Privacy policy

This statement describes which personal data eRevo AG processes, for which purposes it does so and which rights you have in this regard. It is aligned with the Swiss Data Protection Act (FADP) and with the European General Data Protection Regulation (GDPR).

Table of contents

1. What is this privacy statement about?
2. Who is responsible for processing your data?
3. Which personal data do we process?
4. For which purposes do we process your personal data?
5. Which online tracking and online advertising techniques do we use?
6. What applies to profiling and automated decisions?
7. How do we process data in connection with social media?
8. To whom do we disclose your personal data?
9. Do we disclose personal data abroad?
10. For how long do we process personal data?
11. On which legal bases is the data processing founded?
12. How do we protect your data?
13. Which rights do you have?

1. What is this privacy statement about?

eRevo AG, Surseestrasse 53, 6206 Neuenkirch (“eRevo”, “we” or “us”) processes personal data relating to you or to other persons in various ways and for various purposes. “Personal data” means all information that can be related to an identified or identifiable person, and “process” means any handling of such data, for example collection, use and disclosure.

This privacy statement explains our processing of such data (hereinafter “personal data” or “data”) where

• you visit our website erevo.ch or the websites of the other group companies,
• you complete our Quick Check or request technical documentation from us,
• you obtain our services or products,
• you are otherwise connected with us within the framework of a contract,
• you contact us by email, letter, on social media, by SMS or via a form,
• you deal with us in the context of any further data processing connected with our offerings.

For ease of reading, this privacy statement does not name several genders. However, we always mean persons of all genders.

Please take the time to read this privacy statement in order to learn how and why eRevo AG processes your personal data, how eRevo AG protects your personal data and which rights you have in this connection. Should you have questions or wish for further information on our data processing, we shall be pleased to assist you (section 2).

We have aligned this privacy statement both with the Swiss Data Protection Act (FADP) and with the European General Data Protection Regulation (GDPR). Where this privacy statement refers to “personal data” in terms of the FADP, this also covers “personal data” within the meaning of the GDPR. Whether and to what extent the GDPR applies at all depends, however, on the individual case.

2. Who is responsible for processing your data?

For the data processing described in this privacy statement, the following company is the “controller”, that is to say the body primarily responsible under data protection law, unless otherwise communicated in an individual case:

eRevo AG
Surseestrasse 53
6206 Neuenkirch
Switzerland

If you have questions on data protection, you are welcome to contact the following address so that we can deal with your request promptly:

Email: contact@erevo.ch

3. Which personal data do we process?

Depending on the occasion and purpose, we process various categories of personal data. The most important categories are set out below, although this list cannot be exhaustive.

You disclose many of the data mentioned in this section to us yourself (for example via the Quick Check, a contact form, in the course of communicating with us, in connection with contracts or when using the website). You are not obliged to do so, subject to individual cases. If you wish to conclude contracts with us or to claim services, you must furthermore provide us with data within the scope of your contractual obligations under the relevant contract, in particular master data and contract data.

If you transmit or disclose to us data about other persons (for example colleagues), we assume that you are authorised to do so and that these data are correct. By transmitting data about third parties you confirm this. Please also ensure that such third parties have been informed of this privacy statement.

3.1. Master data

By master data we mean the basic data that we require for handling our business relationships or for marketing and advertising purposes and that relate directly to your person and characteristics. We process, for example, the following master data:

• form of address, surname and first name
• address, contact details such as email address as well as telephone and mobile number
• information on language preferences
• information on professional profile and employment (for example function, employer)
• in the case of contact persons at companies, also relationships with the company for which you work
• customer history
• signature authorisations and declarations of consent

As a rule we receive these master data from you yourself, but in certain circumstances also from other persons who work for your company. We may also draw on personal data from third parties, for example from bodies for which you work, from our contractual partners and associations or from publicly accessible sources such as public registers or the internet.

