Privacy Policy
Last updated 11 September 2026
This policy explains what happens to personal data when you visit kobellaholdings.ch. We have kept it short, because this site does very little with your data: there are no user accounts, no shop, no newsletter, and no advertising of any kind.
Who is responsible
The controller is:
- Kobella Limited, Elisabethenstrasse 28, 4051 Basel, Switzerland
- Commercial register number CH-270.3.003.446-0
- Telephone +41 61 555 03 01
For anything to do with privacy — including the requests described below — write to boaz@kobella.ch.
We are based in Switzerland and this site is addressed to a Swiss audience, so the Swiss Federal Act on Data Protection (FADP) applies. Where you are in the European Economic Area, the GDPR may also apply to your data, and the rights described below are available to you either way.
When you simply read the site
The pages are static files. Visiting them sets no cookies and requires you to tell us nothing.
Our hosting provider records standard server logs — your IP address, the page requested, the time, and your browser's user-agent string — which exist so that the site can be operated and defended against abuse. They are kept for a short period and then discarded. The legal basis is our legitimate interest in running a working, secure website.
The site is served by Vercel (hosting, servers in Frankfurt) through Cloudflare (network and security). Both act as our processors.
When you use the contact form
The form asks for your name, email address, subject and message. There is no database behind it: what you write is turned into an email and delivered to our mailboxes by Resend, whose servers for this domain are in Ireland. Nothing is stored on the website itself.
We use what you send in order to answer you. The legal basis is your own request — you are asking us to get in touch — together with our legitimate interest in responding to enquiries about our business.
We keep contact enquiries for 24 months and then delete them. If a message leads to an ongoing business relationship, the correspondence is kept for as long as that relationship and any legal retention periods require.
To stop automated submissions the form is protected by Cloudflare Turnstile. Turnstile receives your IP address and signals about your browser in order to judge whether the submission is human. It does not ask you to solve a puzzle and it does not track you across other websites. Without this check we would receive a great deal of automated mail, so the legal basis is our legitimate interest in keeping the form usable.
Analytics, and the choice you are offered
We would like to know which pages people read. Two different things are involved, and they are treated differently.
Google Analytics — only if you allow it
Google Analytics 4, loaded through Google Tag Manager, sets cookies and tells us how the site is used. It does not load at all until you press “Allow analytics” in the cookie banner. Before you choose, your browser makes no request to Google whatsoever. The legal basis is your consent.
If you allow it, data including your shortened IP address and your behaviour on the site is processed by Google, which may involve a transfer to the United States. Google is certified under the EU–US Data Privacy Framework and its Swiss extension, and we rely on that recognition for the transfer.
You can change your mind at any time: press Cookie settings at the foot of any page and choose Decline. The analytics cookies are deleted and the tag is not loaded again.
Vercel Web Analytics — always on, and cookie-free
Our host provides a simple page-view count that sets no cookies, stores no identifier in your browser, and cannot follow you to another website. It tells us that a page was viewed, not who viewed it. Because it neither reads nor writes anything on your device and does not build a profile, it runs without asking — this is the trade we chose, so that the banner only ever asks about something that genuinely needs consent. The legal basis is our legitimate interest in knowing whether the site is read.
Cookies, and what is stored on your device
If you make a choice in the cookie banner we remember it in your browser's local storage — not in a cookie — so that you are not asked again. It holds your answer and nothing else, and it never leaves your device.
Cookies are set only if you allow analytics, and then only by Google Analytics. Clearing your browser storage removes both.
Who else sees your data
We do not sell personal data and we do not share it for advertising. It is handled only by the service providers named above — Vercel, Cloudflare, Resend, Google Workspace for our email, and Google Analytics if you have allowed it — each acting on our instructions for the purpose described. We disclose data beyond that only where the law requires it.
Your rights
You can ask us to:
- tell you what personal data we hold about you, and give you a copy
- correct anything inaccurate
- delete it
- stop processing it, where we are relying on legitimate interest
- hand it to you or to another provider in a machine-readable form
Write to boaz@kobella.ch. We do not charge for this and we will reply as quickly as we can. We may need to ask a question to confirm who you are, so that we do not hand someone's data to the wrong person.
If you are unhappy with how we have handled your data you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to the supervisory authority where you live if you are in the EEA.
Security, and the things we do not do
The site is served over HTTPS, and the data we hold — essentially, emails you have sent us — sits in mailboxes protected by the usual account controls. No transmission over the internet is ever completely secure, but the amount of personal data involved here is deliberately small.
We do not make automated decisions about you, we do not build profiles, and we do not knowingly collect data from children.
Changes
If we change how this site handles personal data we will update this page and the date at the top. This version is dated 11 September 2026.