CyroBot

Privacy policy

The German version of this page is authoritative.

1. Scope of this privacy policy

This privacy policy at cyrobot.ch applies to the website, the CyroBot service (an AI chatbot with its own knowledge base) and all other services offered through it. Swiss data protection law (FADP) applies. Where law arising from the European General Data Protection Regulation (GDPR) applies in addition, this is pointed out specifically.

2. Processing of personal data; nature, purpose and use

When visiting the website

When you access our website, information is stored temporarily in so-called log files on our server. This is information that the browser on your device transmits automatically. Namely:

  • IP address of the contacting device
  • Date and time
  • URL of the page accessed
  • Referrer URL
  • Browser and further device information
  • Data required for transmission security, troubleshooting and improvements

We process the data mentioned in order to establish the connection and enable use of the website as well as for system security and stability. The processing takes place at your request and is, pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the stated purposes in order to perform the contract and pre-contractual measures, or you have given your consent to the described processing pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

When using the CyroBot chat

When you chat with a chatbot via the CyroBot widget, the following data is collected:

  • IP address: for the technical provision of the service and to prevent misuse
  • User agent: browser and device information for technical compatibility
  • Date and time of use
  • Chat messages: your questions and the bot's answers are assigned to an anonymous session and stored in order to conduct the conversation and to analyse the service
  • Feedback: your optional rating of individual answers (thumbs up or down)

The chat requires no account and no disclosure of your identity; the sessions are anonymous. The chat content is processed in order to provide the service (answering your questions) and to analyse and improve the respective chatbot. This includes the operator of the chatbot being able to view questions that could not be answered, together with the corresponding conversation, in order to add the missing content. We do not use your data to train our AI models. The processing takes place at your request and is, pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the stated purposes in order to perform the contract and pre-contractual measures, or you have given your consent to the described processing pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

When you contact us

If you send us enquiries via the contact form, the following data is collected: name, e-mail address, company (optional), telephone number (optional) and the content of your message. Your details are stored by us for the purpose of processing the enquiry and in case of follow-up questions. The processing takes place at your request and is necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, or you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Cookies and local storage

This website sets no cookies and uses no analytics, tracking or marketing services; for this reason no cookie banner is required either. Only technically necessary settings are stored in your browser's local storage (your colour scheme choice). This data does not leave your device.

4. Disclosure of data to third parties (incl. data processors)

We use external service providers for hosting and operating our services. Where necessary, a data processing agreement has been concluded with the service providers in order to guarantee the protection of your personal data. Specifically, we use the following service providers:

  • Google (Gemini API): the AI-supported answering of chat questions takes place via Google services. For this purpose the chat messages and the relevant content of the knowledge base are transmitted to Google and used exclusively to provide the service.
  • Sentry: a service for error monitoring; in the event of an error, technical data (e.g. IP address, device information) may be transmitted.

The fonts used on this website are stored locally on our server; when the website is accessed, no connection to third-party servers (e.g. Google Fonts or CDN services) is established. Contact form data is forwarded by e-mail to our business address via our internal infrastructure.

Beyond this, your personal data is only passed on to third parties where this is legally permissible pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and necessary for the performance of contractual relationships with you. The data passed on may be used by the third party exclusively for the stated purposes. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.

5. Cross-border disclosure to third countries without an adequate level of data protection

Where data is transferred to a recipient outside Switzerland or the EEA (in particular to Google and Sentry, both based in the USA), an adequate level of data protection for the transfer abroad is ensured by suitable safeguards. Should you have questions about such data protection agreements based on the EU standard contractual clauses, or should you like more information about further safeguards for data transfers to third countries, please feel free to contact us. Below you will find the standard contractual clauses that ensure an adequate level of data protection:

EU standard contractual clauses (PDF)

6. Your rights

You have the right:

  • To request information about the personal data we process about you (Art. 15 GDPR) – in particular about the purposes of the processing, the categories of data and recipients, the intended storage period and the origin of the data. In the event of disproportionate effort, we reserve the right to request proof of identity from you and the advance assumption of the actual costs.
  • To request the immediate rectification of incorrect personal data stored by us, or its completion (Art. 16 GDPR).
  • To request the erasure of the personal data stored by us, insofar as the processing is not necessary to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).
  • To request the restriction of the processing of your personal data (Art. 18 GDPR).
  • To receive your personal data in a structured, commonly used and machine-readable format, or to request its transmission to another controller (Art. 20 GDPR).
  • To withdraw consent once given at any time by informing us (Art. 7 para. 3 GDPR).
  • To lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Right to object

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data where there are grounds arising from your particular situation or where the objection is directed against direct marketing. In the latter case you have a general right to object, which we implement without you having to state a particular situation.

8. Data security

Your data is protected by SSL/TLS encryption and by organisational measures within the company. These include in particular SSL/TLS encryption for data transmission, a secure server infrastructure, regular security updates, access controls and permission management as well as the automatic deletion of temporary files.

9. Retention period

Your data is processed in a trustworthy and responsible manner, as described in this privacy policy and in accordance with applicable data protection law. We store the data only for as long and to the extent necessary for the described purposes or for legal reasons. Namely:

  • Chat messages and feedback: stored only for as long as necessary to operate and analyse the respective chatbot
  • Usage logs: deleted automatically after 30 days
  • Contact enquiries: deleted once processing is complete or at your request

10. Contact details

This privacy policy applies to data processing by:

CyroTech GmbH
Morgenstrasse 129
3018 Bern
Switzerland

Supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland.

11. Currency and amendment of this privacy policy

We may amend or adapt this privacy policy at any time. The current privacy policy can be accessed at cyrobot.ch.

Version of this privacy policy: Bern, July 2026