This website is designed to collect as little personal information as possible. It does not use analytics, advertising technology, tracking pixels, or non-essential cookies.
1. Who is responsible
Swiss Logistics Consulting GmbH (“SLC”, “we”, “us” or “our”) is responsible for the processing described in this notice.
Registered office: Hauptstrasse 41, 6315 Oberägeri, Switzerland.
UID: CHE-401.850.285.
Website: https://swisslogisticsconsulting.com.
Privacy contact: info@swisslogisticsconsulting.com.
To exercise your rights, email the privacy contact with “Privacy request” in the subject line.
2. What this notice covers
This notice covers the SLC corporate website, enquiries, business correspondence and personal data processed in connection with our logistics consulting and engineering services.
SLC also owns and operates NoMap. NoMap Router, NoMap Ocean and the public NoMap MCP integration through ChatGPT, Claude and other clients are covered by the separate NoMap privacy notice. Visiting the corporate website does not by itself create a NoMap account or send information to the NoMap MCP server.
For customer-controlled project environments, SLC may process personal data on the customer's instructions. The customer's privacy notice and applicable data-processing agreement govern that processing. SLC remains responsible for its own business correspondence, administration and security processing where it acts as controller.
3. Information we process
Website delivery and security
Website hosting and delivery may involve IP addresses, request dates and times, requested and referring pages, browser and device information, and error information. These records are used to deliver, secure and troubleshoot the site.
Enquiries and consulting services
When you contact us, we process the information you provide, such as your name, professional contact details, organisation, role, message, attachments and project requirements. Consulting documents may contain business-contact details and information about people involved in a project. We receive these details from you, your organisation or authorised project participants. Please share only information you are authorised to provide.
Browser-only decision prompt
The interactive decision prompt on the corporate homepage processes its text inside your browser. It does not transmit that text to SLC or retain it on our servers.
4. Purposes and legal bases
Where EU or UK GDPR applies, the following bases apply to the relevant activity:
| Activity | Purpose | Legal basis |
|---|---|---|
| Website delivery and technical records | Operate, secure, troubleshoot and maintain the website | Legitimate interests in operating a reliable and secure business website |
| Enquiries about requested services | Respond and discuss a possible engagement | Requested steps before a contract or performance of a contract |
| Other professional enquiries | Respond and manage business correspondence | Legitimate interests in responding to business enquiries |
| Consulting and project coordination | Deliver agreed services and coordinate authorised participants | Contract where the individual is a contracting party; otherwise legitimate interests in delivering the customer's engagement and coordinating professional contacts |
| Required business records | Meet accounting, tax and other legal duties | Legal obligations |
| Security incidents and claims | Protect systems and establish, exercise or defend claims | Legitimate interests, and legal obligations where applicable |
| Optional consent-based features | Deliver the optional feature described when consent is requested | Consent, where required; withdrawal does not affect prior lawful processing |
Browser-only decision-prompt text is not received or stored by SLC. We will update this notice before changing that practice.
Where Swiss data-protection law applies, we process personal data transparently, proportionately and for the disclosed purposes. The GDPR bases above apply only where EU or UK GDPR governs the processing.
5. Recipients, assets and external links
Access is limited to people and organisations that need the information for the disclosed purposes. Recipients include website hosting and network providers, email and support providers, authorised project participants and professional partners, and advisers or authorities where necessary for legal duties or claims.
The Experience page retrieves D3, TopoJSON and world-map files from the jsDelivr content delivery network. jsDelivr receives the technical information needed to answer the asset request, including your IP address.
LinkedIn is an ordinary external link rather than an embedded social plugin. The website does not make a LinkedIn request until you choose the link, and suppresses referrer information on that link. Your visit after following an external link is governed by the destination provider's practices.
Email enquiries involve processing by your email provider and SLC's email provider. Providers that determine their own processing also apply their own privacy notices.
