Privacy Policy of the Wumex Platform
Privacy Policy
We attach great importance to the protection of your personal data. With this privacy policy, we wish to inform you comprehensively about the data we collect in connection with your visit to our website https://wumex.com, the purposes for which this data is processed, and the rights you are entitled to as a data subject.
Personal data includes any information that relates to an identified or identifiable natural person – for example, your name, address, email address or usage behaviour on our website.
Our data protection practices are guided by the applicable legal provisions, in particular the Swiss Federal Act on Data Protection (FADP) as well as the General Data Protection Regulation of the European Union (GDPR), insofar as it is applicable to our data processing activities. The following explanations serve to fulfil our information obligations pursuant to Art. 19 et seq. FADP and Art. 13 et seq. GDPR.
Controller
The data protection responsibility for the data processing carried out via this website lies with:
Wumex
Sulzerallee 70
8404 Winterthur
Schweiz
Email: support@wumex.com
Website: wumex.com
As the controller, we determine the purpose and means of processing personal data within the meaning of Art. 5(j) FADP.
Technical provision of the website and server log files
When you access our website, our hosting system automatically collects and stores technical access data that your device (computer, smartphone, tablet, etc.) transmits to our server. This data is technically necessary for the delivery and display of the website content.
The following data is collected:
- Type and version of your web browser
- Operating system of your device
- The Internet Protocol address (IP address) of your internet connection
- Date, time and time zone of the page access
- Pages, files and resources accessed on our website
- The URL of the referring website (referrer URL), if you arrived at our website via an external link
- HTTP status code (success or failure of the request)
- Volume of data transferred
- Hostname of the accessing device
This data is stored in the log files of our server. As a rule, this technical data is not merged with other personal data collected, so that we do not identify individual visitors.
Legal basis: Processing is based on our legitimate interest in the technically flawless provision and security of our website (Art. 6(1) FADP; Art. 31(1) FADP; Art. 6(1)(f) GDPR).
Purpose of processing: The temporary storage of technical access data is necessary to deliver the website to your device, to ensure compatibility and functionality, to detect and prevent abusive access and cyber attacks, and to ensure system stability and security.
Retention period: The collected access data is deleted once it is no longer technically required, but no later than three months after access, unless further retention is required for security reasons or by law.
Hosting: Our website is hosted by Sidora AG. The aforementioned data is processed on our behalf within the scope of hosting.
Contact via contact forms
On our website, we provide one or more contact forms through which you can get in touch with us. When you use one of these forms, the data you enter – in particular your name, email address and the content of your message – is transmitted to us and stored.
Legal basis: Processing is based on our legitimate interest in responding to your enquiry (Art. 6(1) FADP; Art. 6(1)(f) GDPR). If your enquiry is aimed at concluding or performing a contract, the legal basis is additionally the initiation or performance of a contract (Art. 31(2)(a) FADP; Art. 6(1)(b) GDPR).
Purpose of processing: The data submitted via the contact form is used exclusively to process and respond to your specific enquiry. You may receive an email confirmation that your enquiry has been received.
Retention period: Your contact data will be deleted as soon as the processing of your enquiry is complete and no further factual connection requires retention, unless statutory retention obligations prevent deletion.
Voluntariness: Use of our contact forms is voluntary. You may also contact us via the alternative contact options indicated on our website. The fields marked as mandatory are required to process your enquiry properly; without this information, processing may not be possible.
Protected area and user accounts
Our website offers a protected area that is only accessible after prior registration or login. In the context of creating an account and using the protected area, we process your registration and login data (in particular email address or username and password).
Legal basis: Processing is carried out for the purpose of contract performance or the implementation of pre-contractual measures (Art. 31(2)(a) FADP; Art. 6(1)(b) GDPR).
Purpose of processing: Your access credentials are required to verify your authorisation to access the protected area and to provide you with the corresponding content and functions.
Retention period: Your account data is retained for as long as you maintain an active user account with us. After deletion of the account, the data is promptly removed unless further retention is required for legal reasons.
Voluntariness: Creating a user account is voluntary. Without registration, the protected content cannot be viewed; however, the remaining areas of our website remain fully accessible.
