1. General Information
The following information provides a simple overview of what happens to your personal data when you visit this website.
Personal data refers to any data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy listed below this text.
Data Collection on this Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Entity” in this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may include, for example, data you enter into a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. These are primarily technical data (e.g., browser type, operating system, or time of page access). The collection of this data takes place automatically once you access this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other inquiries.
What rights do you have regarding your data?
You have the right at any time, free of charge, to receive information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given consent for data processing, you may withdraw this consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
For this and any further questions on the subject of data protection, you may contact us at any time.
Analysis Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically analyzed. This is done primarily using analytics programs. Detailed information about these programs can be found in the following privacy policy.
2. General Information and Mandatory Details
Data Protection
The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.
We would like to point out that data transmission over the internet (e.g., communication by email) may be subject to security vulnerabilities. A complete protection of data against access by third parties is not possible.
Information on the Responsible Entity
The responsible entity for data processing on this website is:
X4 Innovation AG
represented by Dr.-Ing. Thomas Walter (CEO)
Ruessenstrasse 12
6340 Baar, Switzerland
Phone: +41 (0)32 510 07 46
Email: contact@x4innovation.com
For manufacture, delivery and service, we use our wholly-owned subsidiary in Germany. It receives the data required for this purpose (e.g. name, delivery and billing address, contact details, device and service data) and processes it as our processor or recipient. Where you conclude a service contract or service level agreement (SLA) directly with this subsidiary, the subsidiary is itself the controller for the data processing under that contract.
The responsible entity is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Applicable Data Protection Law
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Storage Duration
Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate deletion request or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will take place after these reasons cease to apply.
General Information on the Legal Basis of Data Processing
If you have given your consent to data processing, we process your personal data on the basis of Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data under Art. 9 (1) GDPR are processed.
In the case of explicit consent to the transfer of personal data to third countries, processing also takes place on the basis of Art. 49 (1)(a) GDPR.
If you consented to the storage of cookies or access to information in your device (e.g., via device fingerprinting), processing also takes place on the basis of § 25 (1) TDDDG. Consent can be revoked at any time.
If your data is necessary for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6 (1)(b) GDPR.
We also process your data if required to fulfill a legal obligation, on the basis of Art. 6 (1)(c) GDPR. Data processing may further be based on our legitimate interest pursuant to Art. 6 (1)(f) GDPR. The specific applicable legal basis in each individual case will be stated in the following paragraphs of this privacy policy.
Your Rights
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR) and withdrawal of consent with effect for the future (Art. 7 (3) GDPR). The corresponding rights under the Swiss FADP remain unaffected. Please contact the responsible entity named above.
Withdrawal of Consent and Right to Object
Many data processing operations are only possible with your express consent. You can withdraw consent you have given at any time, for example via the “Cookie Settings” link in the footer. The lawfulness of the processing carried out before the withdrawal remains unaffected.
If data processing is based on Art. 6 (1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing; your data will then no longer be processed for direct marketing purposes.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work or place of the alleged infringement. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, https://www.edoeb.admin.ch.
3. Data Collection on this Website
Cookies
Our websites use so-called “cookies.” Cookies are small data packets that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
Cookies may be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third-party companies within websites (e.g., cookies for processing payment services).
Cookies have different functions. Many cookies are technically necessary since certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies necessary for carrying out the electronic communication process, for providing certain functions you request (e.g., shopping cart), or for optimizing the website (e.g., measuring the web audience) are stored on the basis of Art. 6 (1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services.
If consent for the storage of cookies and comparable recognition technologies has been requested, processing will be carried out exclusively on the basis of this consent (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG); consent can be withdrawn at any time.
You can configure your browser to inform you about the placement of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or in general, and to enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Which cookies and services are used on this website can be found in this privacy policy.
Consent with the Framer Cookie Banner
Our website uses the cookie banner of the website builder Framer (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands) to obtain and manage your consent to the storage of information on your device and to the use of certain services. You can choose between the categories “Necessary”, “Preferences”, “Analytics” and “Marketing”. For visitors from the EU, all optional categories are disabled by default.
Your choice is stored in your browser's local storage (entries “framerCookiesConsentMode” and “framerCookiesDismissed”) and passed on to the Google services integrated via Google Tag Manager (Google Consent Mode). These entries remain on your device until you delete them. You can change or withdraw your choice at any time via the “Cookie Settings” link in the footer.
