Legal information

Envestis SA ("we", "our", "us", "Envestis", or the "Company") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains in detail how we collect, use, store, disclose, and safeguard your personal data when you visit or interact with the website envestis.ch (the "Website"). This policy is designed to comply with the Swiss Federal Act on Data Protection (nFADP/DSG), the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), and the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller

Envestis SA
Via Pretorio 13A
6900 Lugano
Canton Ticino, Switzerland

Email (legal inquiries): [email protected]
Email (general inquiries): [email protected]
Website: envestis.ch

Envestis SA is the data controller responsible for the processing of your personal data as described in this Privacy Policy. If you have any questions regarding data protection, wish to exercise your rights, or have concerns about how your data is being processed, please contact us at [email protected].

2. Data We Collect

2.1 Contact Form Data

When you submit our contact form to request a free security audit or make a general inquiry, we collect the following data:

• Required fields: Full name, email address, message content
• Optional fields: Phone number, company name, website URL

This data is transmitted securely via Brevo (Sendinblue SAS, France) to our email inbox. We use this information solely to respond to your inquiry, evaluate your request, and - where applicable - to prepare and deliver the requested security audit or other services.

2.2 Technical Data (Automatically Collected)

When you visit our Website, certain technical data is automatically collected through our hosting and content delivery infrastructure. This includes:

• IP address (anonymized where technically feasible)
• Browser type and version
• Operating system
• Referring URL (the page that linked you to our site)
• Pages visited and navigation path
• Date, time, and duration of your visit
• Device type and screen resolution
• Language preferences

Our Website is hosted on Cloudflare Pages. Cloudflare processes this data as a data processor acting on our behalf under its Data Processing Addendum (DPA). This processing is necessary for the delivery, optimization, and security of the Website. For full details, see Cloudflare's Privacy Policy.

2.3 Analytics Data

With your consent, we use Cloudflare Web Analytics, a privacy-focused, cookieless analytics service. Cloudflare Web Analytics:

• Does not use cookies or any form of client-side storage for analytics
• Does not collect personally identifiable information
• Does not track individual users across sessions or websites
• Provides only aggregated metrics such as page views, referrers, browser types, and geographic regions (country-level)

No personal data is transmitted to third parties for analytics purposes. You may withdraw your consent for analytics at any time through the cookie consent banner or by contacting us.

2.4 Bot Protection Data

We use Cloudflare Turnstile to protect our contact form and other interactive elements from automated abuse, spam, and bot attacks. Turnstile may process:

• IP address
• Browser characteristics and environment data
• Interaction patterns (mouse movements, keystrokes - used only for bot detection)

This processing is based on our legitimate interest in maintaining the security and integrity of our Website and preventing spam and abuse (GDPR Art. 6(1)(f)). Turnstile is designed to be privacy-preserving and does not use cookies for tracking purposes.

2.5 Web Fonts

Our Website uses Google Fonts served via Google's Content Delivery Network (CDN). When you visit our Website, your browser establishes a connection to Google's servers to retrieve font files. In this process, your IP address is transmitted to Google LLC. Google's use of this data is governed by Google's Privacy Policy.

3. Cookies and Local Storage

We use a minimal number of cookies, strictly limited to those necessary for the functioning and security of our Website. We do not use advertising cookies, tracking pixels, social media plugins, or cross-site tracking technologies of any kind.

Cookieless analytics: Cloudflare Web Analytics operates entirely without cookies. No analytics cookies are placed on your device at any time.

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our Website, or by adjusting your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Website.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data only when we have a valid legal basis under the GDPR. The specific legal basis depends on the processing activity:

Where we rely on legitimate interest as the legal basis, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest at any time (see Section 8).

5. Third-Party Services

We engage a limited number of third-party service providers to operate and maintain our Website. Each provider has been selected for its strong privacy practices and compliance with applicable data protection laws.

We have entered into Data Processing Agreements (DPAs) or verified the existence of appropriate safeguards with all processors that handle personal data on our behalf.

