Data Protection
Protection of Information
Within the scope of its business, Tialto collects and processes information, some of which is classified as personal data. Tialto attaches great importance to the respect of privacy, and only uses data in a responsible and confidential manner, for a specific purpose and in accordance with the regulations applicable to the protection of personal data, notably the European General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP/DSG).
Tialto has defined a global compliance policy applicable to all its operations, for both EU and non-EU citizens, and strives to protect your personal information from loss, misuse and unauthorized alteration. Tialto has reasonably effective administrative, technical and physical safeguards in place to protect your personal information.
Data Controller
The controller responsible for data processing on this website is:
tialto AG
Sonnhaldenstrasse 12
8903 Birmensdorf ZH
Switzerland
E-Mail: dpo@tialto.com
Data Collected
We collect the following personal data via the contact form on the website:
Identification data:
- First and last name
- Company or organization
- Email address
- Phone number
Use of the Data
The data you provide via the contact form is used solely to respond to your inquiry and to contact you. This data is not used for marketing purposes and will not be sold or shared with third parties for advertising purposes.
Legal Basis
Personal data is collected only after consent from the user or based on legitimate interest, in accordance with the GDPR (Art. 6) and Swiss FADP.
Hosting
This website is hosted by:
Hostpoint AG
Neue Jonastrasse 60
8640 Rapperswil-Jona
Switzerland
Hostpoint processes data on our behalf and is contractually obligated to comply with data protection regulations. As a Swiss hosting provider, your data remains within Switzerland and is subject to Swiss data protection law. For more information, see Hostpoint’s privacy policy.
Third-Party Service Providers
We use the following third-party service providers to operate our business:
Hostpoint AG (Switzerland)
Website hosting and server infrastructure. Data is stored in Switzerland.
Microsoft Corporation (USA)
Email communication via Microsoft 365 / Outlook. Microsoft is certified under the EU-U.S. Data Privacy Framework. When you send us an email, your message and contact details are processed by Microsoft. For more information, see Microsoft’s privacy statement.
Use of Cookies
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and similar technologies to analyze how visitors use the website. The information generated (such as pages visited, interactions, IP address, device and browser information) is transmitted to and stored by Google on servers that may be located in the United States.
IP anonymization is enabled, meaning that your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google processes this information on our behalf for the purpose of evaluating website usage, compiling reports on website activity, and providing other services related to website and internet usage. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.
Data transfers to the USA are based on the EU Standard Contractual Clauses approved by the European Commission. More information can be found at:
https://policies.google.com/privacy
You can prevent the collection of your data by Google Analytics by rejecting analytics cookies via our cookie consent banner or by adjusting your browser settings accordingly.
Google Analytics is only activated after you have given your explicit consent via our cookie consent banner.
Retention Period
Personal data is kept for a maximum of 12 months, unless longer retention is required for legal or contractual reasons.
Rights of Individuals
Under the GDPR and Swiss FADP, you have the following rights:
- Right of access – to request information about your stored data
- Right to rectification – to correct inaccurate data
- Right to erasure – to request deletion of your data
- Right to object – to object to data processing
- Right to restrict processing – to limit how your data is used
- Right to data portability – to receive your data in a portable format
To exercise any of these rights, contact: dpo@tialto.com
Right to Lodge a Complaint
For Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch
For the EU:
You have the right to lodge a complaint with your local data protection authority.
Changes to this Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
For questions or to request access, correction, or deletion of your personal data, contact: dpo@tialto.com
Last updated: January 2026