Website Privacy Notice

Provider / Controller

Power Manufaktur GmbH, UID CHE-153.237.765, Mettenwilstrasse 1, 6203 Sempach Station, Switzerland. Data protection officer: Heinz Süess, info@powermanufaktur.com. The company is domiciled in Switzerland; we serve companies, public bodies and organisations throughout the DACH region (Germany, Austria and Switzerland).

This notice applies exclusively to our websites www.power-ims.com, www.powermanufaktur.com, www.power-copilot.com and www.power-vibecoding.com. For the websites, Power Manufaktur GmbH is the controller within the meaning of Art. 4 no. 7 GDPR resp. the FADP.

Out of scope: use of the software products of the Power IMS family. The separate privacy notice for the Power IMS apps applies there; in that context Power Manufaktur GmbH acts as processor for the customer organisation and the DPA additionally applies. The processing described here (analytics, newsletter, forms, AI chat, meeting booking) never takes place in a customer installation.

This English version is a convenience translation. In case of discrepancies the German version prevails.

1. Data we process on the website

1.1 Server and edge logs

IP address (stored truncated where possible), timestamp, requested resource, referrer, user agent. Purpose: operation, security, error analysis. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention 30 days.

1.2 Google Analytics 4 (measurement ID G-PYKQGEZSJ9)

GA4 is only activated if you consent to analytics cookies in the cookie banner. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processed data: pseudonymous identifiers (client ID), truncated IP address, pages viewed, time on page, referrer, approximate location at country/region level, device and browser.

We use Google Consent Mode v2: before consent, no analytics or advertising cookies are set and only consentless, aggregated signals without identifiers are transmitted. IP anonymisation is active; Google signals and advertising features are disabled. Retention of event data: 14 months. Legal basis: consent (Art. 6(1)(a) GDPR / Art. 6 FADP); withdrawal at any time via the cookie settings in the footer. A transfer to the USA is possible, based on the EU-US Data Privacy Framework or the Standard Contractual Clauses.

1.3 Google Ads (conversion tag AW-16829430322)

To measure advertising performance we use Google Ads with the conversion tag AW-16829430322, loaded together with GA4 via gtag.js. Processed data: conversion events (e.g. submitted forms, meeting bookings) and pseudonymous identifiers from the `_gcl_au` cookie. The tag is only loaded after you consent to marketing cookies; with "necessary only" it stays disabled. Legal basis: consent (Art. 6(1)(a) GDPR / Art. 6 FADP).

1.4 Newsletter

Email address, optionally name and company, time and IP of sign-up and confirmation (double opt-in). After entering your email address you receive a confirmation email; you are only added to the list after clicking the confirmation link. The link is valid for 14 days; without confirmation the data is deleted automatically. Sign-up data is transferred to the central marketing system of Power Manufaktur GmbH. Legal basis: consent. Unsubscribe at any time via the link in every email or by writing to info@powermanufaktur.com; the unsubscribe is retained as evidence.

1.5 Contact and demo requests

Name, company, email, phone, message. Purpose: response and pre-contractual steps. Legal basis Art. 6(1)(b) / (f). Retention up to 24 months after last contact.

1.6 Quote generator

Company and contact details, selected modules, user numbers, currency. The quote is generated as a PDF and sent by email; for quote and customer administration the data is transferred to our business system MOCO (mocoapp, Germany/EU). Legal basis Art. 6(1)(b).

1.7 AI chat (mascot)

Your chat input is transmitted to the Lovable AI Gateway (Google Gemini model) to generate an answer. Please do not enter third-party personal data or confidential content. The conversation is not stored beyond the session and is not used for model training. Legal basis: legitimate interest in providing fast information (Art. 6(1)(f)).

1.8 Meeting booking

Clicking «book a meeting» forwards you to our booking service, whose privacy notice additionally applies. We receive name, email, requested slot and your notes.

1.9 Cookies and similar technologies

Strictly necessary cookies (language selection, consent decision) are set without consent; analytics and marketing cookies only with your consent. The following cookies may be set:

You can withdraw your consent at any time via the cookie settings in the footer or your browser settings.

1.10 Children's privacy

Our websites and services are aimed at businesses, not at persons under 16. We do not knowingly collect personal data from children. If we become aware of such collection, we delete the data promptly.

2. Purposes and legal bases

3. Recipients and processors of the website

Data is never sold or shared for advertising purposes.

4. Transfers abroad

Where data is processed outside Switzerland or the EEA, we rely on an adequacy decision or on the EU Standard Contractual Clauses (in the version recognised by Switzerland) together with supplementary safeguards (encryption in transit and at rest, access restrictions, data minimisation).

5. Retention and deletion

6. Security

Transport encryption (TLS) for all page views and forms, restricted access to the processing systems, server-side validation of form input, logging of security-relevant errors.

7. Rights of data subjects

Access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. Requests to info@powermanufaktur.com.

Right to lodge a complaint: Federal Data Protection and Information Commissioner (FDPIC), Bern, and – within the scope of the GDPR – with the competent supervisory authority of the place of residence or work.

We are domiciled in Switzerland and serve companies, public bodies and organisations throughout the DACH region (Germany, Austria and Switzerland). The websites are intended for users throughout the DACH region and are not limited to users in Switzerland. Where we occasionally serve customers in the EEA, this is not systematic and not of a scale that would require the appointment of an EU representative under Art. 27 GDPR.

8. Related documents

• Privacy notice for the Power IMS apps
• Terms of service
• DPA and subprocessor register

9. Changes

We may amend this notice. The version published on our website at the time is authoritative.