We use the cookie banner to obtain the legally required consents and to be able to demonstrate them. The legal basis is Art. 6 (1)(c) GDPR; storing your choice on your device is permitted under § 25 (2) no. 2 TDDDG.
Hosting and Server Log Files
This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands (“Framer”). Framer provides the website and, when it is accessed, automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
These data are not combined with other data sources.
The collection of this data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this purpose, server log files must be collected.
Framer processes the data on our behalf under a data processing agreement (Data Processing Addendum). For hosting and delivery, Framer uses sub-processors (e.g. data centre and content delivery providers), including in third countries such as the USA. Such transfers are based on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework (DPF). Details: https://www.framer.com/legal/privacy-statement/ and https://www.framer.com/legal/data-processing-addendum/
Contact Form
If you send us inquiries via the contact form, the information you provide in the form, including your contact details, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
Our forms are implemented with Framer's form feature (see “Hosting and Server Log Files”). Your entries are transmitted to us via Framer's servers and stored there on our behalf. We forward inquiries concerning delivery and service to our subsidiary commissioned with delivery and service where this is necessary to process them. If you have consented to marketing, the submission of a form is also reported to Google Ads as a conversion (see “Google Ads and Conversion Tracking”).
The processing of this data is based on Art. 6 (1)(b) GDPR, provided your request is related to the performance of a contract or necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR), if this has been requested. Consent may be withdrawn at any time.
The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage, or the purpose of data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions — in particular retention periods — remain unaffected.
4. Social Media
No social media plugins (e.g. “Like” or “Share” buttons) are integrated on this website.
5. Analytics Tools and Advertising
Framer Analytics
We use the web analytics integrated in Framer (“Framer Analytics”) provided by our hosting provider Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. It statistically evaluates page views, time on page, referrers, device and browser type and country of origin. According to Framer, Framer Analytics works without cookies and without persistent identifiers. The IP address is only used to determine the country and is not stored; to count unique visitors, it is hashed together with the user agent using a daily rotating key that is deleted every day. We only receive aggregated statistics that do not allow any conclusions to be drawn about individual persons.
The legal basis is our legitimate interest in the statistical evaluation and improvement of our website (Art. 6 (1)(f) GDPR). Framer processes the data on our behalf. Details: https://www.framer.com/help/articles/gdpr-and-cookies/
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. We use Google Tag Manager to integrate Google Analytics and Google Ads; these are only activated with your consent. Google Tag Manager itself does not create user profiles, store cookies, or carry out independent analyses. It is only used for the administration and delivery of the tools integrated via it. However, Google Tag Manager does record your IP address, which may also be transferred to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on the website.
If the appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. More information is available here: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on site, operating systems used, and the origin of the user. These data may be compiled by Google into a profile that is assigned to the respective user or their device.
Google Analytics uses technologies that allow for user recognition in order to analyze user behavior (e.g., cookies or device fingerprinting). The information collected by Google about your use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent pursuant to Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Consent can be withdrawn at any time.
The transfer of data to the USA is based on the EU Commission’s Standard Contractual Clauses (SCCs). Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU–US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5780.
IP Addresses
We use Google Analytics 4. According to Google, IP addresses are not stored. They are only used to derive approximate location data and are then discarded.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en.
Google Signals
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history, and demographic data (visitor data). These data may be used for personalized advertising with the help of Google Signals. If you have a Google account, the visitor data is linked to your Google account and used for personalized advertising messages. The data is also used to create anonymized statistics on the user behavior of our visitors.
Demographic Characteristics with Google Analytics
This website uses the “demographic characteristics” function of Google Analytics to display suitable advertisements within the Google advertising network to website visitors. This allows reports to be created that contain information about the age, gender, and interests of visitors. These data come from interest-based advertising by Google and from visitor data from third-party providers. The collected data cannot be assigned to any specific person.
You can disable this feature at any time through the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under “Browser Plugin.”
Data Processing Agreement
We have concluded a data processing agreement with Google.
