Privacy policy
1. Controller
The controller of the personal data collected through this website is KINT (“Kint”, “we”), 6850 Mendrisio, Switzerland.
For questions about this policy or to exercise your rights, write to privacy@kint.ch. Kint has not appointed a data protection advisor, as this is not required for the size and type of its business.
2. Scope and applicable law
This policy covers the Kint website (www.kint.ch and its subdomains). It does not cover third-party sites reachable through links, nor the services Kint provides to its clients, which are governed by the respective contracts.
Kint is based in Switzerland and processes data under the Federal Act on Data Protection (FADP, SR 235.1), in force since 1 September 2023, and its ordinance (DPO). As Kint also offers its services to businesses in Italy, the Regulation (EU) 2016/679 (GDPR) also applies to visitors located in the European Union.
Under the FADP, processing is lawful if it complies with the principles of the law (lawfulness, good faith, proportionality, purpose limitation, security). Under the GDPR, the legal bases are as follows:
| Purpose | GDPR legal basis |
|---|---|
| Operation, delivery and security of the site (hosting, CDN, protection against attacks and spam, technical logs) | Legitimate interest, Art. 6(1)(f) |
| Website usage statistics (Cloudflare Web Analytics) | Consent, Art. 6(1)(a) |
| Replying to contact and quote requests, managing the client relationship | Pre-contractual steps and performance of a contract, Art. 6(1)(b) |
| Keeping accounting records and defending legal claims | Legal obligation, Art. 6(1)(c), and legitimate interest, Art. 6(1)(f) |
3. Data collected while browsing
The site is published and protected through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (hosting, CDN, DNS, protection against attacks and web application firewall). Every time you open a page, Cloudflare automatically receives the technical data needed to deliver it and to protect the site:
- IP address and estimated country
- date and time of the request, page requested and referring page (referrer)
- browser, operating system and device type (user agent)
- outcome of the request (response code) and amount of data transferred
These data are used to run the site, to recognise and block malicious traffic and to diagnose errors. We do not use them to identify you and do not combine them with other data. Kint keeps no browsing logs of its own: technical logs stay with Cloudflare for a limited period, as set out in its privacy policy.
For bot protection, Cloudflare may set strictly necessary cookies, which require no consent:
| Cookie | Purpose | Duration |
|---|---|---|
| __cf_bm | Telling real visitors from automated bots | 30 minutes |
| cf_clearance | Remembering that you passed a security check, if one was shown | Set by Cloudflare, at most one year |
4. Statistics, banner and browser storage
Apart from Cloudflare’s technical cookies, the site uses no cookies and no advertising or profiling tools.
For statistics we use Cloudflare Web Analytics, only after you consent through the banner, which appears at your first interaction with the page; without consent it is not loaded. Cloudflare Web Analytics uses no cookies or other identifiers stored in the browser: it counts visits and page views in aggregate (page, referrer, browser, device type, country) and builds no visitor profiles.
You can change or withdraw your consent at any time from the «Cookie» link at the bottom of every page. Your choice and the language you pick are kept in your browser’s local storage (localStorage), not in a cookie: they never leave your device and you can clear them in your browser settings; the site remains usable.
5. Contact form and email
If you write to us through the contact form or by email, we process the data you provide: email address, any name, business and subject, the content of the message and, for the form, the language and the page you write from.
The form sends us the message as an email through Resend, Inc. (USA), which delivers it to our mailbox; if direct sending is not available, your email app opens with the message ready. Our email is run by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, with servers in the European Union. Messages are read only by the Kint partners and collaborators handling the request.
To protect the form from spam we use Cloudflare Turnstile: when you start filling it in, it checks that a person, not a program, is writing to us, by looking at technical data of your browser and device. These data are used only for that check, even if you then do not send the message.
We use your data only to answer your request, prepare a quote and, if you become a client, manage the contractual relationship. We do not use them for newsletters or unsolicited marketing. If you asked about our services, we may contact you again to follow up; you can ask us to stop at any time.
The fields marked as required in the form are needed to reply to you; if you leave them empty we cannot follow up on your request.
