Legal
Privacy Policy
Last updated: 30 July 2026
1. Controller
The controller responsible for processing personal data on this website is:
Andreas Logkoperating under the business designation “Calvenda”Rütenenstrasse 706375 BeckenriedSwitzerland
Privacy contact: privacy@calvenda.com
2. Scope and legal framework
This privacy policy applies to the website calvenda.com.
Personal data is processed primarily in accordance with the Swiss Federal Act on Data Protection (FADP). The EU General Data Protection Regulation (GDPR) also applies where its territorial scope requirements are met, including where services are intentionally offered to individuals in the European Union or European Economic Area or their behaviour there is monitored in accordance with Article 3(2) GDPR.
3. Contact form and purposes
When you submit the contact form, we process the information you provide. This may include your name, email address, optional phone number, preferred language, property location and characteristics, usual place of residence, current care situation, areas you would like to improve, your level of interest, preferred timing and an optional message.
We process this information to:
- review and respond to your enquiry;
- assess whether and how Calvenda’s services may be relevant to your situation;
- take steps requested by you before entering into a possible client relationship;
- maintain the security and proper operation of the enquiry process; and
- comply with applicable legal and documentation obligations.
Fields marked as required are necessary for us to assess and respond to your enquiry. Without those fields, we cannot process the request. All other fields are optional.
Where the GDPR applies, the processing of an enquiry and related pre-contractual communication is based on Article 6(1)(b) GDPR. Processing necessary to comply with legal obligations is based on Article 6(1)(c) GDPR. Processing for the secure and reliable operation of the website, prevention of misuse and administration of correspondence is based on our legitimate interests under Article 6(1)(f) GDPR.
Your request is stored in a Supabase database whose primary project region is Zurich, Switzerland.
Contact requests that do not lead to a client relationship are deleted no later than 12 months after submission. Deletion is currently performed manually; there is no fully automated deletion routine.
If a client relationship follows, relevant information may become part of the client record and may be retained for the duration of that relationship and for any subsequent period required by applicable contractual, accounting, documentation or other legal obligations.
4. Email notifications
When a contact request is submitted, an internal notification email is sent to Calvenda using Resend, a service provided by Plus Five Five, Inc. The notification contains information from the enquiry so that it can be reviewed and answered.
Emails are dispatched from a data centre in Ireland. Resend’s primary processing operations are in the United States. Email content, account data, email metadata, logs and API records may therefore be processed in the United States.
We do not use open tracking or click tracking in these notification emails.
5. Hosting and server logs
This website is hosted by Vercel Inc., a company based in the United States.
When you visit the website, technically necessary connection and request information may be processed to deliver, secure and operate the website. This may include the IP address, date and time of access, requested URL, browser or user-agent information, request status and security-related information.
Runtime logs available under the current Vercel Pro plan are retained for up to one day. Other infrastructure and security information may be retained by Vercel for the periods necessary to provide and protect its services in accordance with its applicable terms.
The contact form does not store your raw IP address in the Calvenda lead record.
Where the GDPR applies, this processing is based on our legitimate interest in the secure, reliable and efficient operation of the website under Article 6(1)(f) GDPR.
6. Cookies and tracking
On the public website, we currently do not use analytics, marketing or advertising trackers and do not intentionally set non-essential cookies.
Our hosting and security providers may process technical request information or use strictly necessary technical mechanisms where required to deliver and protect the website. If the website’s use of cookies, analytics or similar technologies changes, this privacy policy will be updated before or when those changes are introduced.
7. Service providers and international data transfers
We use the following service providers to operate the website:
- Supabase Pte. Ltd., Singapore, for database hosting and related platform services. The Calvenda production database is located in the Zurich project region and customer database content is stored and primarily processed there. Supabase and its authorised subprocessors may process operational, support or related service data outside Switzerland where necessary to provide the service.
- Plus Five Five, Inc., United States, operating as Resend, for dispatching internal email notifications. Emails are dispatched from Ireland, while primary processing operations and certain email, account, metadata, log and API data may be processed in the United States.
- Vercel Inc., United States, for website hosting, delivery, logs and security. Vercel and its authorised subprocessors may process data in the United States and other locations where they operate.
These providers process personal data on our behalf under their applicable data processing terms.
Where personal data is transferred to a country without an adequate level of data protection, the transfer is protected by recognised contractual safeguards, in particular the European Commission’s Standard Contractual Clauses with the adaptations required for transfers from Switzerland, as provided for in the applicable provider data processing agreements.
Information about the applicable safeguards or an available copy may be requested from privacy@calvenda.com, subject to any lawful confidentiality restrictions.
8. Data security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. These measures include encrypted transmission, access restrictions, data minimisation and the separation of staging and production environments.
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we review and adapt the measures used in light of the nature of the processing and the associated risks.
9. Your rights
Subject to the applicable legal requirements and limitations, you may request information about the personal data we process about you and request that inaccurate data be corrected or that personal data be deleted. You may also object to certain processing.
To exercise your rights, contact privacy@calvenda.com. We may need to verify your identity before responding.
Where the GDPR applies, you may additionally have rights to restriction of processing, data portability and objection, as well as the right to lodge a complaint with a competent data protection supervisory authority.
In Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC).
10. Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect an individual.
Any automated care recommendation that may be made available on the website is non-binding and does not determine whether a contract or service is offered.
11. Changes
We may update this privacy policy when the website, our service providers or our processing activities change. The current version and its last-updated date are always available on this page.