Privacy Policy
Last updated: 21.08.2026
This privacy policy describes how AMS Protect GmbH processes personal data collected when you visit this website. It is based on the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, on the EU General Data Protection Regulation (GDPR). It applies exclusively to this marketing website. The processing of customer data within the AMS AccessControl platform — which is hosted in Switzerland — is not covered by this policy but by separate contractual agreements with our customers.
1. Controller
The controller for the processing described in this policy is:
- Company
- AMS Protect GmbH
- Address
- Baarerstrasse 112, 6300 Zug, Switzerland
- Company ID (UID)
- CHE-371.553.811
- contact@ams-protect.ch
We have not appointed a data protection advisor within the meaning of art. 10 revFADP; we are not required to do so. Please direct all data protection matters to the address above.
2. What personal data we process
Contact form. When you submit the contact form on this website, we process the following details:
- Name (mandatory field)
- E-mail address (mandatory field)
- Company (optional)
- Message (mandatory field)
We do not collect a telephone number through the contact form. Please do not send us sensitive personal data in the message field.
Server logs. When the website is accessed, our hosting provider automatically generates technical data required for operation and security:
- IP address of the requesting device
- date and time of access
- the address (URL) requested and the HTTP status code
- referrer URL, where transmitted
- browser type and version, and operating system
Language preference. When you switch language using the language selector, a cookie named NEXT_LOCALE is set; it contains only the selected language.
We do not process any sensitive personal data through this website, and we carry out neither profiling nor automated individual decision-making.
3. Purposes and legal bases
We process the data referred to above for the following purposes:
- To respond to the enquiry you submit through the contact form and to get in touch with you. The basis is the performance of pre-contractual measures taken at your request; under the GDPR, art. 6(1)(b). No consent is required for this, since we process your details solely in order to answer the enquiry you initiated yourself.
- To operate the website and ensure its stability and security, and to prevent abuse. The basis is our overriding legitimate interest in a secure and functioning service; under the GDPR, art. 6(1)(f).
- To store your language choice so that the website is displayed in the language you selected. The basis is the technical necessity of providing the service you have expressly requested.
Under the revFADP, processing this data does not require a specific justification; we process it in accordance with the principles of good faith, proportionality and purpose limitation.
4. Hosting and storage location
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Server-side execution — in particular the processing of the contact form — is pinned to the Frankfurt am Main region.
Vercel gives no contractual undertaking, on any plan, that data will be processed solely in a given country. Static content is delivered through its global content delivery network, and its data processing agreement reserves the right to process data in the United States and worldwide. Server logs may therefore be processed on infrastructure outside Europe.
An important distinction: the claim made elsewhere on this website that data remains in Switzerland refers to the customer data of the AMS AccessControl platform, hosted in Zurich. It does not refer to this marketing website.
5. Processors
We use carefully selected service providers that process personal data on our behalf and on our instructions. A data processing agreement is in place with each of them.
- Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — hosting and delivery of the website. The current list of its sub-processors is available at https://security.vercel.com
- Resend — Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA — delivery of the e-mails generated by the contact form. The current list of its sub-processors is available at https://resend.com/legal/subprocessors
Only the details you enter in the contact form are transmitted to Resend, namely name, e-mail address, company and message. Your data is not passed on for advertising purposes and is not sold to third parties.
6. Disclosure of personal data abroad
Both providers named above are established in the United States. Personal data is therefore disclosed abroad. The Swiss Federal Council recognises the United States as adequate only for companies certified under the Swiss-U.S. Data Privacy Framework; for all other recipients, appropriate safeguards are required.
In both cases we rely on the European Commission's Standard Contractual Clauses in the version adapted for Switzerland, as recognised by the Federal Data Protection and Information Commissioner. Vercel's data processing agreement expressly applies the Standard Contractual Clauses to transfers from Switzerland, the EEA and the United Kingdom; Resend's data processing agreement provides for the Standard Contractual Clauses as modified for Switzerland in its section 6.5.
In addition, Vercel Inc. states in its Privacy Notice that it participates in the Swiss-U.S. Data Privacy Framework. Resend has been certified under the EU-U.S. Data Privacy Framework and its UK extension since 13 March 2025, but not under the Swiss extension. We therefore treat the Data Privacy Framework solely as an additional safeguard and not as the transfer mechanism we rely on.
On request, we will provide you with information about the safeguards in place.
7. Cookies
This website sets a single cookie: NEXT_LOCALE. It stores your language choice for twelve months and is technically necessary in order to display the website in the language you selected. It contains no identifier that could be used to identify you or track you across websites.
Because we use no cookies for analytics, advertising or tracking purposes, no consent banner is required for this website. You can delete or block cookies at any time in your browser settings; in that case, your language choice will be determined afresh on each visit.
8. Usage analytics and tracking
We use no web analytics, statistics or tracking services on this website. In particular, no services such as Google Analytics, Google Tag Manager, Vercel Analytics, Vercel Speed Insights, Plausible, Matomo, PostHog, Hotjar, Microsoft Clarity or the Meta pixel are embedded.
No cross-device recognition and no creation of usage profiles takes place. Should we introduce such a service in future, we will update this policy beforehand and obtain your consent where required.
9. Retention periods
- Contact enquiries: for as long as necessary to handle your request and any follow-up correspondence, but no longer than 24 months after the last contact. Statutory retention obligations remain reserved, in particular the ten-year obligation to retain business correspondence under commercial law.
- Server logs: for the period provided for by our hosting provider, limited to what is necessary for operation and security.
- Language cookie: twelve months from the time it is set, unless you delete it earlier.
10. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. The website is encrypted end to end with TLS, and access to incoming contact enquiries is restricted to the personnel responsible for handling them.
Absolute security in the transmission of data over the internet cannot, however, be guaranteed.
11. Your rights
Within the framework of applicable data protection law, you have the following rights:
- to obtain information about whether and which personal data we process about you
- to have inaccurate personal data corrected
- to have your personal data erased or the processing restricted
- to object to processing based on a legitimate interest
- to obtain the release or transfer of your data in a common electronic format
To exercise these rights, please contact contact@ams-protect.ch. To prevent abuse, we may ask you for proof of identity. Exercising these rights is generally free of charge for you.
You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner, https://www.edoeb.admin.ch. In the European Union you may contact the supervisory authority of your habitual residence.
12. Changes to this privacy policy
We may amend this privacy policy at any time, in particular if our processing activities or the service providers we use change. The version published on this page is the authoritative one; the date of the last update is shown at the top of the page.
13. Contact
If you have any questions about data protection or about the processing of your personal data, you can reach us at:
- AMS Protect GmbH
- Baarerstrasse 112, 6300 Zug, Switzerland
- contact@ams-protect.ch