6. Providers and transfers abroad
We do not sell your data or pass it to third parties for their own purposes. We share it only with the providers that run the site and our business, bound by data processing agreements, and with authorities where the law requires it. Our advisers (fiduciary, legal), bound by confidentiality, may also access it.
| Provider | Location | Service | Data processed | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | San Francisco, USA | Hosting, CDN, DNS, security, spam protection (Turnstile), statistics (Web Analytics, only with consent) | IP address, log and request data, technical browser data for the spam check | Swiss-U.S. and EU-U.S. Data Privacy Framework, standard contractual clauses |
| Resend, Inc. | San Francisco, USA | Sending the messages of the contact form | Data entered in the form | EU-U.S. Data Privacy Framework (for the EU), standard contractual clauses (for Switzerland) |
| IONOS SE | Montabaur, Germany | Data of those who write to us or fill in the form | None needed: Germany ensures an adequate level of protection | |
| GitHub, Inc. | San Francisco, USA | Storage of the site’s source code | No visitor data | Swiss-U.S. and EU-U.S. Data Privacy Framework |
Transfers to the United States rely on the Data Privacy Framework, recognised by the Swiss Federal Council on 14 August 2024 (in force since 15 September 2024) and by the European Commission on 10 July 2023, for the providers certified in the official list, and otherwise on standard contractual clauses, recognised both in Switzerland and in the EU. Should the framework be suspended or a provider lose its certification, the transfer would continue on the basis of standard contractual clauses, with any supplementary measures.
The site’s code is stored on GitHub and published on Cloudflare; GitHub receives no visitor data.
7. Data retention
We keep data only as long as needed for the purpose for which we collected it, then we delete it or make it anonymous.
| Data | Duration |
|---|---|
| Technical browsing logs (Cloudflare) | Limited period set by Cloudflare, not kept by Kint |
| Statistics (Cloudflare Web Analytics) | Aggregate data only, no personal data |
| Choice about statistics and language (localStorage) | Until you clear them in your browser |
| Technical copy of form messages at Resend | Limited period set by the service |
| Contact requests with no follow-up | Up to 24 months from the last exchange |
| Client data, accepted offers, invoices and contractual correspondence | 10 years from the end of the financial year, as required by Art. 958f of the Swiss Code of Obligations |
| Data needed to establish or defend a legal claim | Until the dispute is closed and the limitation periods have expired |
8. Your rights
You can exercise at any time, free of charge, the rights granted by the FADP and, if you are in the EU, by the GDPR, by writing to privacy@kint.ch:
- Access: knowing whether we process data about you and receiving a copy (Art. 25 FADP, Art. 15 GDPR)
- Rectification: having inaccurate or incomplete data corrected (Art. 32 FADP, Art. 16 GDPR)
- Erasure: having data deleted when no longer needed (Art. 32 FADP, Art. 17 GDPR)
- Restriction and objection: asking us to restrict processing or objecting to processing based on legitimate interest (Art. 30 FADP, Arts. 18 and 21 GDPR)
- Portability: receiving the data you gave us in a common electronic format (Art. 28 FADP, Art. 20 GDPR)
- Withdrawing consent: withdrawing your consent to statistics at any time, from the «Cookie» link at the bottom of every page, without affecting processing already carried out
We reply within 30 days of the request. To protect your data we may ask you to confirm your identity before following up.
If you believe the processing breaches the law, you can contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. If you are in the EU you can lodge a complaint with the authority of your country; in Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome.
9. Security, minors and external links
The site is served only over an encrypted connection (HTTPS/TLS) and protected by Cloudflare’s security systems. Access to provider accounts and email is restricted to Kint partners and collaborators, with two-factor authentication. No transmission over the internet is 100% secure, though: if you send us confidential information, judge for yourself how much to share.
The site is aimed at businesses and professionals and is not intended for minors under 16; we do not knowingly collect their data. If you believe a minor has sent us data, write to us and we will delete it.
The site links to third-party sites and social profiles (for example LinkedIn and Instagram). We are not responsible for their privacy practices: when you visit them, their policies apply.
10. Changes to this policy
We may update this policy when the site, the tools we use or the law change. The version published on the site is always the one in force and shows the date of the last update at the bottom; we suggest rereading it from time to time. In case of substantial changes we will point them out with a notice on the site.
Last updated 28 October 2026.