3.2. Contract data

Contract data are details arising in connection with the conclusion or performance of a contract, for example information on contracts and on the services to be rendered or rendered, data from the run-up to the conclusion of a contract, information on the conclusion of the contract itself as well as the information required or used for its performance. We process, for example, the following contract data:

• date, application process, information on the nature and duration as well as the conditions of the relevant contract, data on the termination of the contract
• contact details and invoicing address
• information on the use of services
• information on payments and payment terms, invoices, mutual claims, contacts with customer service, complaints, defects, information on customer satisfaction, complaints and feedback

3.3. Project and enquiry data

When you complete the Quick Check, request a potential analysis or request technical documentation from us, we process the information you provide about your project. This includes in particular:

• information on the property and location, use, areas and construction phase
• information on existing or planned energy generation, consumption, load profiles, heating and cooling demand as well as grid connection
• time horizon, role in the project and other parties involved
• documents uploaded by you such as plans, load curves or energy concepts
• campaign parameters (UTM) so that we can trace by which route your enquiry reached us

We use this information exclusively to assess your project, to prepare the assessment you have requested and to answer your enquiry.

3.4. Communication data

Communication data are data in connection with our communication with you, for example when you contact us via a form or by other means of communication. Communication data are, for example:

• content of the correspondence (emails, written correspondence, telephone conversations)
• information on the nature, time and, in certain circumstances, place of the communication and further peripheral data of the communication

3.5. Technical data

Technical data arise in connection with the use of our website. These include, for example, the following data:

• IP address of the terminal device and device ID
• information on your device, the operating system of your terminal device or language settings
• information on your internet provider
• content accessed or logs recording the use of our systems
• date and time of access to the website as well as your approximate location

We may also assign an individual code to you or to your terminal device (for example by means of a cookie, see section 5.1 in this regard). This code is stored for a certain period, often only for the duration of your visit. As a rule we cannot infer from technical data who you are, unless you contact us via a form on our website. In that case we can link technical data with master data and thus with your person.

3.6. Behavioural data

In order to tailor our offerings and services to you or to your company as effectively as possible, we seek to get to know you better. To this end we collect and use data on your behaviour. Behavioural data are in particular information on your use of our website. They may also be collected on the basis of technical data. This includes, for example, information on your use of electronic communications, such as whether and when you opened an email or clicked on a link. We may also use your other interactions with us as behavioural data, and we may link behavioural data with other data and evaluate these data on both a personal and a non-personal basis.

3.7. Preference data

Preference data tell us which needs you are likely to have and which services are of interest to you or to your company. We therefore also process data on your interests and preferences. For this purpose we may link behavioural data with other data and evaluate these data on both a personal and a non-personal basis. In this way we can draw conclusions as to characteristics, preferences and likely behaviour.

3.8. Other data

We may also collect data from you in other situations. In connection with administrative or judicial proceedings, for instance, data arise (such as files or evidence) that may also relate to you. We may receive or create photographs, videos and audio recordings in which you may be identifiable, for example at events or during reference visits.

4. For which purposes do we process your personal data?

We use the personal data we collect primarily in order to deal with your enquiries and orders. Beyond that, we also process personal data relating to you, to the extent permitted and where it appears appropriate to us, for further purposes in which we and at times also third parties have a legitimate interest corresponding to the purpose:

• For communication purposes, that is to say in order to contact you and to maintain contact with you. This includes answering enquiries and getting in touch in the event of queries. For this we process in particular your communication data and master data.
• For the assessment of your project, that is to say in order to prepare an initial assessment, a potential analysis or an economic viability review on the basis of the information you provide in the Quick Check. For this we process in particular project and enquiry data.
• For sending technical documentation, which we dispatch following personal consultation, as well as for the follow-up support of your enquiry.
• For customer care and for marketing purposes, in order to inform you about offerings in a targeted manner in line with your interests and preferences, for example through personalised advertising. For this we process in particular technical data, master data and communication data as well as behavioural data.
• To improve our services and for product development.
• To ensure IT security and for prevention purposes: we process personal data in order to monitor the performance of our operations, in particular of IT, our website and further platforms, for security purposes, for the prevention of theft, fraud and misuse and for evidentiary purposes.
• To safeguard our legal position: in certain circumstances we also process personal data in order to enforce claims in court, before or outside court and before authorities in Switzerland and abroad, or to defend ourselves against claims.
• To comply with legal requirements: this includes dealing with complaints and other reports, complying with orders of a court or an authority as well as, generally, measures to which we are obliged under applicable law, under self-regulation or under industry standards.
• For administration and support: in order to organise our internal processes efficiently, we process data as far as necessary for the administration of IT, for accounting or for the archiving of data.

