Privacy notice

Who is responsible

E2 Innovativ Informatik GmbH is responsible for the personal information described in this notice. Our registered address is Gartenstrasse 4, 6300 Zug, Switzerland, registration number CHE-278.831.057.

For privacy questions or requests, email [email protected]. Martin and Natalie handle these requests.

What we collect and why

We collect your name, email address, optional company name, and message to respond to your enquiry, assess whether we can help, and discuss potential work. Your name, email address, and message are required to submit the form. Please avoid including sensitive personal information or confidential client data.

We also process IP addresses and technical request information to protect the website and prevent abuse. Where GDPR applies, we rely on our legitimate interests in responding to business enquiries and protecting our services. Where you ask us to take steps towards a contract with you personally, we process necessary details for those pre-contractual steps.

We do not add enquiry contacts to a newsletter. Any future newsletter subscription would require separate permission. People review enquiries; we do not use them to make automated decisions about you.

Who handles your information and where

The website is hosted by Hetzner in Germany. Email is sent through Amazon Web Services Simple Email Service (AWS SES) in us-east-1, Northern Virginia, USA. Email is stored on E2's servers at Hetzner in Germany.

Martin and Natalie at E2/UME read and handle enquiries from South Africa. Hosting and email providers process information as needed to provide their services. Enquiry information is therefore handled in Germany, the USA, and South Africa.

Contact us for information about the safeguards applicable to international handling of your enquiry.

How long we keep information

• Unsuccessful enquiries: our policy is to delete correspondence from active mailboxes and trash seven days after closure.
• Enquiries awaiting your response: we close these after 30 days without a response, then apply the seven-day deletion period.
• Enquiries that lead to work: relevant correspondence becomes part of the client record. We retain it for the engagement and as needed for contractual obligations, applicable record-keeping requirements, and legal claims.
• Website security logs: our retention policy is 14 days, unless relevant records are needed to investigate an incident or meet a legal obligation.

The website sends enquiries by email and does not maintain an enquiry database. Temporary IP-based rate-limit entries expire after 15 minutes and are cleared on subsequent requests or when the process restarts.

Deleting active email does not necessarily remove backup copies immediately. Copies remain until the applicable backup rotation expires. Contact us for details of backup retention.

Optional Google Analytics

With your consent, we use Google Analytics to understand website visits and count successful enquiry submissions. Google Analytics is not loaded until you accept analytics cookies. Declining does not affect the enquiry form or other website features.

Analytics records page views and successful enquiry events, together with technical and usage information such as browser, device, approximate location, traffic source, and cookie identifiers. We do not send the name, email, company, or message entered into the enquiry form. Our integration removes query strings and fragments from page and referrer URLs sent to Analytics.

Google provides this service and may process information outside Switzerland, including in the USA. For details of Google's processing, see how Google uses information from sites that use its services. Contact us for details of the applicable international transfer safeguards.

Our Analytics cookies are configured to expire after 180 days without extending their expiry on each visit. We remember acceptance or rejection in your browser for 180 days, after which we ask again. You can change your choice using "Analytics cookie settings" at the bottom of any page. Withdrawing consent stops collection and removes this site's Analytics cookies; it does not automatically delete information already collected.

Our integration disables advertising signals and ad personalisation. Google Analytics user and event data retention is set to two months, without resetting user retention on new activity. These controls do not limit most aggregated standard reports. This is separate from the seven-day unsuccessful-enquiry policy. Contact us for privacy requests concerning previously collected information.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction of processing, or a portable copy of your information. You may object to processing based on legitimate interests. Rights are subject to applicable exceptions, including required record keeping.

Email [email protected] to make a request. We may need to verify your identity before providing or changing information.

You can withdraw consent to analytics at any time, without affecting the lawfulness of processing before withdrawal.

You can raise a concern with the Swiss Federal Data Protection and Information Commissioner, the UK Information Commissioner's Office where applicable, or your relevant local data protection authority.