Privacy Policy
Version 1.0 · 16 October 2026
This policy explains what personal data Automat Solutions processes, for what purpose, for how long, and how you can exercise your rights. It applies to this website, to our forms, to our communications by email, WhatsApp and video call, and to the services we provide to businesses: visibility in artificial intelligence search engines (GEO), fast response to enquiries (Speed to Lead), messaging assistants with appointment management and reminders, and our integrations with WhatsApp, Facebook, Instagram and Messenger.
We process data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Automat Solutions Urrizola Añon (sole proprietorship registered in the commercial register of the Canton of Zurich)
Sunnebüelstrasse 17, 8604 Volketswil, Canton of Zurich, Switzerland
UID: CHE-277.720.975
Privacy contact: info@automatsolutions.ch
2. What data we process
If you visit our website
- Technical connection data: IP address, browser, pages visited, date and time. Our hosting provider records them so that the website works and is secure.
- Third-party content: the website loads typefaces from Google Fonts and libraries from cdnjs (Cloudflare) and jsDelivr from their servers. For this purpose, your browser sends them your IP address.
- Measurement and advertising: we use Google Analytics 4 and Google Tag Manager with Google's consent mode.
- Google's measurement and advertising cookies (for example,
_gaand_ga_*, which last up to 2 years) are installed only if you accept them in the cookie notice. - As long as you do not accept, Google's tags are loaded with consent denied: they do not install cookies or use identifiers, but they may send Google cookieless signals (for example, that a page has been viewed) for aggregated statistics.
- With your consent, we also measure interactions such as form submission, WhatsApp clicks or language changes.
- We store your choice and the selected language in your browser's local storage. You can change your choice at any time with the «Cookies» link in the footer. Details of each cookie are in section 16.
- Google's measurement and advertising cookies (for example,
If you write to us or fill in a form
- Your name, email and, if you provide it, telephone number.
- Details of your business: name, website, city, sector and whatever you tell us in the message.
- If you give us your consent for something, a record of what you accepted, when and with what text.
If you are a client
- Contact and billing data.
- The access you give us to provide the service (for example, manager permission on your business profile or on your WhatsApp Business account).
- If you connect your Meta accounts to our service (for example, through WhatsApp Business embedded signup), we receive the identifiers of your WhatsApp Business account, of your pages or of your Instagram account, and an access token. We use them only to provide the service and delete them when you disconnect the accounts or the contract ends.
- Our communications and the reports we send you.
Public business data
To measure a business's visibility in artificial intelligence search engines, we use public company information: trade name, address, telephone number, website, directory listings and the responses of the search engines themselves. If a business is in a person's name, this data may be personal data. We do not use the logo or brand image of a business that is not our client.
Video calls
Sales and follow-up calls are held by video call. We do not record them without your explicit consent, requested before we start.
3. What we use it for and on what basis
| Purpose | Data | Basis (GDPR, where applicable) |
|---|---|---|
| Replying to your enquiry or delivering the analysis you requested | Contact and business data | Pre-contractual measures at your request (Art. 6(1)(b)) |
| Sending you commercial communications | Email or telephone | Consent, revocable at any time (Art. 6(1)(a)) |
| Providing the contracted service and invoicing it | Client data | Contract (Art. 6(1)(b)) and legal obligation to keep accounting records (Art. 6(1)(c)) |
| Measuring business visibility and studying the market | Public business data | Legitimate interest in analysing the market, limited to public company data (Art. 6(1)(f)) |
| Respecting your opt-out | Minimal identifier (email or telephone) in a suppression list | Legal obligation and legitimate interest in not contacting you again (Art. 6(1)(c) and (f)) |
| Measurement and advertising on the website | Browsing data | Consent (Art. 6(1)(a)) |
| Website security and prevention of abuse | Technical data | Legitimate interest (Art. 6(1)(f)) |
Providing us with your data is voluntary. Without it, we cannot reply to your enquiry or provide the service.
We do not sell personal data. We do not make automated decisions that have legal effects on you or significantly affect you.
4. Data of our clients' customers
When a business engages our enquiry response, messaging assistant or appointment reminder services, we process the data of the people who contact that business on its behalf. In that case, the business is the controller and we are the processor. We process that data only on its instructions and under a processing agreement.
If you wrote to one of our clients or requested an appointment with them, please consult that business's privacy policy and direct your requests to it. If they reach us, we will forward them to the business.
5. WhatsApp, Facebook, Instagram and Messenger
To speak with our contacts we use WhatsApp Business. For the services we provide to businesses, we use Meta's official platform (WhatsApp Business Platform and the Facebook, Instagram and Messenger APIs) through our application "Automat Solutions".
- What data we receive: if you write to us by WhatsApp, Messenger or Instagram, or if you write to a business that uses our service, we process your telephone number or user identifier, your profile name and the content of the messages. If you fill in a form in a Facebook or Instagram ad of a business that uses our service, we receive the data you entered in that form.
- What for: only to reply to you, manage the appointment or enquiry you requested and remind you of it. We do not use this data for advertising and we do not share it with other companies.
