Privacy.

Who is responsible

11Alto AG, Schifflände 26, 8001 Zürich, Switzerland (UID CHE-257.572.890) is responsible for the processing described here. For any privacy question or request, write to info@11alto.com with “Privacy” in the subject line.

We process personal data under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to our processing, we also comply with it.

What we process, and why

When you visit this website

Our hosting and security provider automatically records technical data such as your IP address, the date and time of your visit, the pages requested, your browser and operating system and the referring website. We use this data to deliver the website, keep it secure and fix errors. Logs are deleted or anonymised after a short period, unless we need them to investigate an attack.

We measure visits with Cloudflare Web Analytics, which does not use cookies and does not build profiles of individual visitors. We only see aggregated figures, such as the number of visits to a page.

When you contact us

If you write to us by email or through the contact form, we process your name, email address, company, country, product category, target timing and the content of your message, to answer you and, where relevant, to prepare an offer. Form requests are sent to our Google Workspace mailbox. To keep out spam, the form uses Cloudflare Turnstile, which checks that a request comes from a person without using cookies for tracking.

When you work with us

For clients, partners and suppliers, we process contact details of the people we work with and the information needed to prepare, perform and invoice our services, and to meet our legal and regulatory duties, for example as Swiss authorised representative or importer.

Legal basis under the GDPR

Where the GDPR applies, we rely on our legitimate interest in running a secure website and answering enquiries (Art. 6(1)(f)), on the performance of a contract or pre-contractual steps (Art. 6(1)(b)), on legal obligations (Art. 6(1)(c)) and, where we ask for it, on your consent (Art. 6(1)(a)), which you can withdraw at any time.

Cookies

This website does not use cookies for advertising or tracking. If we ever add a service that sets such cookies, we will ask for your consent first and update this policy.

Who receives your data

We share personal data only where it is needed for the purposes above:

• with service providers that work on our behalf and under our instructions: website hosting and security (Cloudflare, Inc.), email and office software (Google Workspace) and, where used, accounting software;
• with specialists in our network, such as regulatory, logistics or communications partners, where they help deliver a service you asked for, under confidentiality;
• with authorities, such as Swissmedic, courts or tax authorities, where the law requires it.

We do not sell or rent personal data, and we do not use it for automated decisions about you.

Data abroad

Some of our providers process data outside Switzerland, including in the EU and the United States. We transfer data only to countries that the Swiss Federal Council recognises as providing adequate protection, or with appropriate safeguards such as the European Commission's standard contractual clauses. For US providers certified under the Swiss-US Data Privacy Framework, such as Cloudflare and Google, the transfer relies on the Federal Council's adequacy decision in force since 15 September 2024.

How long we keep data

We keep personal data only as long as needed for the purpose for which it was collected. Website logs are kept for a short period. Enquiries we do not follow up are deleted after 24 months. Business records, contracts and invoices are kept for ten years, as Swiss law requires.

Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access controls and reputable providers. No transmission over the internet is completely secure, so please do not send sensitive health information by email.

Your rights

Within the limits of the applicable law, you can ask us for access to your personal data, and ask us to correct, delete or hand over your data, restrict how we use it or stop using it. You can withdraw consent at any time with effect for the future. To exercise these rights, write to info@11alto.com. We may need to confirm your identity first.

You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU or EEA, to the data protection authority where you live or work.

Changes

We may update this policy when our services or the law change. The version published on this page applies.

Last updated: November 2026