6. International Data Transfers

Some of our third-party service providers are based in or process data in countries outside of Switzerland and the European Economic Area (EEA), particularly the United States. We ensure that all international data transfers are conducted in compliance with Chapter V of the GDPR (Articles 44-49) and Chapter 2 of the Swiss nFADP. The following safeguards are in place:

• EU-US Data Privacy Framework (DPF): Cloudflare, Inc. and Google LLC are certified participants in the EU-US Data Privacy Framework, which has been recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision of 10 July 2023). Switzerland has also recognized the Swiss-US Data Privacy Framework.
• Standard Contractual Clauses (SCCs): Where the DPF does not apply or as an additional safeguard, we rely on Standard Contractual Clauses as adopted by the European Commission (Commission Implementing Decision (EU) 2021/914) and recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
• Data Processing Addenda (DPAs): All third-party providers processing personal data on our behalf have executed or published Data Processing Addenda that include appropriate technical and organizational measures.
• EU-based processing: Brevo (Sendinblue SAS) processes data within the European Union (France), which provides an adequate level of data protection under Swiss law.

You may request a copy of the relevant safeguards by contacting [email protected].

7. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our specific retention periods are:

When personal data is no longer required, it is securely deleted or irreversibly anonymized. We conduct periodic reviews of retained data to ensure compliance with these retention periods.

8. Your Rights

8.1 Rights Under GDPR (EU/EEA Residents)

If you are located in the European Union or the European Economic Area, you have the following rights under the GDPR:

• Right of access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data, along with information about the processing.
• Right to rectification (Art. 16): You have the right to request the correction of inaccurate personal data and to have incomplete data completed.
• Right to erasure / "right to be forgotten" (Art. 17): You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restriction of processing (Art. 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to data portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to object (Art. 21): You have the right to object to the processing of your personal data based on legitimate interests (Art. 6(1)(f)). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right not to be subject to automated decision-making (Art. 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you. We do not engage in such processing.
• Right to withdraw consent (Art. 7(3)): Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

8.2 Rights Under the Swiss nFADP (DSG)

Swiss residents have equivalent data protection rights under the revised Swiss Federal Act on Data Protection (nFADP/DSG), which entered into force on 1 September 2023. These include:

• Right to information (Art. 25 DSG): You may request information about whether and how we process your personal data.
• Right to data disclosure and portability (Art. 28 DSG): You may request the release of your personal data or its transfer to another controller in a commonly used electronic format.
• Right to rectification (Art. 32 DSG): You may request the correction of inaccurate personal data.
• Right to deletion (Art. 32 DSG): You may request the deletion of your personal data.
• Right to object: You may object to the processing of your data at any time.

The competent supervisory authority for data protection in Switzerland is:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
Website: www.edoeb.admin.ch

8.3 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: You have the right to know what personal information we collect, the purposes of collection, the categories of third parties with whom we share personal information, and the specific pieces of personal information we hold about you.
• Right to delete: You have the right to request the deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to correct: You have the right to request the correction of inaccurate personal information.
• Right to opt out of the sale or sharing of personal information: We do not sell or share your personal information for cross-context behavioral advertising purposes. Therefore, there is no need to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by the CPRA.

Categories of personal information collected in the preceding 12 months: Identifiers (name, email address, IP address), Internet or electronic network activity information (browsing history on our Website, interaction with our Website), and professional or employment-related information (company name, if provided).

We do not sell personal information. We have not sold personal information in the preceding 12 months and have no plans to do so.

To exercise your CCPA/CPRA rights, contact us at [email protected]. We will verify your identity before processing your request and will respond within 45 days.

8.4 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: [email protected]
Subject line: "Data Protection Request"

We will acknowledge your request within 5 business days and provide a substantive response within 30 days (GDPR/nFADP) or 45 days (CCPA/CPRA). If your request is complex or we receive a large number of requests, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reasons for it. We may ask you to verify your identity before processing your request to protect your data from unauthorized disclosure.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your browser and our Website is encrypted using TLS 1.2 or higher (HTTPS). We enforce HSTS (HTTP Strict Transport Security) headers.
• Web Application Firewall (WAF): Cloudflare WAF provides real-time protection against common web vulnerabilities including SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats.
• DDoS protection: Cloudflare's global network provides automatic DDoS mitigation for all traffic to our Website.
• Access controls: We implement the principle of least privilege, ensuring that only authorized personnel have access to personal data, and only to the extent necessary for their role.
• Regular security assessments: As a cybersecurity company, we conduct regular internal security reviews and assessments of our own infrastructure and processes.
• Secure email transmission: Contact form data is transmitted to Brevo via encrypted API connections (TLS).
• Vendor security review: We evaluate the security posture and data protection practices of all third-party service providers before engagement.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach (GDPR Art. 33). Under Swiss nFADP (Art. 24), we will notify the FDPIC as soon as possible.
• Notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms (GDPR Art. 34), providing clear information about the nature of the breach, its likely consequences, and the measures taken or proposed to mitigate it.
• Document the breach internally, including the facts of the breach, its effects, and the remedial actions taken, in accordance with our breach response procedures.