We may also process data for further purposes. These include corporate management, including business organisation and corporate development, further internal processes and administrative purposes, training and education purposes as well as the preparation and handling of the purchase and sale of business divisions, companies or parts of companies and the transfer of personal data associated therewith.

Where we ask for your consent for particular processing operations, we inform you separately about the corresponding purposes of the processing. You may withdraw consent at any time by notifying us by email.

5. Which online tracking and online advertising techniques do we use?

On our website we use techniques by means of which we and third parties engaged by us can recognise you when you use it and, in part, also track you across several visits. The use of such techniques is subject to specific regulation. In this section we inform you about this.

5.1. How and why do we use cookies and similar technologies?

For our website we make use of services provided by third parties in order to be able to measure and improve the usability of the website and online advertising campaigns. To this end we may integrate third-party components into our website which for their part use cookies and similar technologies. Where we use such technologies, the purpose is to enable us to distinguish your accesses from the accesses of other users, so that we can ensure the functionality of the website and carry out statistical evaluations. In doing so we do not intend to draw conclusions as to your identity.

Cookies are files which your browser automatically stores on your terminal device when you visit our website. Cookies contain a unique identification number by means of which we can distinguish individual visitors from others, as a rule, however, without identifying them. On the one hand we use session cookies, which are deleted when the browser is closed, and on the other hand persistent cookies, which remain stored for a certain period after the browser is closed.

We may also use similar technologies such as pixel tags. Pixel tags denote small, usually invisible images or a program code which are loaded from a server and thereby transmit certain information to the operator of the server, for example whether and when the website was visited. Analogously to cookies, browser storage technologies such as local storage and session storage are used in order to store user data and make them available across several page views.

We use the following types of cookies and similar technologies:

• Necessary cookies are required for the functionality of the website, for example so that you can move between steps in the Quick Check without the information you have entered being lost.
• Functional cookies enable extended functions, for example storing your choice of language or the target group you have selected.
• Performance cookies collect information on the use of the website and enable analyses, for example as to which pages are visited most frequently.
• Marketing cookies help us and our advertising partners to address you on our website and on third-party websites with advertising that may be of interest to you.

We set necessary cookies without your consent. We load performance and marketing cookies as well as the services named in section 5.3 only after you have given your agreement in the consent banner.

5.2. How can cookies and similar technologies be deactivated?

When you call up our website you have the possibility of activating or deactivating certain categories of cookies. You can change your choice at any time via the “Cookie settings” link in the footer of this website. You can also configure your browser in the settings so that it blocks certain cookies or similar technologies or deletes existing cookies and other data stored in the browser. You can also extend your browser with software that blocks tracking by certain third parties. You will find more on this on the help pages of your browser, usually under the keyword “data protection”. Please note that our website may no longer function to its full extent if you block cookies and similar technologies.

5.3. Third-party services on our website

We make use of services provided by third parties in order to be able to measure and improve the usability of the website and online advertising campaigns. Third-party providers may also be located outside Switzerland and the EU or the EEA, provided that the protection of your personal data is ensured in an adequate manner. These providers may record the use of the website and combine their records with further information from other websites. The providers may also use this information for their own purposes.

Google Analytics, an analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA, USA) and Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; both together “Google”, whereby Google Ireland Ltd. is responsible for the processing of personal data). Google uses cookies and similar technologies in order to record certain information on the behaviour of individual users on the website and on the terminal device used for this purpose, and on this basis makes evaluations available to us. Google also processes certain data for its own purposes, however. We have configured Google Analytics in such a way that visitors’ IP addresses are anonymised. Information on data protection at Google Analytics can be found in the Google privacy policy. You can additionally deactivate Google Analytics by installing the browser add-on offered by Google. For custom events we do not record any personal data such as names or email addresses; they serve exclusively to record the performance of the website.

LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland) or of LinkedIn Corporation (1000 W Maude Ave, Sunnyvale, CA, USA). The Insight Tag sets a cookie and enables us to measure the success of our campaigns on LinkedIn, to build target groups for further campaigns and to display advertising to you on LinkedIn after a visit to our website (retargeting). In doing so LinkedIn receives the IP address as well as information on your device and on the pages accessed and may link these data with your LinkedIn account, should you have one. LinkedIn makes available to us exclusively aggregated, non-personal evaluations. Further information can be found in the LinkedIn privacy policy. Members may object to the use of their data for advertising purposes in their LinkedIn account settings.

We load these two services only once you have given your agreement in the consent banner. Without your agreement no transmission to Google or LinkedIn takes place.

6. What applies to profiling and automated decisions?

We may process and evaluate your data pursuant to section 3 in an automated manner. This also includes so-called profiling, that is to say automated evaluations of data for analysis and forecasting purposes as well as for determining preference data. The most important examples are profiling for customer care and for marketing purposes.

The initial assessment produced in the Quick Check is based on the information you provide and is always reviewed by one of our specialists before it is sent to you. It therefore does not constitute a decision based solely on automated processing.

Where decisions are taken exclusively in an automated manner and lead to an adverse legal consequence for you or otherwise significantly affect you (“automated individual decisions”), we shall inform you accordingly. In such a case you may state your point of view and request that a natural person review the decision in question.

7. How do we process data in connection with social media?

We have a company profile on LinkedIn. If you communicate with us via LinkedIn or comment on or share content, we collect information in this regard which we use above all for communicating with you, for marketing purposes and for statistical evaluations.

Please note that the provider of the platform also itself collects and uses data on user behaviour when you visit our presence, where applicable together with other data known to it. For the evaluations relating to our company page (“Page Insights”) we are joint controllers together with LinkedIn. You may address requests for access and other data subject requests in connection with this joint responsibility directly to LinkedIn. Further information can be found in the LinkedIn privacy statement.

Links to LinkedIn on our website are simple hyperlinks. No data are transmitted to LinkedIn as long as you do not click on the link.

8. To whom do we disclose your personal data?

In connection with our processing operations we also disclose your personal data to other recipients.

We may pass on personal data which we receive from you or from third-party sources in particular to other companies of eRevo AG. Such disclosure may serve intra-group administration or the support of the group companies concerned and their own processing purposes.

Furthermore, we disclose to service providers the personal data required for their services. This concerns in particular IT and hosting service providers, but also consulting firms, analytics service providers and marketing service providers. Insofar as service providers process personal data as processors, they are obliged to process personal data exclusively in accordance with our instructions and to take data security measures.

For the implementation of a specific project we work together with partner companies from our partner ecosystem (for example planning, electrical engineering, building services, fire protection, contracting). Where this is necessary for the assessment or realisation of your project, we pass on the information required for this purpose to the partners involved. We inform you about this in the course of the project work.

Data may also be disclosed to other recipients, for example to courts and authorities in the context of proceedings and statutory information and cooperation obligations, as well as to purchasers of businesses and assets.

In individual cases it is possible that we pass on personal data to other third parties for their own purposes as well, for example where you have given us your consent to do so or where we are legally obliged or entitled to pass them on.

9. Do we disclose personal data abroad?

Recipients of data are not located only in Switzerland. This concerns in particular certain service providers. These may also be located outside the European Economic Area and Switzerland, in particular in the USA, but also in other countries worldwide. We may, for example, transmit data to authorities and other persons abroad where we are legally obliged to do so, or for instance in the context of a company sale or judicial proceedings.

Not all of these states currently guarantee a level of data protection corresponding to Swiss law. We compensate for the lower level of protection by means of appropriate contracts, in particular the standard contractual clauses issued by the European Commission and recognised by the Federal Data Protection and Information Commissioner (FDPIC). Further information on this and a copy of these clauses can be found on the FDPIC website.

In certain cases we may also transmit data without such contracts, in accordance with data protection requirements, for example where you have consented to the disclosure in question or where the disclosure is necessary for the performance of a contract, for the establishment, exercise or enforcement of legal claims or for overriding public interests.

