Privacy Notice
1. Controller
Orfina-Swiss SA · c/o miracola treuhand ag · Alpenstrasse 80, 2540 Grenchen, Switzerland · info@orfina.ch · www.orfina.ch
2. General information
Personal data is handled confidentially using appropriate technical and organisational safeguards.
3. Data processed
Technical connection and log data may be processed when the website is visited. Enquiries may include name, email, phone, message, model/service information and files voluntarily supplied.
4. Purposes
Website operation, communication, handling of customer and service enquiries, IT security, abuse prevention, troubleshooting, improvement and legal obligations.
5. Analytics
The relaunch does not include Google Analytics by default. If analytics is enabled later, this notice and any required consent mechanism will be updated.
6. Forms
The former client-side EmailJS implementation is no longer used. Forms are processed server-side, stored in the configured data system and forwarded by email where configured.
7. Cookies, local storage and PWA
Technically necessary session cookies may be used. Language and day/night preference may be stored locally in the browser. The PWA service worker may cache static resources.
8. Service providers
Data may be shared with carefully selected hosting, IT, email and database providers where necessary.
9. International transfers
International infrastructure may involve processing outside Switzerland. Appropriate legal or contractual safeguards are considered where required.
10. Retention
Data is retained only as long as needed for its purpose, statutory retention duties or legitimate interests.
11. Rights
Applicable law may provide rights of access, correction and, where available, deletion. Contact: info@orfina.ch.
12. Security
Appropriate technical and organisational measures are used against loss, unauthorised access, misuse, manipulation and unlawful disclosure.
13. Changes
This notice may be updated when processing, services or law changes.
Technical platform
Authentication and portal data may be processed using the configured Supabase project. Server-side secret keys are never exposed to the browser.
As of October 2026 · Swiss FADP-oriented version