Privacy notice

The controller for data processing on this website is the Einzelfirma Ruta Group (UID CHE-471.967.194), owner Kacper Ruta, Werkstrasse 11, 6102 Malters LU, Switzerland. Contact: kontakt@itbox.ch.

This privacy notice applies to the itbox.ch website, the non-binding case review and communication with prospective customers. For fulfilment after an accepted Service Order, a data-processing agreement (AVV/DPA) applies in addition.

Through the case review we process operational details only: company name, business contact person, business email address, optional phone number, company postcode, device type, approximate device count, the chosen path and an optional operational note. The form deliberately does not ask for employee data, private addresses, serial numbers, passwords, recovery keys or files. To prevent abuse we process the timestamp, a result code and a rate-limit counter; the IP address is stored only as a salted hash, never in plain text.

The details serve the written review of the reported case, the preparation of a possible offer, the prevention of abuse and the assertion of legal claims. There is no automated individual decision; classification follows fixed, traceable rules and is confirmed in writing.

For the website, the case review, billing, operational security and its own administration, Ruta Group acts as controller. Where Ruta Group processes employee, device or process data of a business customer solely on that customer's documented instruction after an accepted Service Order, it may act as processor; a data-processing agreement then applies in addition. ITBox is not a processor in every case.

We receive data directly from prospective and actual customers. Employee or device data is collected only after an accepted Service Order and through a dedicated, time-limited secure channel — never through the public form.

Form submissions go exclusively to the dedicated ITBox mailbox. There is no automatic transfer to third parties and no CRM or ERP sync. A hosting provider and an email provider are used; the current list of material processors will be specified here before go-live and is available on request.

Processing outside Switzerland is currently not intended. Should a provider process data in another country, the country concerned and the safeguard used will be named here before go-live.

Case reviews are kept only as long as needed for the written review and a possible engagement. Unqualified enquiries are deleted within 90 days. Data from an accepted engagement is subject to the evidence and deletion periods agreed in the Service Order and the DPA.

We take appropriate technical and organisational measures, in particular role-based access, transport encryption, logging without form contents, salted IP hashes and documented erasure and release processes.

This website sets no cookies and uses no browser-storage tracking. We use cookie-free, anonymous event measurement without personal reference; no email addresses, company names or note contents are recorded. There is no tracking via third-party services. Fonts are self-hosted.

Under the FADP you have the right of access, rectification, erasure, restriction of processing and release of your personal data, and the right to object to a particular processing. Statutory retention duties remain reserved. Requests: kontakt@itbox.ch.