Risk Control RCC GmbH · As at: October 2026
This Privacy Policy informs you which personal data we process when you visit www.rcc24.ch and use our forms, for what purpose and on what legal basis. It is based on the Swiss Federal Act on Data Protection (FADP, ‘revFADP’) and, where applicable, the EU General Data Protection Regulation (GDPR), in particular for visitors from Germany and Austria.
Risk Control RCC
GmbH
Alte Badenerstrasse 25
CH-8173 Neerach
Switzerland
Email: info@rcc24.ch
Phone: +41 78 880 98 48
UID: CHE-110.281.373
For all questions on data protection and on exercising your rights, you can reach us at info@rcc24.ch or at the postal address above.
This policy applies to the website www.rcc24.ch (rcc24.ch redirects there), including the contact form, the factsheets download and the newsletter sign-up. Third-party websites to which we link are subject to their own privacy policies.
Switzerland (FADP): We process personal data in accordance with the principles of Art. 6 FADP (lawfulness, good faith, proportionality, purpose limitation, accuracy). Where necessary, we rely on your consent or on overriding private interests (Art. 31 FADP).
EU (GDPR): Where the GDPR applies, we base the processing on
The storage of, or access to, information on your terminal device (e.g. cookies) is additionally governed by Section 25 TDDDG (Germany) or Section 165(3) TKG 2021 (Austria) and, in Switzerland, by Art. 45c of the Telecommunications Act (TCA).
Our website is built and operated with the website builder ‘Onepage’. The provider is Onepage GmbH, Hanauer Landstrasse 172, 60314 Frankfurt am Main, Germany. Onepage processes the data on our behalf and solely to provide the website, the forms and the web analytics.
According to Onepage, the websites are hosted by Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) and Google (Google Cloud EMEA Limited, Ireland); according to Onepage, the data is stored in the EU. For delivery, DNS, reverse proxy and protection against attacks (e.g. DDoS), Onepage also uses Cloudflare, Inc. (USA); in the process, IP addresses, access times and log data may also be transmitted via servers outside the EU or Switzerland. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website); Switzerland: overriding private interest.
When the website is accessed, access data is processed for technical reasons, in particular IP address, date and time, page accessed, referrer URL, HTTP status code, amount of data transferred, browser type and version, operating system, language setting and device type. This data serves the delivery, stability and security of the website. According to Onepage, for error analysis the IP address, type of request and status code are stored for one month for a small proportion of requests.
Legal basis: Art. 6(1)(f) GDPR; Switzerland: overriding private interest.
We do not use any advertising or marketing cookies of our own, nor any tracking pixels (e.g. from Google, Facebook, TikTok or LinkedIn). On your first visit, we ask you via a cookie banner whether you consent to web analytics. You can accept or decline; both options are equivalent. Onepage Analytics is activated only after your consent. Your choice is stored in your browser so that we do not have to ask you again on every visit.
The YouTube videos embedded on our website are not part of the cookie banner. Using the two-click method, they are loaded only when you click on the respective video or on ‘Play video’; before that, there is no connection to Google (see section 11).
Used only with your consent:
You can change or withdraw your consent at any time with effect for the future via the cookie settings on this website. You can also delete or block cookies and local storage in your browser settings at any time.
If you have given your consent, we use Onepage’s web analytics to understand how our website is used (page views, number of visitors, length of visit, form completions, device type, traffic sources, countries and cities). According to Onepage, this system does not store any personal data such as IP addresses; all data is stored in the EU. We do not use external analytics services such as Google Analytics.
Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG or Section 165(3) TKG 2021); Switzerland: consent.
If you write to us via the contact form, we process the data you provide: name, company and business email address (required fields) and, optionally, position, phone number, subject and message. Before submitting, you confirm by ticking a checkbox that your details may be used to process the enquiry.
The data is stored in Onepage’s customer relationship management system (CRM) on our behalf (section 4) and used exclusively to process your enquiry and for follow-up questions. It is not automatically forwarded to other services.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (general enquiries) and Art. 6(1)(a) GDPR (consent); Switzerland: consent or overriding private interest.
To download our factsheets, we ask for your first name, last name, email address and company. After submission, the download links are displayed directly on the website; no email is sent. The details are stored in Onepage’s CRM (section 4). We use them to provide you with the factsheets and to keep track of who has obtained our factsheets. We send you promotional emails only if you have separately consented to this (e.g. by signing up for the newsletter).