Web analytics using Google Analytics
This website uses Google Analytics, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that enable a statistical analysis of your usage behaviour on our website.
In the context of using Google Analytics, data such as your (anonymised) IP address, pages visited, time spent, device and browser used, and the origin of your website visit are transmitted to Google servers. We use Google Analytics with IP anonymisation enabled, so that your IP address is truncated beforehand within member states of the European Union or the European Economic Area.
Data may be transferred to servers of Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework (verifiable at https://www.dataprivacyframework.gov/list).
Legal basis: Processing is based on your consent (Art. 6(6) FADP; Art. 6(1)(a) GDPR), which you granted via our cookie notice.
Purpose of processing: We use Google Analytics to evaluate and improve our online offering. The statistics generated enable us to optimise our website and adapt it to the needs of our visitors.
Revocation: You may revoke your consent at any time with effect for the future by adjusting your cookie settings on our website. Additionally, you can prevent data collection by Google Analytics by installing the browser add-on for the deactivation of Google Analytics (available at https://tools.google.com/dlpage/gaoptout).
Further information: https://policies.google.com/privacy
Google Tag Manager
Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a management tool that allows us to centrally integrate and manage various analytics and marketing services without directly modifying the website code.
The Tag Manager itself does not collect personal data. It merely ensures the technical triggering of the services integrated through it (so-called "tags"), which may in turn collect data. The individual integrated services and their respective data processing are described separately in the relevant sections of this privacy policy.
Legal basis: Art. 6(6) FADP (consent via cookie notice); Art. 6(1)(a) GDPR.
Further information: https://policies.google.com/privacy
Google Maps
To display our location, we integrate the Google Maps map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. When you access a page that contains Google Maps, a connection is established to Google servers, and your IP address and other technical data are transmitted.
If you are logged into Google at the same time, Google may associate the map request with your user account. Google is certified under the EU-US Data Privacy Framework.
Legal basis: Art. 6(6) FADP (consent); Art. 6(1)(a) GDPR.
Purpose of processing: Provision of an interactive map view so that you can find our location quickly and easily.
Revocation: You may deactivate the integration of Google Maps at any time via our cookie settings.
Further information: https://policies.google.com/privacy
Use of cookies and similar technologies
Our website uses so-called cookies as well as comparable storage technologies (e.g. Local Storage, Session Storage). Cookies are small text files that your web browser stores on your device when you visit our website. They contain a characteristic string that enables your browser to be uniquely identified upon a return visit.
We distinguish between the following cookie categories:
Necessary cookies: These cookies are essential for the technically proper operation of our website. They enable basic functions such as page navigation and access to protected areas. Without these cookies, the website cannot function properly. These cookies are set without your prior consent.
Functional cookies: Functional cookies enable enhanced functionalities and personalisation, such as saving your language settings or regional preferences. Without these cookies, certain convenience features may not be available.
Analytics cookies: These cookies enable us to statistically record and evaluate the use of our website. The insights gained are used to continuously improve our offering and adapt it to the needs of our visitors.
Marketing cookies: Marketing cookies are used to display relevant advertising to visitors. They serve to track usage behaviour across different websites and enable advertisers to deliver targeted advertisements.
A detailed list of the cookies used on our website, including provider, purpose and retention period, can be found in our cookie settings.
Legal basis: We set necessary cookies based on our legitimate interest (Art. 6(1) FADP; Art. 6(1)(f) GDPR). For all other cookies, we obtain your explicit consent (Art. 6(6) FADP; Art. 6(1)(a) GDPR).
Management and revocation: You may view and change your cookie settings at any time via the cookie management dialogue provided on our website. You also have the option of blocking cookies in whole or in part or deleting cookies already stored in your browser settings. Please note that this may restrict the functionality of our website.
