Zayro
Mein Profil

Privacy Policy

Last updated: June 2026

1. General information

The protection of your personal data is important to us. This privacy policy explains which personal data we collect, how we use it, and which rights you have. It applies to the website zayro.ch and the Zayro digital business card service.

Responsible for data processing:

Zayro – Berti, Wismer · 8105 Regensdorf, Switzerland · [email protected]

Data processing is carried out in accordance with the Swiss Federal Act on Data Protection (revDSG / nFADP, in force since 1 September 2023). Where our services are directed at or accessed by persons in the European Union, the General Data Protection Regulation (GDPR) also applies.

2. Personal data we collect

We collect and process the following categories of personal data:

a) Account and profile data

When you create a Zayro account and digital business card profile, we process:

  • Name, professional title, company
  • E-mail address and phone number
  • Website URL and social media profile links
  • Profile photo (if uploaded)
  • Any other information you choose to include in your public profile

b) Contact submission data (leads)

When a visitor uses the "Share contact" form on a public profile page, we collect the following data on behalf of the profile owner:

  • Name (required)
  • E-mail address (required)
  • Phone number (optional)
  • Company (optional)
  • Message (optional)

c) Usage and technical data

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referring URL

3. Purpose and legal basis for processing

We process your data for the following purposes and on the following legal bases:

  • Providing and operating the Zayro digital business card service (contract performance)
  • Processing orders and managing customer accounts (contract performance)
  • Displaying your public profile to visitors (contract performance / legitimate interest)
  • Storing contact submissions (leads) received via your profile page (contract performance)
  • Communicating with customers and responding to inquiries (legitimate interest)
  • Improving our services and offerings (legitimate interest)
  • Website analytics to understand usage patterns (consent)
  • Marketing and advertising activities (consent)
  • Bot and spam prevention using Cloudflare Turnstile (legitimate interest)
  • Compliance with legal obligations (legal obligation)

4. Cookies and consent management

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us operate the site and understand how it is used.

We use a cookie consent manager to obtain your consent before setting non-essential cookies. You can review and change your cookie preferences at any time via the cookie settings link in the footer.

We use the following cookie categories:

  • Essential cookies: required for the website to function correctly (no consent needed)
  • Analytics cookies: help us understand how visitors interact with the site (consent required)
  • Marketing cookies: used to measure advertising effectiveness and deliver relevant ads (consent required)

5. Google Analytics

We use Google Analytics (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze how our website is used. Google Analytics uses cookies to collect usage and behavior data.

This processing only takes place with your explicit consent (analytics cookie category). You can withdraw your consent at any time via our cookie settings.

Data may be transferred to Google servers in the United States. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection for such transfers.

For more information, see Google's privacy policy: https://policies.google.com/privacy

6. Meta Tracker (Meta Pixel)

We use the Meta Pixel (provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to measure the effectiveness of our advertising campaigns and to reach relevant audiences on Facebook and Instagram.

The Meta Pixel collects data about your interactions with our website (e.g. page views, button clicks) and transmits this information to Meta. This enables us to display personalized advertisements and to measure conversions.

This processing only takes place with your explicit consent (marketing cookie category). You can withdraw your consent at any time via our cookie settings.

Data may be transferred to Meta servers in the United States. Meta relies on Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection for such transfers.

For more information, see Meta's data policy: https://www.facebook.com/privacy/policy

7. Cloudflare Turnstile (bot protection)

We use Cloudflare Turnstile (provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) as an invisible bot and spam protection service on forms – in particular the "Share contact" form on public profile pages.

Cloudflare Turnstile operates in invisible mode: it runs automatically in the background when you submit a form, without displaying a visual CAPTCHA challenge. It analyzes technical browser signals (such as browser type, interaction patterns, and IP address) to determine whether the submission originates from a human or an automated bot.

This processing is carried out on the basis of our legitimate interest in protecting our service from spam, abuse, and automated attacks (Art. 31 revDSG; Art. 6(1)(f) GDPR). No personal profiling or advertising-related processing is performed by Turnstile.

Data is transferred to Cloudflare servers, including in the United States. For more information, see the Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

8. Public profile and contact sharing

Your public profile

The information you add to your Zayro profile (name, title, company, contact details, photo, links) is intentionally made publicly accessible via your personal profile URL. By publishing this data, you consent to its public display. You can edit or remove your profile data at any time in your account settings.

"Share contact" form

When a visitor submits the "Share contact" form on a profile page, their contact details are stored as a lead in the profile owner's account. Visitors are informed at the point of submission that their data will be shared with the profile owner. Profile owners are responsible for handling received lead data in compliance with applicable data protection law and must not use it for unsolicited bulk marketing.

9. Disclosure to third parties

We disclose personal data to third parties only where necessary. Our main service providers and data processors are:

  • Google Ireland Limited – website analytics (Google Analytics)
  • Meta Platforms Ireland Limited – marketing analytics (Meta Pixel)
  • Cloudflare, Inc. – bot protection (Turnstile), content delivery, and security services
  • Shopify Inc. – order management, payment processing, and delivery tracking

All processors are contractually obligated to process personal data only on our documented instructions and in compliance with applicable data protection law.

10. International data transfers

Some of our service providers are based outside Switzerland and the European Economic Area (EEA). Google, Meta, and Cloudflare are based in the United States; when personal data is transferred to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, applied analogously under Swiss law. Shopify Inc. is headquartered in Canada, which is recognised as providing an adequate level of data protection under both Swiss and EU law; however, Shopify may also process data on servers located in the United States, in which case the same SCC safeguards apply. Further information on transfer safeguards is available on request at [email protected].

11. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. Account and profile data is stored for the duration of your account and deleted within 30 days of account closure. Lead data is retained until the profile owner deletes it or closes their account. Analytics and marketing data is subject to the retention periods set by Google and Meta respectively. Data required for tax and accounting purposes is retained for 10 years in accordance with Swiss law (Art. 958f OR).

12. Newsletter

We currently do not send a newsletter. If this changes in the future, it will only be done with your explicit prior consent, and you will be able to unsubscribe at any time.

13. Your rights

Under the Swiss revDSG (and GDPR where applicable), you have the following rights with regard to your personal data:

  • Right to information: request disclosure of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your data, subject to legal retention obligations
  • Right to restriction of processing
  • Right to data portability: receive your data in a commonly used, machine-readable format
  • Right to object to processing based on legitimate interests
  • Right not to be subject to a decision based solely on automated processing
  • Right to withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

14. Right to lodge a complaint

You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) if you believe that the processing of your personal data violates applicable data protection law. You can find the FDPIC at: www.edoeb.admin.ch