11. Children's Privacy

Our Website and services are not directed at children under 16 years of age. We do not knowingly collect, solicit, or process personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete such data. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at [email protected].

12. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals (GDPR Art. 22). The bot protection mechanism (Cloudflare Turnstile) performs automated analysis of visitor behavior solely for the purpose of distinguishing human visitors from bots, and does not produce decisions that have legal or similarly significant effects on you.

13. Do Not Track (DNT) Signals

Our Website respects Do Not Track (DNT) browser signals. When we detect a DNT signal, we do not load analytics scripts. Additionally, since Cloudflare Web Analytics is cookieless and does not track individual users, our analytics approach is inherently privacy-respecting regardless of DNT settings.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

• The updated policy will be posted on this page with a revised "Last updated" date.
• For material changes that significantly affect how we process your personal data, we will provide a prominent notice on our Website (such as a banner notification) at least 30 days before the changes take effect.
• If required by law, we will obtain your renewed consent for any new processing activities.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us:

Envestis SA
Via Pretorio 13A
6900 Lugano, Switzerland
Email (legal/privacy): [email protected]
Email (general): [email protected]

We aim to resolve all complaints and disputes regarding data protection in a timely and fair manner. If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority (see Section 8).

This Cookie Policy explains how Envestis SA uses cookies and similar technologies on envestis.ch. It complements our Privacy Policy.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember your preferences, track usage, or deliver functionality. Similar technologies include local storage, web beacons, and pixels. This policy applies to all such technologies, which we collectively refer to as "cookies".

2. Cookies we use

2.1 Strictly necessary (always active)

These cookies are required for the website to function and cannot be disabled. They do not require consent under Swiss nLPD and EU GDPR.

2.2 Analytics and functional (consent required)

These cookies are loaded only after you click "Accept" on the cookie banner, or enable Analytics in the preferences panel.

3. Managing your preferences

You can review or change your cookie preferences at any time. There are three ways to do this:

1. Footer link - click "Cookie settings" at the bottom of any page on envestis.ch. The consent banner will re-appear and you can toggle Analytics on or off.
2. Browser settings - most browsers allow you to block or delete cookies. Refer to your browser's documentation. Note that blocking strictly necessary cookies may prevent the site from working correctly.
3. Third-party opt-outs - for Google Analytics specifically, you can install the official opt-out browser add-on at tools.google.com/dlpage/gaoptout.

If you reject Analytics and functional cookies, analytics tracking will not load. The website will continue to function for all core purposes (browsing pages, submitting contact forms, navigating between languages).

4. Third-party processors

Some cookies are set by third-party services we use. We have data processing agreements (DPAs) in place with each, as required under Swiss nLPD and EU GDPR.

• Google Analytics 4 (Google LLC, Ireland and USA) - Privacy policy: policies.google.com/privacy. Data is processed in EU servers with anonymised IPs.
• Cloudflare (Cloudflare Inc., USA, with EU presence) - Privacy policy: cloudflare.com/privacypolicy. Provides bot protection, security challenges, and edge delivery. Our forms and interactive tools also use Cloudflare Turnstile (including invisible mode) to prevent spam and automated abuse; this verification processes technical signals such as your IP address and is governed by the Cloudflare Turnstile Privacy Addendum.

5. International transfers

Some third-party providers above are based outside Switzerland and the EU. Transfers rely on Standard Contractual Clauses (SCCs) and supplementary measures, in line with the Swiss-EU adequacy decision and the EU-US Data Privacy Framework where applicable.

6. Updates to this policy

We may update this Cookie Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted in the consent banner.

7. Contact

For questions about this Cookie Policy or our use of cookies, please contact:

Envestis SA
Via Pretorio 13A, 6900 Lugano, Switzerland
Email: [email protected]

These Terms of Service ("Terms", "Agreement") constitute a legally binding agreement between you ("you", "your", "User", "Client") and Envestis SA ("Envestis", "we", "us", "our", the "Company"), a company registered in Lugano, Canton Ticino, Switzerland. These Terms govern your access to and use of the envestis.ch website (the "Website") and the professional services provided by Envestis.

