Privacy policy.

1. Data Controller

HEXACORE GmbH

UID: CHE-227.503.662
Email: [email protected]

HEXACORE GmbH is responsible for the processing of personal data in connection with this website (www.hexacoresourcing.com). This policy is based on the Swiss Federal Act on Data Protection (FADP). As this website is also directed at visitors in the European Union, it additionally takes account of the EU General Data Protection Regulation (GDPR) where it applies.

2. Personal Data We Process

Contacting us by email. This website has no contact form. If you write to us by email, we process your name, email address, the content of your message and any other information you choose to share with us.

Technical data when visiting the website. Each time the website is accessed, our hosting provider and our content delivery network automatically process technical data: IP address, date and time of access, the page requested, referrer URL, browser type and operating system. This is necessary to deliver the website and keep it secure.

We do not use analytics, tracking or advertising tools, and we do not create user profiles.

3. Purposes and Legal Bases

We process personal data for the following purposes:

• to answer your enquiries and handle any resulting business relationship (GDPR Art. 6(1)(b) and (f));
• to provide the website and ensure its stability and security, including protection against attacks and abuse (GDPR Art. 6(1)(f), based on our legitimate interest in a secure and functioning website);
• to comply with legal obligations, such as the retention of business correspondence (GDPR Art. 6(1)(c)).

We do not use your data for marketing or automated decision-making.

4. Service Providers and International Transfers

We rely on the following providers, which process data on our behalf:

• Hosting and email: Serverplan, Italy. Stores the website files, processes server log data and hosts our email service.
• Cloudflare, Inc. (USA): content delivery network and security service. All requests to the website pass through Cloudflare's network, which processes IP addresses and technical request data to deliver content and block malicious traffic. Cloudflare is certified under the Swiss-US and EU-US Data Privacy Frameworks; additional safeguards are provided through standard contractual clauses. More information: https://www.cloudflare.com/privacypolicy/

We do not sell personal data or disclose it to third parties, except where required by law.

5. Retention

We keep email correspondence for as long as needed to handle your enquiry. Where it forms part of business correspondence, we keep it for the statutory retention periods (generally up to 10 years under Swiss law). Server log data is kept only as long as necessary for security and troubleshooting purposes and is then deleted in line with our hosting provider's standard retention periods. Cloudflare retains technical data in accordance with its own policies.

6. Cookies

This website does not set any cookies of its own and uses no tracking technologies. For security purposes, Cloudflare may set strictly necessary cookies (__cf_bm, cf_clearance) to distinguish legitimate visitors from automated bots. These do not require consent. See our Cookie Policy.

7. Your Rights

Subject to applicable law, you have the right to:

• request access to your personal data;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format (GDPR).

To exercise these rights, email us at [email protected]. We may ask you to verify your identity.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch). If you are located in the EU, you may also contact the data protection authority in your country of residence.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encrypted transmission (HTTPS) and restricted access to our systems.

9. Changes to This Policy

We may update this policy when our website or legal requirements change. The current version is always available at https://www.hexacoresourcing.com/en/privacy.html, and the date at the top shows when it was last changed.