us, we have your address, your message and anything attached to it. We use that to answer you and for nothing else — the basis is our legitimate interest in replying to people who write to us, or taking steps at your request before a contract (Art. 6(1)(b) and (f) GDPR). We keep the correspondence while the matter is open, and afterwards for as long as commercial and tax law require.

Analytics, and your choice

We would like to know which parts of this page get read and which buttons get pressed, because that is how the page gets better. We use Google Analytics 4 for it, offered in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

None of it runs unless you say yes. Until then no Google script is loaded, no request goes to Google, and nothing is stored on your device. If you do agree, Google Analytics sets cookies that recognise your browser on a later visit, and records which pages you open, roughly where you are — worked out from a shortened IP address, not from a street — what kind of device and browser you use, and clicks on the buttons that lead to the app. It never receives your name, your email address, or the web address you typed into the field on the home page.

The legal basis is your consent (Art. 6(1)(a) GDPR, Art. 31(1) of the Swiss Data Protection Act, and § 25(1) TDDDG in Germany). You can take it back at any time, with the same single click the yes cost you — that stops any further collection, though it cannot undo what was collected while it stood.

What is stored on your device

Two things, both small, and only one of them needs your permission:

• Your language, and your answer to the banner. Kept in your browser's own storage rather than in a cookie, and sent nowhere. They are why this site does not guess your language again on every visit, and does not ask about analytics twice. This is the site doing what you asked of it, so it needs no consent.
• Google Analytics cookies, if you accepted them: _ga and _ga_ plus the measurement ID. They expire two years after your last visit, and they are what tells Google Analytics that two visits came from the same browser.

You can clear both at any time in your browser's settings — and declining the banner means the second kind is never set in the first place.

Who else handles data for us

Our hosting provider runs the servers that deliver these pages and, in doing so, processes the request logs described above on our behalf, under a data processing agreement:

If you accepted analytics, Google Ireland Limited processes the analytics data described above, likewise under a data processing agreement.

Hosting provider

Render Services, Inc.

Address

San Francisco, California, United States

Data that leaves Switzerland and the EU

Both providers above belong to groups whose parent companies are in the United States, so some of this data can be processed there. Where it is, the transfer rests on the adequacy decisions for the EU-US and Swiss-US Data Privacy Framework, and otherwise on the European Commission's standard contractual clauses, which we have in place with both.

That is the honest legal position rather than a promise: authorities in the United States have powers of access that European and Swiss law do not match. If that matters to you, declining analytics keeps your visit out of everything except the server logs.

How long any of it is kept

• Server logs: a few weeks, then deleted or stripped of anything identifying.
• Email you send us: while the matter is open, then as long as commercial and tax law require.
• Analytics data: at most 14 months from your last visit, the shortest retention Google Analytics offers.
• Your answer to the cookie banner: until you change it, or clear your browser storage.

Your rights

Whatever else is on this page, these are yours. Write to the address at the top and you get an answer within a month, free of charge:

• Access — what we hold about you, and where it came from.
• Correction — anything wrong, put right.
• Deletion — your data removed, unless the law requires us to keep it.
• Restriction and objection — processing paused, or stopped where it rests on our legitimate interest.
• Portability — a copy in a machine-readable form, where the GDPR gives you one.
• Withdrawing consent — for analytics, at any time, no reason needed.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner in Bern, and in the EU the data protection authority of the country you live or work in.

Security

This site is served over HTTPS, so what passes between your browser and the server is encrypted. It loads no fonts, no images and no scripts from other companies, which is the other half of why there is so little on this page to describe.

Children

Quaryan is a tool for people running a business. This site is not aimed at children, and we do not knowingly collect anything about them.

Changes to this policy

When the site changes, this page changes with it. The date at the top is when it was last edited, and the version you are reading is the one that applies.