By accessing, browsing, or using the Website or engaging our services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree with any part of these Terms, you must discontinue use of the Website immediately.

1. Definitions

For the purposes of these Terms, the following definitions apply:

• "Services" means the professional web and digital services offered by Envestis, including the design, development and delivery of template-based and custom websites, e-commerce sites, web applications, AI-powered applications, custom software, and related digital and advisory services.
• "Website" means the website accessible at envestis.ch, including all pages, content, features, and functionality.
• "Client" means any individual or entity that engages Envestis for Services pursuant to a separate service agreement, quotation, or statement of work.
• "User" means any individual who accesses or uses the Website.
• "Service Agreement" means the specific written contract, quotation, or statement of work agreed between Envestis and a Client that governs a particular project (for example, the Template-Based Website Supply Agreement).
• "Client Content" means the texts, logos, images, photographs, trademarks, data and other materials supplied by the Client for use in a project.
• "Confidential Information" means any non-public information disclosed by one party to the other in connection with the Services, including technical data, business information, project materials, methodologies, and any information marked as confidential or that a reasonable person would consider confidential given its nature and the circumstances of disclosure.
• "Intellectual Property" means all copyrights, trademarks, trade secrets, templates, source code, designs, methodologies, tools, frameworks, techniques, know-how, and any other intellectual property rights.
• "Force Majeure Event" means any event beyond the reasonable control of a party, including natural disasters, war, terrorism, pandemics, government actions, power failures, internet outages, or the failure or unavailability of third-party infrastructure and services (including Cloudflare, Stripe, and domain providers).

2. Service Description

Envestis SA is a web agency. It provides professional web and digital services, including:

• Template-based websites: the adaptation and personalisation of a pre-existing template from our library according to the content and instructions supplied by the Client.
• Custom websites and development: the design and development of bespoke websites, e-commerce stores, web applications, AI-powered applications and custom software, subject to a separate quotation.
• Hosting and maintenance: hosting on the Cloudflare cloud network, SSL certificate, ordinary maintenance, technical and platform updates, availability monitoring and support, as set out in the applicable Service Agreement.

The Website provides general information about our Services and allows visitors to contact us via a contact form to request information or a quotation. The provision of specific Services is subject to a separate Service Agreement agreed by both parties. In the event of any conflict between these Terms and a Service Agreement, the Service Agreement prevails with respect to the Services it covers.

3. Website Usage Rules

You may access and browse the Website for informational purposes. By using the Website, you agree not to:

• Use the Website for any purpose that is unlawful or prohibited by these Terms
• Attempt to gain unauthorised access to any part of the Website, its servers, databases, or any connected networks or systems
• Interfere with, disrupt, or place an undue burden on the Website or its infrastructure
• Use automated tools, bots, scrapers or crawlers to access, extract, index or reproduce content from the Website without prior written consent
• Transmit any viruses, malware, or other harmful code
• Impersonate any person or entity, or misrepresent your affiliation with any person or entity
• Collect or harvest personal information of other users of the Website
• Use the Website to send unsolicited communications (spam)
• Reverse-engineer, decompile, or disassemble any software or technology used on the Website

Envestis reserves the right to restrict or terminate access to the Website for any User who violates these rules, without prior notice and without liability.

4. Contact Form Terms

By submitting the contact form on our Website, you:

• Consent to the collection and processing of the personal data you provide (name, email, phone number, company name, website URL and message) in accordance with our Privacy Policy
• Confirm that the information you provide is accurate and complete to the best of your knowledge
• Understand that submission of the form does not constitute a binding contract for Services or guarantee a response within any specific timeframe
• Acknowledge that we will make reasonable efforts to respond to your inquiry within 5 business days, though response times may vary depending on volume and complexity
• Consent to the use of Brevo (Sendinblue SAS) as our email service provider for the transmission and delivery of your message
• Understand that your submission is protected by Cloudflare Turnstile bot protection

