Privacy policy

The controller for the processing of data in connection with this website is xappido ag, Kavalleriestrasse 2, 6210 Sursee (info@xappido.com).

Information security

Protecting your data is a high priority for us. xappido is certified to ISO/IEC 27001 – the internationally recognised standard for information security management systems. We therefore follow a systematic approach to ensuring the confidentiality, integrity and availability of information.

View the certificate (PDF) Valid until 17 June 2029

Our principle

This website itself sets no cookies, builds no usage profiles and embeds no third-party tracking. Fonts, images and video thumbnails are served from our own server – they create no connection to third parties. Outbound connections are made only when you trigger them yourself: when you play a video and when you load the map on the contact page. Those services may then set cookies of their own. We describe both below.

We store two things on your device. First, a setting: whether sound should be on for the home page. It is held in your browser’s local storage and disappears as soon as you clear the browser data for this site. Second, if you reached us through an advertisement or a link from another site, a note of that – the campaign identifier of an ad, say, or the name of the referring website. This note is held in your browser’s session storage, so it disappears when you close the window at the latest, and it reaches us only if you submit the contact form: it is then included in your enquiry so that we know where you found us. We set no cookies for this, and no connection to third parties is made.

Videos (YouTube)

We embed videos only after a click (“click-to-load”). Only when you play a video is a connection made to YouTube (Google Ireland Ltd.) via the more privacy-friendly domain youtube-nocookie.com; data (your IP address, for example) is transmitted to YouTube in the process. The thumbnails are served from our own server.

Map on the contact page

The map on the contact page is a fixed image that we serve from our own server – opening the page therefore creates no connection to a map service. Only when you load the map using the button do we fetch further map tiles from the map service CARTO (CARTO Inc.); your IP address is transmitted there in the process. Without that click – and without JavaScript – the image is all there is.

The “Plan your route” button is an ordinary link: it transmits nothing until you click it, and then opens Google Maps in a new window.

Contact form

If you contact us through the form, we process the data you provide – name, organisation, email address, phone number, your enquiry, the page on which you filled in the form and the origin note described above – solely in order to answer your enquiry. The details reach us as an email; we do not pass them on to third parties and do not use them for advertising.

Job applications

If you apply through our application form, we process your details and the documents you upload (CV, references, work samples) solely in order to assess your application. Transmission is encrypted; the documents are sent as an email through our business mail service at Microsoft 365 (Microsoft Ireland Operations Ltd.) to the people responsible for recruitment, and are not shared in any publicly accessible channel. Once the process is complete, we keep your documents for no longer than six months and then delete them – unless you have expressly agreed to a longer retention period for future positions. You can request erasure at any time at info@xappido.com.

Audience measurement

We are preparing cookieless audience measurement using a tool hosted in Switzerland or the EU. No cookies will be set and no personal profiles will be built. As soon as the measurement is active, this policy will be updated accordingly.

Hosting and server log data

This website runs on Microsoft Azure. When it is accessed, log data is generated for technical reasons (for example IP address, date and time, page requested). This data is used solely for secure operation and error analysis and is not combined with other data.

Disclosure abroad

The services named above – YouTube, CARTO, Microsoft 365 and Azure – may process data outside Switzerland. In doing so we rely on providers that are subject to adequate data protection or that provide contractual guarantees within the meaning of the Swiss Federal Act on Data Protection.

Your rights

Under the Swiss Federal Act on Data Protection (FADP / DSG) you have, in particular, the right of access to the data processed about you, as well as the right to its rectification, erasure and portability. You may also object to processing. A short message to info@xappido.com is enough – we will get back to you.

Authoritative version

The German version of this privacy policy is authoritative. In the event of any discrepancy, the German wording prevails.

Last updated: 8 September 2026