Last updated: September 2026

1. Controller
The controller responsible for the processing of personal data on this website is Hill15, a simple partnership (einfache Gesellschaft) within the meaning of Art. 530 et seq. of the Swiss Code of Obligations (CO), consisting of Banerjee Till, Ebner Nicolas, Scherrer Florian, Stiegler Dominik:

Till Banerjee
Sankt Leonhardstrasse 73
9000 St. Gallen, Switzerland
Email: info@hill15.ch

‍The partners are jointly responsible. Please direct any data protection enquiries to the address above; we handle them centrally.

2. General
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the Swiss Data Protection Ordinance (DPO). Where the EU General Data Protection Regulation (GDPR) applies in individual cases, we also comply with it. We only process personal data that is necessary for the respective purposes.

3. What data we process and why
‍Visiting the website. When you access our website, our hosting provider automatically collects technical data, in particular your IP address, the date and time of access, the page accessed, the referrer URL, your browser type and operating system. This data is used to ensure the secure and stable operation of the website and for error analysis, and is not combined with other data to create a profile.

‍Contact and appointment booking. When you fill out our contact form, the information you provide (e.g. name, email address, company, message and preferred appointment) is entered directly as an appointment in our Google Calendar. We process this data to respond to your enquiry, hold the appointment and conduct any follow-up communication. If you contact us by email, we process the data transmitted for the same purpose.

‍Social media. Our website contains links to our profiles on LinkedIn and Instagram. These are simple links, not embedded plugins; merely visiting our website does not transmit any data to these platforms. If you follow a link, the privacy policy of the respective provider applies.

‍Business relationship. If you use our services, we process the data required to initiate and perform the contract (contact details, correspondence, contract and billing data).

4. Cookies and tracking
We do not use analytics, tracking or marketing cookies. At most, we use technically necessary cookies required for the operation of the website.

5. Recipients and processors
We only disclose personal data where this is necessary for the purposes described, required by law, or where you have consented. We use the following service providers, who process data on our behalf:Webflow, Inc., San Francisco, USA (website hosting)Google LLC, Mountain View, USA, or Google Ireland Limited, Dublin, Ireland (calendar and appointment management, email)We contractually oblige our processors to comply with data protection requirements.

6. Disclosure abroad
Personal data may be transferred to the USA and to countries of the EU/EEA. According to Annex 1 DPO, the countries of the EU/EEA provide an adequate level of data protection. The same applies to the USA insofar as the recipient is certified under the Swiss-U.S. Data Privacy Framework; this is the case for Google LLC. For recipients without such certification, we base the transfer on the standard contractual clauses of the European Commission recognised by the Federal Data Protection and Information Commissioner (FDPIC) (Art. 16(2)(d) FADP).

7. Retention period
We retain personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations (in particular ten years for business records pursuant to Art. 958f CO). Server log data is deleted by the hosting provider after a short period. Enquiries that do not result in a business relationship are generally deleted after [12] months at the latest.

8. Automated individual decisions
We do not make automated individual decisions within the meaning of Art. 21 FADP.

9. Your rights
Within the scope of applicable law, you have in particular the following rights:

- Access to information on whether and which personal data we process about you (Art. 25 FADP)
- Rectification of inaccurate personal data (Art. 32 FADP)
- Erasure or restriction of processing, and objection to processing (Arts. 30 and 32 FADP)
- Receipt or transfer of your data in a common electronic format (Art. 28 FADP)
- Withdrawal of any consent given, with effect for the future

To exercise your rights, please contact info@hill15.ch. We may request proof of identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

10. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss and misuse. Data transmission on this website is encrypted (HTTPS).

11. Changes
We may amend this privacy policy at any time. The version published on this website applies.