5. Project Engagements and Service Agreements

Specific projects are governed by a separate Service Agreement that sets out, among other things, the subject of the engagement, the price (typically a one-off setup fee and a recurring monthly fee), payment terms, deadlines, the number of included revision cycles, extraordinary work, warranty, and the template licence. The following principles apply to all engagements and are detailed in the applicable Service Agreement:

• Client content and deadlines: the Client undertakes to supply all necessary content within the deadline stated in the Service Agreement. Where content is missing after the deadline, Envestis may source it for an agreed surcharge, or the inactivity provisions of the Service Agreement apply.
• Fees: the setup fee is generally payable as a deposit on signing and the balance on delivery of the approved website; the recurring monthly fee starts when the website goes live and is charged automatically via Stripe.
• Revisions and delivery: a defined number of revision cycles is included; upon notification of completion the Client reviews the website within the agreed period, after which it is deemed approved and the balance invoiced.
• Extraordinary work: services not included in the fee, or exceeding the included revision cycles, are treated as extraordinary work and billed separately at the hourly rate stated in the Service Agreement, only after the Client's confirmation.

6. Client Content and Responsibilities

The Client warrants that it holds all rights (copyright, trademark, image and any other rights) in the Client Content it supplies, and that such content infringes neither third-party rights nor any law, and is not defamatory, misleading, unlawful or harmful to third parties. The Client shall fully hold harmless and indemnify Envestis against any claim, action, cost, legal expense or damages arising from the infringement of third-party rights or of the law in connection with the materials or content it supplies or requests. Envestis is under no duty to verify ownership of rights in the Client's materials and, on notice of an infringement, may remove the contested content without liability.

7. Intellectual Property and Template Licence

All content on the Website - including text, articles, graphics, logos, icons, images, page layouts, underlying code and software - is the exclusive property of Envestis SA or its licensors and is protected by Swiss and international copyright, trademark and other intellectual property laws.

The templates, source code, designs and every underlying technical element used or created by Envestis in the delivery of its Services remain the exclusive Intellectual Property of Envestis. Where a website is delivered to a Client, Envestis grants a non-exclusive, non-transferable licence to use it, limited to the duration of the relationship and to the single website covered by the Service Agreement. The Client acquires no right in the template as such: copying, replicating, reselling, transferring to third parties or reusing it on other websites is prohibited, including after termination of the relationship. On termination, the licence lapses and the Client retains only its own Client Content, which remains the Client's property.

No part of the Website or its content may otherwise be reproduced, distributed, modified, published or used without the prior written consent of Envestis SA. You are granted a limited, non-exclusive, non-transferable, revocable licence to access and view the Website content for personal, non-commercial informational purposes only.

8. No Guarantee of Results

Envestis supplies a technical service to create and maintain websites and digital products. Envestis does not warrant or guarantee any commercial result, search-engine ranking (SEO), traffic, visibility or sales. Any optimisation, marketing or advertising activity is excluded from the Services unless expressly agreed in writing in a separate agreement.

9. Warranty and Disclaimer

Website: The Website, including all content, features and functionality, is provided on an "AS IS" and "AS AVAILABLE" basis, without warranties of any kind, whether express, implied or statutory. To the fullest extent permitted by applicable law, Envestis disclaims all warranties, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy and completeness. We do not warrant that the Website will be uninterrupted, error-free or free from harmful components.

Services: Services are provided with reasonable skill, care and diligence consistent with generally accepted industry standards and practices in web design and development. Where a website is delivered under a Service Agreement, Envestis warrants, for the period stated therein (typically 12 months from delivery), the conformity of the website with what was agreed and the free correction of technical defects attributable to Envestis. This warranty does not cover malfunctions arising from third-party or Client modifications, from Client-supplied content, from third-party services, from misuse, or from external causes.

Information on the Website: Information published on the Website (including blog posts and articles) is provided for general informational and educational purposes only and does not constitute professional, legal or financial advice.

10. Limitation of Liability

To the maximum extent permitted by Swiss law, the following limitations apply:

• Direct damage only: Envestis is liable solely for direct damage caused by its own gross negligence or wilful misconduct.
• Liability cap: Envestis's total aggregate liability for all claims arising out of or related to a project or these Terms shall not exceed the amounts paid by the Client to Envestis in the twelve (12) months preceding the event giving rise to the claim.
• No indirect damages: Envestis, its directors, officers, employees and contractors shall not be liable for any indirect, incidental, special, consequential or punitive damages, including loss of profits, loss of revenue, loss of data, loss of goodwill or business interruption, regardless of the legal theory and even if advised of the possibility of such damages.
• Third-party services: Envestis is not liable for the acts, omissions, failures or unavailability of third-party providers and infrastructure (including Cloudflare, Stripe, domain providers and other external services). Envestis makes periodic backups on reasonable criteria, but the Client remains responsible for keeping its own copy of its content.
• Time limitation on claims: any claim arising out of or related to these Terms must be brought within one (1) year after the cause of action arises.

