Privacy Policy for the HANCA Group Website

This Privacy Policy explains how the HANCA Group (hereinafter also referred to as “we”, “us”) as the operator of this website and as a company collects data and processes personal data relating to you or other individuals (“third parties”). In this Privacy Policy, the terms “data”, “personal data” and “personal information” are used synonymously.

1. Responsibility

HANCA GMBH (Switzerland)
Sumpfstrasse 26
CH-6312 Steinhausen
Email: hello@hanca.ch

2. Data Collected

When you use our website for informational purposes only, i.e. if you do not otherwise transmit information to us (e.g. by contacting us), we collect only the data that your browser automatically transmits to our server and that is temporarily stored in log files (“log data”). In addition, we use cookies and similar technologies on our website.

When you visit our website, the following data may be collected automatically:

  • IP address of the requesting device
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Name of the requested URL and content of the request (specific page)
  • Access status / HTTP status code
  • Referrer URL (website from which access is made)
  • Browser type, language and version of the browser software
  • Operating system of your device and name of your access provider
  • Amount of data transferred in each case

This data is used solely to ensure the technical provision of the website, to improve content and for security purposes.

3. Purposes of Processing

We process the above-mentioned data for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring convenient use of our website
  • Evaluating system security and stability
  • Other administrative purposes
  • Statistical purposes, without the possibility of assigning the data to a specific individual

The collection of this data is technically necessary to display our website, ensure its functionality and stability, optimize performance and safeguard the security of our IT systems.

4. Cookies

  •  We use cookies and comparable technologies on our website. These process data about you (e.g. IP address, browser and operating system information) in order to personalize content (such as fonts), integrate third-party media or analyze access to our website. Cookies are small text files that are assigned to your browser and stored on your device. They allow the entity setting the cookie to receive certain information (e.g. about usage behavior). Cookies may contain data that enables recognition of your device on subsequent visits. Some cookies, however, contain only non-personal information about specific settings. Cookies alone cannot directly identify you, cannot execute programs and do not transmit viruses.
  • There are different types of cookies, all of which have different functions and are distinguished according to their respective characteristics. “First-party cookies” are usually used directly by us as the operator of this website. These include, for example, cookies that store your settings (such as your preferred language), login data, or your user behavior on our website. These cookies are needed, for example, to recognize you as a user when you visit our website again and are primarily used to make our offering more user-friendly and effective, i.e., more enjoyable for you. There is no cross-website tracking. Third-party cookies, on the other hand, come from third-party providers. These include, for example, advertisements that are not stored on our website’s servers. These cookies can observe your user behavior over a longer period of time and across several websites from different providers, thus enabling the creation of comprehensive user profiles. A distinction is also made between temporary cookies (“session cookies”), which are automatically deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session (e.g., two years). In terms of their function, a distinction is made between the following four types of cookies in particular:
    • Essential Cookies: These cookies are technically necessary to make the website available to you, to use basic functions, and to ensure the security and stability of the website. This includes, for example, the necessary session management (e.g., cookies for storing language settings, log-in status) through the use of session cookies, or the storage of user entries in an online form if the website has such functions and you interact with them. This also includes the management of your consents via a consent management platform and cookies for user-oriented fraud prevention and IT security. Without these cookies, the website cannot function properly. These cookies do not analyze your user behavior, collect data about you for marketing and/or advertising purposes, and are not used for geolocation or cross-website tracking of your person.
    • Functional Cookies: These cookies are not technically necessary, but they improve the overall user-friendliness of the website through enhanced and personalized functions. For example, information you have entered once, such as your user name, language settings, location, form data, or similar, can be stored beyond the session so that this information is immediately displayed when you visit the website again. In addition, functions that go beyond the essential functionality, such as more attractive fonts, video and audio files, blogs, forums, etc., can be integrated into the website.
    • Performance / Statistics Cookies: These cookies store information about how you use the website. For example, data may be collected on which subpages you visit, how often and for how long, which search terms you use, and whether errors occur when using the website. Loading times and the behavior of the website in different browsers are also measured in this way. These cookies are needed to collect pseudonymized data about visitors to the website in aggregate form. This data is used to improve the website and tailor it to individual user needs.
    • Marketing / Tracking Cookies: These cookies are used in particular to analyze your user behavior on the website, to display personalized advertising or offers from third-party providers (e.g., online map services, content and/or plug-ins from video and social media platforms) on the website, and to measure the effectiveness of these offers. These cookies make it possible to track you across several different websites and create comprehensive user profiles.
  • Cookies are generally used on the basis of our legitimate interests, in particular if they are technically necessary for the proper functioning of the website. However, you can object to the use of cookies that are not technically necessary (opt-out). The further use of cookies with a high degree of intervention (e.g., advertising tracking using high-risk profiling) only takes place with your express and active consent (opt-in). When you visit the website, you can agree to the use of all cookies via the cookie banner, make individual settings, or completely reject the use of non-essential cookies and change your settings at any time. You can also configure your browser according to your preferences and, for example, set it so that you are always informed about the setting of cookies, reject the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functionality of our website may be limited, meaning that you may not be able to use all of its features.
  • We currently use the following services on our website that store cookies:
    • Google Analytics
      Responsible body for processing in the EU
      Google Ireland Ltd.
      Gordon House, Barrow Street, Dublin 4, IrlandResponsible body for processing in the USA
      Google LLC
      1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

      Google Ireland Ltd. and Google LLC are part of the Alphabet Inc. group of companies based in Mountain View, CA, USA (hereinafter referred to as “Google”).