Google Ads and Conversion Tracking
This website uses Google Ads. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Conversion tracking allows us to see whether a user has carried out a certain action on our website after clicking on one of our Google ads, for example submitting a form. For this purpose, Google uses cookies (e.g. “_gcl_aw”) or comparable recognition technologies (conversion linker). We also use the “enhanced conversions” feature: when a form is submitted, data you have entered, in particular your email address, is transmitted to Google in hashed (pseudonymised) form so that Google can attribute conversions to Google user accounts. We only receive statistical reports and cannot use them to identify individual users.
The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR and § 25 (1) TDDDG (category “Marketing” in the cookie banner). Consent can be withdrawn at any time.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses. The company is certified under the EU–US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5780. More information: https://policies.google.com/technologies/ads and https://policies.google.com/privacy?hl=en
6. Plugins and Tools
YouTube
This website embeds videos from the website YouTube. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages with embedded YouTube videos, a connection to YouTube’s servers is established. The YouTube server is informed about which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
When videos are loaded and played, YouTube may use cookies or comparable recognition technologies (e.g. local storage elements in the browser) to collect statistics, improve user-friendliness and prevent fraud.
After a YouTube video is activated, further data processing operations may be triggered over which we have no influence.
The use of YouTube is in the interest of an attractive presentation of our online offerings. This constitutes a legitimate interest under Art. 6 (1)(f) GDPR.
If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be withdrawn at any time.
Further information about data protection at YouTube can be found in their privacy policy:
https://policies.google.com/privacy?hl=en.
The company is certified under the EU–US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5780.
Google Fonts
This site uses so-called Google Fonts for the uniform display of fonts. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the required fonts from Google's servers (fonts.gstatic.com). Google thereby learns that this website has been accessed via your IP address. A transfer to the USA cannot be ruled out.
Google Fonts are used on the basis of Art. 6 (1)(f) GDPR. We have a legitimate interest in a uniform and appealing presentation of the typeface on our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG; consent can be withdrawn at any time.
Further information about Google Fonts can be found here: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=en. The company is certified under the EU–US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5780.
Chatbot (Botpress)
Our website includes a chat assistant (chatbot) provided by Botpress, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. When you access the website, the chat window is loaded from Botpress servers, and your IP address is transmitted to Botpress. If you use the chat, your entries (chat history) and any contact details you provide are processed in order to answer your questions automatically and forward inquiries to us. Please do not enter health data or other sensitive data in the chat.
Botpress processes the data on our behalf and may use sub-processors for this purpose, for example providers of AI language models. Transfers to the USA are based on the EU–US Data Privacy Framework (DPF) and the Swiss-U.S. Data Privacy Framework, under which Botpress is certified, and additionally on the European Commission's Standard Contractual Clauses. Details: https://botpress.com/legal/privacy-statement
The legal basis for loading the chat window is our legitimate interest in quick and easy communication with visitors to our website (Art. 6 (1)(f) GDPR). The legal basis for processing your chat entries is Art. 6 (1)(b) GDPR where your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG; consent can be withdrawn at any time. We delete chat histories as soon as they are no longer required to process your inquiry, unless statutory retention obligations apply.
Videos (Gumlet)
On individual pages, we embed videos provided via the video hosting service Gumlet. The provider is Gumlet Pte. Ltd., 20A Tanjong Pagar Road, Singapore 088443. The video is only loaded when you play it; your IP address is then transmitted to Gumlet's servers. The legal basis is our legitimate interest in an appealing presentation of our content (Art. 6 (1)(f) GDPR). Where data is processed outside the EU/EEA and Switzerland, this is based on the European Commission's Standard Contractual Clauses. Details: https://www.gumlet.com/privacy/
7. Customer and Contract Data
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data for the establishment, content, and modification of our contractual relationships. Personal data on the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable the user to make use of the service or to bill for it.
The legal basis for this is Art. 6 (1)(b) GDPR.
For manufacture, delivery and services, we transmit the data required for this purpose (e.g. name, delivery and billing address, contact details, order and device data) to our subsidiary in Germany commissioned with manufacture, delivery and service, and to the transport companies commissioned with delivery. For service contracts and SLAs concluded directly with this subsidiary, the subsidiary processes the data as an independent controller.
The collected customer data will be deleted after the order has been completed or the business relationship has ended and once any existing statutory retention obligations have expired. Commercial and tax retention periods (generally up to ten years) remain unaffected.
Last updated: October 2026
