Privacy policy

1. Controller

netvalue GmbH
Selmattenstrasse 25, 8215 Hallau, Switzerland
Email: info@netvalue.ch
Website: netvalue.ch

2. Scope

This privacy policy applies to the website gasspeicher.app in all language versions, the installable web app and the associated iOS app. It explains which personal data we collect, for what purpose we process it and to whom we pass it on. The Swiss Federal Act on Data Protection (FADP) applies, as does the EU General Data Protection Regulation (GDPR) where applicable.

3. Data collected

a) Server log files: When you visit our website, our hosting provider automatically collects: shortened IP address, date and time of access, page requested, browser type and version, operating system and referrer URL. This data is technically necessary to provide the website (Art. 6(1)(f) GDPR / legitimate interest under Art. 31(1) FADP).

b) Local storage (localStorage): Alert thresholds, the daily report settings and the most recently selected country view are stored locally in your browser. As long as you do not activate notifications (see c), this data does not leave your device. Your cookie consent decision is not stored by us but by Google - see section 5.

c) Notifications (web push): If you activate notifications under “Notifications”, your browser creates a delivery address (endpoint) and two technical keys with its manufacturer’s push service - for Chrome and Android, for example, Google Firebase Cloud Messaging, for Firefox Mozilla, for Safari Apple. We store this information together with your settings (countries in the daily report, thresholds, language of the notifications) and the time of activation on our server at Hostinger in the Netherlands (EU) in order to send you the daily report at 08:00 and alerts when your thresholds are crossed. We store neither your IP address nor your name or email address. The content of every notification is encrypted before sending (standard RFC 8291); the push service cannot read it but, for technical reasons, learns that a notification is sent to the delivery address. The push services of Google and Apple may transfer data to the USA, see section 9. The legal basis is your consent (Art. 6(1)(a) GDPR / Art. 31(1) FADP), which you give by activating notifications. You can withdraw it at any time via “Turn off notifications” or in your browser settings; your entry is then deleted on our side. If the push service reports a delivery address as expired, we delete the entry automatically.

4. Hosting

The website is hosted by Hostinger International Ltd., Jonavos g. 60C, Kaunas, Lithuania. Hostinger processes the server log files mentioned above on our behalf. The servers are located in the EU. A data processing agreement pursuant to Art. 28 GDPR is in place.

5. Cookies and consent (Consent Mode v2)

We set no cookies of our own. We obtain your consent via Google’s consent dialog - a consent management platform certified by Google under the IAB Transparency & Consent Framework (TCF v2.2, CMP ID 300), combined with Google Consent Mode v2. Your decision is stored by Google.

Without your consent, no cookies are set for analytics or personalisation: Google Analytics does not run and no personalised ads are shown. In this case Google AdSense shows non-personalised ads based on the page content and an approximate location. Technically necessary data - in particular your IP address and the page request - is transmitted to Google, and a cookie is set to limit ad frequency and to prevent fraud.

You can change or withdraw your decision at any time: Privacy and cookie settings.

6. Google Analytics 4

We use Google Analytics 4 (measurement ID: G-JVV83GZ50Y) to analyse website usage. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and records, among other things: page views, time on page, approximate location (city level), device and browser information. The IP address is anonymised (IP masking). Processing is based on your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework.

More information: Google Privacy Policy

You can object to data collection by Google Analytics by installing the browser add-on for deactivation: tools.google.com/dlpage/gaoptout

7. Umami (web analytics)

For reach measurement we also use Umami, an open-source analytics software. We run Umami ourselves on our own server at Hostinger in the Netherlands (EU). The operator of the instance is netvalue GmbH - that is, we ourselves; there is no processing by third parties. The data collected does not leave our infrastructure and is not passed on to third parties.

Umami sets no cookies and uses no cross-device identifiers. Only the following are recorded: page requested, referring page (referrer), browser language, screen resolution, browser, operating system and device type, and the approximate origin derived from the IP address (country, region and city). Your IP address is not stored. It is only processed temporarily to determine this approximate origin and to form an anonymous count that changes daily. This does not allow us to identify individuals or to recognise anyone beyond the day.

The legal basis is our legitimate interest in data-minimising reach measurement (Art. 6(1)(f) GDPR / Art. 31(1) FADP). As no cookies are set and no information is stored on or read from your device, no consent is required. Umami also respects your browser’s Do Not Track setting.

8. Google AdSense

We use Google AdSense to display advertisements (publisher ID: ca-pub-5453467753083803). Provider: Google Ireland Limited. AdSense may set cookies to show personalised advertising. This happens only with your consent. Without consent, no personalised ads are shown.

More information: Google advertising & privacy

9. External services and transfers abroad

We use the following external services, which may involve transfers of data abroad:

GIE AGSI+ API (Brussels, Belgium): retrieval of gas storage data by our server. No personal data is transmitted.
Umami (self-hosted, EU): see section 7. No transfer to third parties takes place.
Google Tag Manager (Google Ireland Ltd.): management of the tracking scripts.
Push services of the browser manufacturers (Google, Mozilla, Apple, Microsoft): only if notifications are activated, see section 3 c.

For transfers to the USA we rely on the EU-U.S. Data Privacy Framework and the adequacy decision of the Swiss Federal Council (Art. 16(1) FADP).

10. Your rights

Under the FADP and the GDPR you have the following rights: access to your stored data, rectification of incorrect data, erasure of your data, restriction of processing, data portability and objection to processing.

To exercise your rights, please contact: info@netvalue.ch

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with a competent EU supervisory authority.

11. Data security

We take appropriate technical and organisational measures to protect your personal data, in particular HTTPS encryption of the entire website and access restrictions to the hosting.

12. Changes

We may amend this privacy policy at any time. The current version applies from the date stated.