      Google Analytics enables us to analyze your behavior on our website. This provides us with various usage data, e.g., page views, length of stay, operating systems used, and user origin. This data is assigned to the user’s respective device. It is not assigned to a user ID. Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data sets and uses machine learning technologies for data analysis. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting).

      The legal basis for the use of this service and the associated data processing is your consent. Consent can be revoked at any time.

      The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there. Data transfer and further processing in the USA is based on the adequacy decision of the Federal Council on the Swiss-U.S.

      Data Privacy Framework dated August 14, 2024 (“DPF”). The DPF is an agreement designed to ensure compliance with data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Google is an organization certified under the DPF. Further information is available from Google at the following link:

      https://www.dataprivacyframework.gov/participant/5780. In addition, the transfer is based on the standard data protection clauses of the EU Commission. Details can be found at https://privacy.google.com/businesses/controllerterms/mccs/.

      Google Analytics IP anonymization is activated. This means that your IP address is truncated by Google before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

      Google will only store the data for as long as is necessary for the aforementioned processing purposes. Further information can be found at https://policies.google.com/privacy and https://policies.google.com/technologies/cookies.

    • reCAPTCHA
      Responsible body for processing in the EU
      Google Ireland Ltd.
      Gordon House, Barrow Street, Dublin 4, IrlandResponsible body for processing in the USA
      Google LLC
      1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

      Google Ireland Ltd. and Google LLC are part of the Alphabet Inc. group of companies based in Mountain View, CA, USA (hereinafter referred to as “Google”).

      reCAPTCHA is used to protect us from abusive automated spying and spam by checking whether data entered on our website (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes your user behavior based on various characteristics. The analysis begins automatically as soon as you visit our website. For the analysis, reCAPTCHA evaluates various information completely in the background (e.g., your IP address and length of stay on the website, as well as your mouse movements). The data collected during the analysis is forwarded to Google.

      The legal basis for the use of this service and the associated data processing is your consent. Consent can be revoked at any time.

      The data collected by Google is usually transferred to a Google server in the USA and stored there. Data transfer and further processing in the USA is based on the adequacy decision of the Federal Council on the Swiss-U.S. Data Privacy Framework of August 14, 2024 (“DPF”). The DPF is an agreement designed to ensure compliance with data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Google is an organisation certified under the DPF. Further information is available from Google at the following link: https://www.dataprivacyframework.gov/participant/5780. In addition, the transfer is based on the standard data protection clauses of the EU Commission. Details can be found at https://privacy.google.com/businesses/controllerterms/mccs/.

      Google will only store the data for as long as is necessary for the aforementioned processing purpose. Further information can be found at https://policies.google.com/privacy and https://policies.google.com/technologies/cookies.

5. Storage Period

If you visit our website and use it for informational purposes only (i.e., you do not contact us), the log data and session cookies collected by us will be automatically deleted when the respective session ends.

  • Technical data (e.g. IP addresses, server logs): approx. 30 days
  • Cookies (where applicable including analytics data): session-based up to 12 months

For further information on the duration of storage and deletion of other data collected by means of cookies, please refer to section 4 of this privacy policy.

6. Legal Basis

Personal data is processed in accordance with the provisions of the revDSG and the GDPR.

  • For technically necessary data (server logs, cookies) and to ensure website operation, processing is carried out on the basis of legitimate interests (in the case of applicability of the GDPR: Art. 6 (1) (f) GDPR).
  • For optional cookies or analysis tools, processing is based on your consent (in the case of applicability of the GDPR: Art. 6 (1) (a) GDPR).
  • Data from the contact form is processed on the basis of your consent or for the initiation of a contract/fulfillment of pre-contractual measures (in the case of applicability of the GDPR: Art. 6 (1) (a)/(b), possibly (f) GDPR).

7. Data Transfer

  • External third parties
    We work with external service providers to operate and provide our website, e.g.:
    • IT and hosting service providers (e.g. WordPress, Squarespace, Novatrend)
    • Analytics and tracking service providers (only with consent, where necessary)We only provide these service providers with the data they need for their services and conclude data protection agreements with them.
  • Transfer abroad
    Website data is generally processed within Switzerland or the EU/EEA.Some services (e.g., certain WordPress plugins or Google services) may transfer data to third countries, such as the US. In these cases, we ensure that an adequate level of data protection is in place through contracts, standard data protection clauses, or adequacy decisions.

8. Your Rights

You have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure or restriction of processing
  • Object to processing
  • Withdraw consent at any time
  • Data portability
  • Lodge a complaint with a supervisory authority

Contact: hello@hanca.ch

9. Data Security

We protect your data through appropriate technical and organizational measures, including:

  • SSL/TLS encryption
  • Access restrictions and pseudonymization
  • Regular security updates of our systems

Adequate protection is ensured even for international data transfers.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for their content or data protection practices.

11. Changes to this Privacy Policy

This Privacy Policy may be updated at any time. The current version is published on our website.

Current version: January 29, 2026

index of data privacy