- Messages: we only send messages that you have requested or authorised. You can ask us to stop writing to you at any time by replying in the same chat.
- Automated assistant: the assistant identifies itself as such and can hand you over to a person.
- Meta: processes this data as the platform provider under its own terms and its privacy policy.
6. Use of artificial intelligence
We use third-party artificial intelligence models to measure how businesses appear in AI search engines, classify results, draft texts and reports and, in the messaging services, reply to enquiries. Measurement queries contain business data, not data of private individuals. A person reviews the texts that are sent to clients. We access these models through their business services (API).
7. Providers that process data on our behalf
We only share data with the providers we need to provide the service.
| Provider | Purpose | Location |
|---|---|---|
| Hostinger | Website hosting, email and automation server | EU |
| Formspree | Receiving the website contact form | USA |
| Google Tag Manager, measurement and ads (only with consent), Google Fonts, public business data and Gemini model | EU and USA | |
| Cloudflare (cdnjs) and jsDelivr | Libraries used by the website | Global network |
| Meta | WhatsApp Business Platform and Facebook, Instagram and Messenger APIs | EU and USA |
| Supabase | Platform database | EU (Sweden) |
| Vercel | Hosting of the client dashboard | USA and global network |
| Resend | Sending the platform's emails | EU |
| Stripe | Payment for the services | Ireland and USA |
| Anthropic, OpenAI, Perplexity | Artificial intelligence models (section 6) | USA |
| Twilio, Retell AI | Messaging and voice, only in the contracted services that use them | USA |
8. Transfers abroad
Some providers are located outside Switzerland and the European Economic Area, mainly in the United States.
Where the destination country does not offer an adequate level of protection, the law requires safeguards, such as the provider's certification under the Data Privacy Framework (EU-US and Swiss-US) or approved standard contractual clauses, with the adaptations required by Swiss law. We are completing these safeguards with each provider. You can ask us at any time for the status of each one by writing to info@automatsolutions.ch.
9. How long we keep the data
- Technical server logs: the period applied by our hosting provider for security reasons.
- Google Analytics data: 14 months at most.
- Enquiries and requests without a contract: 12 months from the last contact.
- Consent records: for as long as the consent is valid and the time needed afterwards to prove it.
- Suppression list: for as long as necessary to respect your opt-out. It only stores the minimal identifier.
- Client data and invoices: during the contract and 10 years afterwards, because of the obligation to keep accounting records (Art. 958f of the Swiss Code of Obligations).
- Listing data obtained from Google: 30 days at most, except for the place identifier.
- Recordings of video calls made with consent: deleted within a maximum of 90 days.
- Data processed on behalf of a business: according to the contract with that business; deleted or returned when it ends.
10. Your rights
You can ask us for access to your data, its rectification or deletion, object to processing, ask us to restrict it, receive your data in a commonly used format and withdraw a consent at any time, without affecting what was done before. Write to info@automatsolutions.ch. We reply within 30 days. We may ask you to confirm your identity.
You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) of Switzerland or, if you reside in Spain, with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, AEPD).
11. How to request the deletion of your data
- Write to info@automatsolutions.ch with the subject «Delete my data».
- State the email or telephone number (including the WhatsApp one) or the Facebook, Instagram or Messenger profile with which you contacted us.
- We will confirm the deletion within 30 days.
We will keep only what the law requires us to keep, such as invoices, and your identifier in the suppression list so as not to contact you again. If we process your data on behalf of a business (section 4), we will forward your request to that business and help it to comply with it.
12. Security
We apply appropriate technical and organisational measures: encryption in transit, restricted access with authentication, access keys stored outside the code, activity logs and the collection of the minimum data necessary.
13. Minors
Our services are aimed at businesses. We do not knowingly process data of children under 16.
14. Changes to this policy
We may update this policy when our services or the law change. The current version is always the one published on this page, with its date. If a change affects a consent you gave us, we will ask for it again.
15. Languages
This policy is published in Spanish, English, German and French. If there are differences between versions, the Spanish version prevails.
16. Cookies and local storage
| Name | Provider | Purpose | Duration | When it is used |
|---|---|---|---|---|
cookie_consent (local storage) | Automat Solutions | Remembering whether you accepted or rejected cookies | Until you delete the site data | Always (necessary) |
as-lang (local storage) | Automat Solutions | Remembering the language you chose | Until you delete the site data | When you change language (necessary) |
_ga | Google (Google Analytics 4) | Distinguishing visits in a pseudonymous way for statistics | 2 years | Only if you accept |
_ga_* | Google (Google Analytics 4) | Maintaining the state of the measurement session | 2 years | Only if you accept |
_gcl_* | Google (Google Ads) | Measuring the conversions of our ads, if campaigns are active | 90 days | Only if you accept |
Google Tag Manager does not install cookies of its own: it only loads the tags above according to your choice.
How to withdraw or change your consent: use the «Cookies» link in the footer to choose again. You can also delete the cookies and data of this site from your browser settings. Withdrawing consent does not affect the measurement carried out before.