Some jurisdictions do not allow certain limitations of liability. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable Swiss law.

11. Indemnification

You agree to defend, indemnify and hold harmless Envestis SA, its directors, officers, employees and contractors from and against any and all claims, demands, liabilities, damages, losses, costs and expenses (including reasonable legal fees and court costs) arising out of or related to: your violation of these Terms or any applicable law; your use or misuse of the Website; your Client Content or your infringement of any third party's intellectual property or other rights; or any claim by a third party arising from your actions or omissions in connection with the Website or Services. This obligation survives the termination of these Terms.

12. Confidentiality

Each party agrees to maintain the confidentiality of the other party's Confidential Information, to use it solely for the purpose for which it was disclosed, and to protect it with at least a reasonable standard of care. These obligations do not apply to information that: (a) is or becomes publicly available through no fault of the receiving party; (b) was already known to the receiving party prior to disclosure; (c) is independently developed without reference to the Confidential Information; or (d) is required to be disclosed by law, regulation or court order. Confidentiality obligations survive termination of these Terms for a period of 3 years.

13. Third-Party Services and Payments

The Services rely on third-party providers, including Cloudflare (hosting and edge delivery), Stripe (payment processing) and domain registrars. Their availability, performance and terms are outside Envestis's control. Recurring fees are charged automatically via Stripe; payment card data is handled directly by Stripe as processor and is not stored in full by Envestis. Abusive disputing of a Stripe charge (chargeback) does not extinguish any debt and passes the related costs to the Client, as further detailed in the applicable Service Agreement.

14. Data Protection

Envestis processes personal data in compliance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU GDPR, as described in our Privacy Policy. Envestis processes a Client's data solely to perform the Services. Payment data is handled directly by Stripe as processor.

15. Termination

These Terms are effective as long as you use the Website. We may suspend or terminate your access to all or any part of the Website at our discretion for any breach of these Terms, without prior notice and without liability. Termination of specific Service engagements is governed by the applicable Service Agreement; in the absence of a separate agreement, either party may terminate an ongoing engagement with one month's written notice for the end of the month. On termination, hosting and publication of the website cease and the template licence lapses; the Client's content is made available to it on request. The sections concerning Intellectual Property, Confidentiality, Warranty and Disclaimer, Limitation of Liability, Indemnification, and Governing Law survive termination.

16. Force Majeure

Neither party shall be liable for any failure or delay in performing its obligations under these Terms (other than payment obligations) to the extent that such failure or delay is caused by a Force Majeure Event. The affected party shall promptly notify the other party and use reasonable efforts to mitigate the effects. During such events, the affected obligations are suspended for their duration.

17. Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the substantive laws of Switzerland, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). Any dispute, controversy or claim arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the competent courts of Lugano, Canton Ticino, Switzerland, subject to appeal to the Swiss Federal Supreme Court.

18. Changes to These Terms

We reserve the right to modify, amend or replace these Terms at any time at our sole discretion. Changes take effect upon publication on this page with a revised "Last updated" date. For material changes we will provide reasonable notice via a prominent notice on the Website. Your continued use of the Website after any modification constitutes your acceptance of the revised Terms. If you do not agree with the modified Terms, you must discontinue use of the Website.

19. Severability and Entire Agreement

If any provision of these Terms is found by a competent court to be invalid, illegal or unenforceable, such provision shall be modified to the minimum extent necessary to make it valid and enforceable, or severed if modification is not possible; the remaining provisions shall continue in full force and effect. These Terms, together with our Privacy Policy and any applicable Service Agreement or quotation, constitute the entire agreement between you and Envestis with respect to the Website and the Services. The failure of Envestis to exercise or enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.

