Data Privacy Policy
This notice explains how Tanner Lab GmbH processes personal data under the Swiss Federal Act on Data Protection (nFADP) when you visit this website.
1. Controller
Tanner Lab GmbH
c/o Optimize AG
Dialogweg 7
8050 Zürich
2. Data we process
| Category | Purpose | Legal basis |
|---|---|---|
| Server logs (IP address, user agent, timestamp) | Site operation & security | Legitimate interests (Art. 31 §1 nFADP) |
| Chatbot data (complete chat histories and everything entered there, including any contact details) | Answering questions, handling contact requests, quality assurance, and abuse prevention | Consent through use of the chatbot and legitimate interests (Art. 31 §1 nFADP) |
3. Contact requests
If you contact us via the contact form, we process the data you provide in the form (for example your name, email address or phone number, and your message) as well as attribution data connected with the submission (for example referrer, landing page, and UTM parameters) in order to handle your request.
If a contact request can be assigned to a referral partner, we may share the data required to attribute and settle the referral arrangement with that referral partner.
4. AI chatbot
When you use the chatbot, we collect and process the complete conversation and everything you enter there. This may include questions, project information, names, email addresses, and phone numbers. We use this data to generate answers, forward contact requests to our team, operate the service, and prevent abuse.
To generate answers, relevant chat content is sent through OpenRouter to Google's Gemini AI service. We configure the service so that submitted content is not used to train AI models. OpenRouter and Google may process the data in the United States or other countries.
Chat conversations stored by Tanner Lab are retained in Switzerland for 30 days and then automatically deleted. If a contact request is forwarded by email, the email and its included conversation transcript may be retained for as long as necessary to handle the request and meet legal obligations. Please do not enter sensitive personal data or confidential secrets in the chat.
By using the chatbot, you accept the collection and processing of everything you enter in the chat as described in this privacy policy.
5. Sub-processors
| Service | Function | HQ | Hosting |
|---|---|---|---|
| Infomaniak | Hosting, Email mailbox | Switzerland | Switzerland |
| Cloudflare | CDN & proxy (DDoS protection) | USA | global |
| OpenRouter | AI gateway | USA | USA / global |
| Gemini AI model processing | USA | global |
Where required, transfers to countries without adequate data protection are protected through recognised adequacy mechanisms or appropriate safeguards, such as Swiss/EU Standard Contractual Clauses.
6. Retention
Personal data are retained only for as long as necessary to fulfil the purposes above or to comply with statutory retention duties, after which they are deleted or anonymised.
7. Your rights
You may request access, rectification, erasure, restriction of processing or raise an objection (Arts. 25-29 nFADP). Please email [email protected].
8. Analytics
We use a privacy-friendly, cookie-less web analytics tool (Umami) to understand aggregated usage of our website (e.g. page views and referrers). No cookies are set and no personal data is stored or used to identify individual visitors.
(Last updated: 10 August 2026)