Compliance Document • Revised January 2026

Privacy Policy

This document establishes how Pebblesvaultbundle Alpine Mobility AG collects, manages, and safeguards information obtained through your access to Pebblesvaultbundle.rest.

1. Identity of the Data Controller

The controller responsible for personal data processing under the Swiss Federal Act on Data Protection (FADP) and the European Union General Data Protection Regulation (GDPR) is:

Pebblesvaultbundle Alpine Mobility AG
Company Registration Number: CHE-419.820.653
Bahnhofstrasse 42, 7000 Chur, Canton of Grisons, Switzerland
Data Protection Officer Contact: [email protected]

2. Categories of Information Collected

We operate on the principle of strict data minimization. Depending on your engagement with our publication, we collect:

Technical Server Telemetry: Anonymized Internet Protocol (IP) address, browser client user-agent string, operating system version, referrer URL headers, and timestamp logs generated automatically during server requests.
Voluntary Form Submissions: Full name, organizational email address, and message content submitted when using our contact inquiry terminal.
Client-Side Storage Tokens: Non-tracking local storage values recording user cookie consent preferences to prevent repetitive banner display.

3. Lawful Basis and Purpose of Processing

We process personal and telemetry data strictly under legitimate and lawful grounds pursuant to Article 6(1) of the GDPR and Article 31 of the Swiss FADP:

Technical Transmission and Security (Art. 6(1)(f) GDPR): Necessary for our legitimate interest in delivering static pages efficiently, securing web infrastructure against denial-of-service attempts, and auditing system errors.
Direct Communication (Art. 6(1)(b) & (f) GDPR): Responding to verifiable inquiries, research questions, or correction notices initiated by users via the contact interface.
Consent (Art. 6(1)(a) GDPR): Where users explicitly consent to non-essential functional analytics or preferences through our cookie consent interface.

4. Third-Party Data Processors

We do not sell, rent, or trade personal data to commercial data brokers. Processing may involve technical service providers strictly bounded by data processing agreements (DPAs):

Hosting Infrastructure: Dedicated European-based cloud servers located within Switzerland and the European Economic Area ensuring high physical and network security standards.
Network Routing: Distributed edge delivery nodes providing low-latency asset delivery without persistent storage of user identification.

5. International Data Transfers

Our primary data operations reside within Switzerland, which has been formally recognized by the European Commission as offering an adequate level of data protection. When server routing traverses non-EEA jurisdictions, transfers occur exclusively under Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention Schedules

Technical server logs are retained for an automated period not exceeding thirty (30) days for diagnostic and defensive security analysis, after which they are permanently deleted or fully anonymized. Direct correspondence received through our contact desk is preserved for twenty-four (24) months to facilitate ongoing technical context, unless the correspondent explicitly exercises their right to erasure.

7. Your Statutory Rights (GDPR & FADP)

You maintain full statutory authority over your personal information. Under applicable European and Swiss statutes, you possess the right to:

Request formal confirmation and a copy of all personal data held concerning your identity (Right of Access).
Demand prompt correction of inaccurate, outdated, or incomplete personal data (Right to Rectification).
Request permanent deletion of your data where continued retention is no longer justified (Right to Erasure / "To Be Forgotten").
Demand restriction of processing or object to processing carried out under legitimate interest grounds.
Obtain personal data in a structured, commonly used, and machine-readable format (Right to Data Portability).
Lodge a complaint with a supervisory authority, such as the Swiss Federal Data Protection and Information Commissioner (FDPIC) or an EU national data authority.

8. Data Protection Officer and Inquiries

To exercise any of the statutory rights enumerated above, submit your written request accompanied by verification of identity to our dedicated Data Protection Officer at: [email protected]. Requests are processed without administrative charge within thirty calendar days.