20. Contact

If you have any questions about these Terms, please contact us:

Envestis SA
Via Pretorio 13A
6900 Lugano, Switzerland
Email: [email protected]
Website: envestis.ch

Company Information

Envestis SA
Via Pretorio 13A
6900 Lugano
Canton Ticino, Switzerland

Commercial Register

Legal form: Societa Anonima (SA)
Registered office: Lugano, Canton Ticino
UID/IDI: CHE-339.253.743
CH-ID: CH-501-3019175-3
Commercial Register of the Canton of Ticino

Contact Details

Email (legal inquiries): [email protected]
Email (general inquiries): [email protected]
Website: envestis.ch

Responsible for Content

Managing Director
Envestis SA
Via Pretorio 13A
6900 Lugano, Switzerland

Responsible for the content of this website pursuant to applicable Swiss media and telecommunications law.

Regulatory Information

Envestis SA is a corporation (Aktiengesellschaft / Societe Anonyme) registered in the Commercial Register of the Canton of Ticino under UID CHE-339.253.743, operating under Swiss commercial law - specifically the Swiss Code of Obligations (CO/OR, Obligationenrecht). Envestis SA is a web agency providing website design and development, e-commerce, web and AI applications, custom software, and related digital services.

Envestis SA is not a regulated financial institution and does not require a license from the Swiss Financial Market Supervisory Authority (FINMA). The company operates in full compliance with applicable Swiss federal and cantonal laws, including but not limited to the Swiss Federal Act on Data Protection (nFADP/DSG), the Swiss Code of Obligations (CO/OR), and the Swiss Federal Act on Unfair Competition (UWG).

VAT Information

UID/IDI: CHE-339.253.743
VAT registration information is available upon request. Please contact [email protected] for details.

Professional Liability

Envestis SA maintains professional liability insurance appropriate to the nature and scope of its services. As a web agency providing website design and development, e-commerce, and related digital services, Envestis adheres to recognized industry standards and best practices for web development, including current guidelines on accessibility, performance, and security. All services are delivered with reasonable skill, care, and diligence consistent with the standards expected of qualified web and software professionals.

The engagement of Envestis for professional services does not create an implied guarantee that a website or application will operate uninterrupted, error-free, or immune to every security threat. The digital environment evolves continuously; unless a separate maintenance agreement is in place, Clients remain responsible for the ongoing operation and maintenance of their websites and systems.

Dispute Resolution

Envestis SA is committed to resolving disputes in a fair, efficient, and amicable manner. If you have a complaint or concern regarding our Website or Services, we encourage you to contact us first at [email protected] so that we may attempt to resolve the matter directly.

While Envestis SA is not obligated to participate in dispute resolution proceedings before a consumer arbitration board, we are willing to engage in good-faith negotiations to seek an amicable resolution.

If a dispute cannot be resolved amicably, it shall be subject to the exclusive jurisdiction of the competent courts of Lugano, Canton Ticino, Switzerland, in accordance with Swiss law.

Disclaimer for External Links

This Website may contain hyperlinks to external third-party websites. These links are provided solely for your convenience and reference. Envestis SA has no control over the content, availability, privacy practices, or security of external websites and assumes no responsibility or liability for:

• The accuracy, completeness, or reliability of any information on linked external websites
• Any damages or losses - direct or indirect - arising from your use of or reliance on external websites
• The privacy practices or data collection policies of external websites
• The security of external websites or any transactions you conduct thereon

The inclusion of any link does not imply endorsement, affiliation, sponsorship, or approval by Envestis SA of the linked website or its operator. We recommend that you review the terms of service and privacy policy of any external website before providing personal data or engaging with its content.

Copyright Notice

All content on this Website - including text, images, graphics, logos, icons, layout, and underlying source code - is the intellectual property of Envestis SA or its licensors and is protected by Swiss and international copyright laws. Unauthorized reproduction, distribution, modification, or use of any content from this Website is strictly prohibited without prior written consent from Envestis SA.

© 2024 - 2026 Envestis SA. All rights reserved.

Information Disclaimer

The information provided on this Website is for general informational and educational purposes only. It does not constitute and should not be construed as legal, financial, technical, or professional advice. While we strive to ensure the accuracy and timeliness of the information presented, Envestis SA makes no representations or warranties - express or implied - regarding the completeness, accuracy, reliability, or suitability of the information for any particular purpose. Any reliance you place on the information on this Website is strictly at your own risk.

The Envestis service contract, available to download in all four languages.