7. International processing
Personal data may be processed outside Switzerland when the service providers listed below deliver the service. The table identifies the destinations and safeguards applicable to our processing.
| Recipient or service | Data and purpose | Destination countries | Applicable protection or transfer mechanism |
|---|---|---|---|
| Website hosting, network, security and backup providers | Technical requests, logs and recovery copies | [CONFIRM actual countries, including remote access] | [CONFIRM applicable adequacy status or executed mechanism] |
| jsDelivr and its relevant CDN providers | IP address and technical asset-request data | [CONFIRM actual processing countries] | [CONFIRM applicable mechanism] |
| Email, support and business-record providers | Enquiries, correspondence and records | [CONFIRM actual countries] | [CONFIRM applicable mechanism] |
| Authorised project partners and professional advisers | Necessary project or legal information | [CONFIRM actual countries for current recipients] | [CONFIRM applicable mechanism or project-specific disclosure] |
Where a destination lacks a recognised adequate level of protection, we use an applicable legal transfer mechanism, such as standard contractual clauses with the required Swiss adaptations, and assess supplementary safeguards. Confidentiality commitments and encryption support protection; they do not by themselves replace a required legal transfer mechanism.
Contact the privacy address in Section 1 to request information about the applicable transfer safeguards or a copy of relevant documentation. We may redact confidential material while providing the information required by applicable law.
8. Retention and deletion
The following ordinary schedules apply, subject to lawful deletion requests and necessary legal exceptions:
| Data category | Retention |
|---|---|
| Website delivery and error records | 30 days |
| Security, access and incident-detection records | 12 months after creation |
| Confirmed or reasonably suspected incident records | 3 years after the incident is closed; longer only where necessary for a legal claim, regulatory duty or forensic investigation |
| Enquiry correspondence and attachments | 24 months after the last substantive communication; an enquiry that becomes a contract or project follows the relevant record schedule |
| Contractual, accounting, regulatory or claims project records | For the project and up to 10 years after completion or termination where required for the relevant record |
| Other project working copies | Deleted within 24 months after project completion unless a documented legal, business or customer instruction requires a different period |
| Consent, withdrawal and privacy-request records | 3 years after the request or withdrawal is closed; longer only where necessary for compliance or a claim |
| Backups | Up to 90 days; protected from ordinary access and deleted or overwritten through the backup cycle |
| Decision-prompt text | Not transmitted to SLC or retained on SLC servers |
Where a law prescribes a different retention period or trigger, that requirement applies to the relevant record. A documented legal hold may require retention until the matter is finally resolved and the applicable limitation or statutory period expires. We assess deletion requests under applicable law and explain any lawful retention exception.
At the end of the applicable period, we delete or anonymise information so that it can no longer reasonably identify a person. Where immediate deletion is technically impossible, we securely isolate it pending deletion. Restored backup data remains subject to its underlying retention and deletion requirements.
9. Your rights and controls
Depending on applicable law and the circumstances, you may request access, correction, deletion, restriction of processing or portability, or object to processing. Where processing relies on consent, you may withdraw it without affecting prior lawful processing.
Email info@swisslogisticsconsulting.com with “Privacy request” in the subject line. Identify the relevant correspondence, project or service. We may use proportionate measures to verify your identity. Do not send passwords or unrelated identity documents.
Access requests under Swiss law are generally answered within 30 days. Other requests are handled within the applicable legal deadlines. Some rights are subject to lawful exceptions, necessary recordkeeping and other people's rights. Where SLC processes information solely for a customer, we may direct your request to that customer and assist under the applicable agreement.
You may raise concerns with the Swiss Federal Data Protection and Information Commissioner. Where EU or UK law applies, you may also complain to the competent supervisory authority, including in your place of residence, work or the alleged infringement.
10. U.S. privacy information
Where applicable U.S. state law grants rights, you may request information about the categories and sources of personal data, purposes, recipients, and available access, correction or deletion rights. To appeal a denied request where an appeal right applies, reply to our response with “Privacy appeal” in the subject. We will not discriminate against you for exercising an applicable right.
The corporate website processes the identifiers and technical network activity described in Section 3. It does not sell personal information, share it for cross-context behavioural advertising or use it for targeted advertising. Global Privacy Control signals do not change the website's operation because it performs none of those activities. These statements concern the corporate website; NoMap has a separate notice.
11. Security, children and confidential information
We use technical and organisational safeguards appropriate to the risks. No internet service guarantees absolute security. Please avoid sending unnecessary sensitive personal information, passwords or API keys in enquiries.
Our consulting services and corporate website are directed at professional users rather than children. We do not knowingly collect children's personal information through this website.
Use agreed project access controls when sharing confidential project information. A customer's instructions and applicable data-processing agreement govern work performed solely on that customer's behalf.
12. Changes to this notice
We update this notice when our services or data practices change. The effective date and version identify the applicable notice. Where required, we provide additional notice or obtain consent before materially different processing begins.