10. For how long do we process personal data?

We store and process your personal data for as long as is necessary for the purpose of the processing (in the case of contracts, as a rule for the duration of the contractual relationship), for as long as we have a legitimate interest in the storage and for as long as data are subject to a statutory retention obligation. Where no legal or contractual obligations stand in the way, we destroy or anonymise your data after expiry of the storage or processing period in the course of our usual processes.

As a rule we retain master data for 8 years from the last exchange with you, but at least from the end of the contract. This period may be longer where this is necessary for evidentiary reasons or in order to comply with legal or contractual requirements, or where it is technically determined. In the case of purely marketing and advertising contacts the period is normally considerably shorter, usually no more than 2 years since the last contact.

As a rule we retain contract data for 10 years from the last contractual activity, but at least from the end of the contract.

We retain project and enquiry data from the Quick Check for 3 years from the last contact, so that we can pick up where matters left off should the project be resumed. If the enquiry leads to a contract, the periods for contract data apply. We delete documents uploaded by you at the latest 12 months after completion of processing, provided that they are not part of an ongoing project.

Server log files of our hosting provider are deleted after 12 months at the latest.

We anonymise or delete your behavioural and preference data once they are no longer meaningful for the purposes pursued, which, depending on the nature of the data, may be the case after anything between a few weeks and 24 months.

11. On which legal bases is the data processing founded?

Depending on the circumstances, data processing is permitted only where the applicable law specifically permits it. This does not apply under the Swiss Data Protection Act, but does apply for example under the GDPR, to the extent that it comes into play. In that case we base the processing of your personal data on the following legal bases:

• on your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR);
• that the processing is necessary for the performance of a contract or for pre-contractual measures, for example the assessment of a project enquiry (Art. 6(1)(b) GDPR);
• that the processing is necessary for the establishment or defence of legal claims or civil proceedings (Art. 6(1)(f) and Art. 9(2)(f) GDPR);
• that the processing is necessary for compliance with domestic or foreign legal provisions (Art. 6(1)(c) and (f), Art. 9(2)(g) GDPR);
• that the processing is necessary for a legitimate interest in the data processing, in particular the interests named in section 4 (Art. 6(1)(f) GDPR).

12. How do we protect your data?

We take appropriate security measures in order to preserve the confidentiality, integrity and availability of your personal data, to protect them against unauthorised or unlawful processing and to counter the risks of loss, unintended alteration, unwanted disclosure or unauthorised access. The website is delivered exclusively over an encrypted connection (TLS). Security risks can, however, generally not be entirely excluded; residual risks are unavoidable.

13. Which rights do you have?

Under applicable data protection law you have certain rights enabling you to obtain further information about our data processing and to influence it. These are in particular the following rights:

• Right of access: you may request further information about our data processing. You may also submit a so-called request for access if you would like further information and a copy of your data.
• Objection and erasure: you may object to our data processing and request at any time that we erase your personal data, unless we are obliged to continue processing or retaining these data.
• Rectification: you may have incorrect or incomplete personal data rectified or completed or supplemented by a note of dispute.
• Portability: you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to have them transferred to a third party, to the extent that the corresponding data processing is based on your consent or is necessary for the performance of a contract.
• Withdrawal: to the extent that we process data on the basis of your consent, you may withdraw your consent at any time. The withdrawal takes effect only for the future, and we reserve the right to continue processing data on another basis in the event of a withdrawal.

Please note that these rights are subject to statutory conditions and restrictions and are therefore not available in full in every case. In particular, we may have to continue processing and storing your personal data in order to perform a contract with you, to safeguard our own legitimate interests or to comply with legal obligations. To the extent legally permissible, in particular in order to protect the rights and freedoms of other data subjects, we may therefore also reject a data subject request in whole or in part.

If you wish to exercise rights against us, please contact us by email at contact@erevo.ch. As a rule we will have to verify your identity in doing so. You are furthermore at liberty to lodge a complaint with the competent supervisory authority against our processing of your data. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Version of the privacy statement: 3. August 2026