Legal basis: Art. 6(1)(b) GDPR (provision of the requested documents) and Art. 6(1)(f) GDPR; Switzerland: overriding private interest.
By signing up for the newsletter (first name, last name, email address, company), you consent to us sending you assessments of risk, security and compliance by email. The sign-up data is stored in Onepage’s CRM (section 4). You can unsubscribe from the newsletter at any time, via the unsubscribe link in each issue or by sending a message to info@rcc24.ch; the lawfulness of the processing carried out until then remains unaffected.
Legal basis: Art. 6(1)(a) GDPR (consent); Switzerland: consent (Art. 3(1)(o) of the Federal Act against Unfair Competition, UCA).
We embed videos from YouTube in privacy-enhanced mode (domain youtube-nocookie.com). The provider for users in the EU and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may also be involved.
The videos are not loaded automatically. When the page is accessed, we show only a preview image stored on our own website, together with a notice on the transfer of data to Google. Until you click, no connection to Google servers is established, and YouTube neither stores nor reads any information in your browser. Only when you click on the preview image or on the ‘Play video’ button is the YouTube player loaded and the video started. After the click, the video in the header area of the page runs without sound as a background video. The ‘Watch video with sound’ button takes you to youtube.com in a new tab; the privacy policies of YouTube or Google apply there.
According to Google, privacy-enhanced mode prevents the playback of embedded videos from being used to personalise browsing on YouTube or to personalise advertising; ads in such videos are not personalised (source: https://support.google.com/youtube/answer/171780).
After your click, your browser connects to Google servers (including youtube-nocookie.com, googlevideo.com, ytimg.com, gstatic.com, googleapis.com and google.com). In doing so, at least your IP address, the page accessed and technical device and browser data are transmitted to Google; in addition, usage and playback data of the player are sent to Google. YouTube may also store or read information in your browser, in particular in local storage (localStorage). We have no influence on how Google further uses this data. A transfer to Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy
Legal basis: your consent, which you give by clicking on the video or on ‘Play video’ (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG or Section 165(3) TKG 2021); Switzerland: consent by clicking (Art. 31(1) FADP) and, for information on your terminal device, also Art. 45c TCA. The consent applies only to the respective page view; on the next visit, the preview image appears again. You can withdraw it at any time with effect for the future by reloading or leaving the page; information that YouTube has stored in your browser can be deleted in your browser settings.
The fonts used (Cormorant Garamond and Inter, originally from the Google Fonts collection) are delivered via Onepage’s content delivery network (onecdn.io). No connection to Google servers (fonts.googleapis.com, fonts.gstatic.com) is made for the fonts of our website. Only when you start a YouTube video by clicking does the YouTube player load its own fonts and icons from Google servers (see section 11).
We do not sell your data and only pass it on to the extent described in this policy, required by law or necessary to protect our rights. Recipients are in particular Onepage and its sub-processors (section 4) and Google, if you play an embedded video by clicking (section 11).
Your data is processed in Switzerland and in the EU. Under Swiss law, the EU is deemed to provide adequate data protection, and under EU law, Switzerland is deemed to do so. Transfers to the USA are made only to recipients certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework, or on the basis of standard contractual clauses.
We retain personal data for as long as is necessary for the respective purpose or as statutory retention obligations apply (e.g. ten years for accounting records and vouchers under Art. 958f CO). We delete contact enquiries and details from the factsheets form as soon as they are no longer required for the respective purpose and no retention obligations prevent this. We delete newsletter data after you unsubscribe; we retain proof of consent or unsubscription for as long as necessary for evidentiary purposes.
Switzerland (FADP): You have the right of access (Art. 25 FADP), rectification, erasure or destruction, restriction of and objection to processing (Art. 32 FADP), and the right to receive or transfer your data (Art. 28 FADP). You can withdraw any consent given at any time.
EU (GDPR): You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21), in particular to processing based on legitimate interests. You can withdraw consent at any time with effect for the future (Art. 7(3)).
To exercise your rights, a message to info@rcc24.chis sufficient. We may request proof of identity.
Right to lodge a complaint:
We take appropriate technical and organisational measures to protect your data. The website is delivered exclusively in encrypted form (HTTPS/TLS). Only authorised persons at Risk Control RCC GmbH have access to the form data.
We may amend this Privacy Policy if our website, our services or the legal situation change. The version published on www.rcc24.ch at the time is authoritative.
As at: October 2026