Legal

Privacy Policy

Last updated: July 2026

This policy explains how QA²I AG collects, uses, and protects personal data when you visit this website or contact us. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

The entity responsible for data processing on this website is:

QA²I AG
Pestalozzistrasse 2, 8200 Schaffhausen, Switzerland
Email: contact@qa2i.com

For data protection enquiries, please contact us at contact@qa2i.com.

2. What data we collect

We collect the following categories of personal data:

  • Contact form data: when you submit our contact form, we process the information you provide, such as your first and last name, company, role, email address, inquiry type, and the content of your message.
  • Correspondence: if you email us or connect with us on LinkedIn, we process the information contained in that communication.
  • Technical data: when you access the website, our hosting provider automatically processes standard server log data such as your IP address, browser type, operating system, referring page, and the date and time of access.

We do not knowingly collect special categories of personal data through this website.

3. Purposes and legal bases

We process personal data for the following purposes:

  • To respond to your enquiries (legal basis: performance of pre-contractual or contractual measures, and our legitimate interest in communicating with interested parties).
  • To operate, secure, and maintain the website (legal basis: our legitimate interest in providing a stable and secure service).
  • To comply with legal obligations to which we are subject.

Where processing is based on consent, you may withdraw it at any time with effect for the future.

4. Cookies and analytics

We use Google Analytics 4 (GA4), provided by Google Ireland Limited / Google LLC, to understand how visitors use this website (pages viewed, approximate location, device/browser, referring site). This involves setting a cookie and sending data to Google.

GA4 only runs if you accept it in the cookie banner shown on your first visit (legal basis: consent, Art. 6(1)(a) GDPR / Art. 6 FADP). If you decline, no analytics cookie is set and no data is sent to Google. Data collected via GA4 is retained for the period configured in our Google Analytics account, in line with Google's standard retention settings.

You can change your choice at any time via .

5. Third-party services and data sharing

We do not sell your personal data. We share it only with service providers who process it on our behalf (processors) and where legally required. These currently include:

  • Website hosting: Vercel Inc. (United States), which hosts this website and processes standard server log data.
  • Web fonts: this website loads fonts from Google Fonts (Google Ireland Limited / Google LLC), which may transmit your IP address to Google servers when the fonts are loaded.
  • Email: Microsoft 365 (Microsoft Corporation), used to receive and respond to your messages.

6. International data transfers

Some service providers may process data outside Switzerland or the European Economic Area. Where this is the case, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's standard contractual clauses or an applicable adequacy decision.

7. Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Contact enquiries are kept for the period needed to handle your request and a reasonable time thereafter, after which they are deleted or anonymised.

8. Your rights

Subject to applicable law, you have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request portability of the data you provided to us; and
  • withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us using the details above. You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, and disclosure. Please note that transmission of data over the internet can never be fully secure.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page, with the date of the last update shown above.

We use cookies to understand how visitors use this site. We only turn on analytics if you accept. Privacy Policy