Retention period and overview of cookies used
The cookies listed below are stored in your browser until they are deleted or – in the case of a session cookie – until the browser session is ended. The list provides you with an overview of all cookies used on our website, including their provider, purpose, legal basis, retention period and category.
| Cookie name | Server | Provider | Purpose | Legal basis | Duration | Type |
|---|---|---|---|---|---|---|
| aiara_banner_config | www.wumex.com | Aiara | Speichert die Cookie-Einwilligung des Besuchers. | Legitimate interest | persistent | Necessary |
| aiara_consent | .wumex.com | Aiara Privacy Suite | Stores the visitor's cookie consent choices (Necessary, Functional, Analytics, Marketing). Required for consent management and is technically necessary. | Legitimate interest | 12 months | Necessary |
| aiara_vid | www.wumex.com | Aiara Privacy Suite | Stores an anonymised visitor ID (UUID) for seamless consent logging. Contains no personal data and cannot be linked to any individual. | Legitimate interest | persistent | Necessary |
| aiara_vid_exp | www.wumex.com | Aiara Privacy Suite | Stores the expiry time of the anonymised visitor ID. Renewed together with the consent cookie and ensures the visitor ID is automatically reset after 12 months. | Legitimate interest | persistent | Necessary |
| i18nextLng | www.wumex.com | wumex.com | - | Consent | persistent | Configuration |
| _ga | .wumex.com | Google Analytics | Used to distinguish users. Main cookie of Google Analytics. | Consent | 1 years | Analytics |
| _ga_6LLM4ZG7N8 | www.wumex.com | Google Analytics | Used by Google Analytics 4 to maintain session state. | Consent | 1 years | Analytics |
| _gat | www.wumex.com | Google Analytics | Used to throttle the request rate to Google Analytics. | Consent | 1 Minute | Analytics |
| _gid | www.wumex.com | Google Analytics | Used to distinguish users. Set on each page view. | Consent | 24 Stunden | Analytics |
| _gcl_au | www.wumex.com | Google (Tag / Ads) | Set by the Google Tag (gtag.js) or the Conversion Linker in Google Tag Manager. Stores click IDs so later conversions can be attributed to Google Ads clicks. Is also set without active campaigns whenever GTM or GA4 is linked to a Google Ads account. | Consent | 3 Monate | Marketing |
If cookies have been set on the basis of your consent, you may revoke your consent at any time in the cookie settings of our cookie banner. You can access the cookie settings via the cookie icon on our website.
Google Consent Mode
Our website implements Google Consent Mode (Version 2), which controls the operation of the Google services used depending on your consent status. As long as you have not given your consent, all consent-dependent Google services operate in a restricted mode in which no personal data is collected and no cookies are set.
If you grant your consent for certain cookie categories, Google is informed accordingly and the respective services are fully activated. If you revoke your consent, the affected services are immediately returned to restricted mode.
Sharing of personal data with third parties
As a general principle, we treat your personal data confidentially and only share it to the extent necessary for the purposes described in this privacy policy or where you have consented.
Sharing may occur in the following cases:
- With service providers engaged by us (processors) who process data on our behalf and in accordance with our instructions – for example hosting providers, email delivery services or IT service providers.
- With third parties where we are legally obliged to do so or where this is necessary for the enforcement of our legal claims – for example vis-à-vis law enforcement authorities, courts or supervisory authorities.
- In the context of using external services and tools integrated on our website, as described in the preceding sections of this privacy policy.
Data security
We employ appropriate technical and organisational security measures to protect your personal data from unauthorised access, alteration, loss or destruction. Our security measures are continuously adapted to technological developments.
Our website uses SSL/TLS encryption for the transmission of data between your browser and our server. You can recognise an encrypted connection by the lock symbol in the address bar of your browser and by the address bar beginning with "https://".
Please note that communication by email without additional encryption is not fully secure. For confidential information, we therefore recommend postal mail or encrypted email communication.
Retention period and your rights as a data subject
General retention period: We retain your personal data only for as long as is necessary to achieve the respective processing purposes or as required by statutory retention obligations. Thereafter, the data is deleted or further processed in anonymised form.
Your rights: As a data subject, you are entitled to the following rights under applicable data protection law:
Right of access (Art. 25 FADP; Art. 15 GDPR): You may request information at any time as to whether and what personal data we process about you, as well as further information about the processing.
Right to rectification (Art. 32(1) FADP; Art. 16 GDPR): You have the right to request the rectification of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): Under certain conditions, you may request the erasure of your personal data – in particular where the data is no longer necessary for the original processing purpose, you have revoked your consent or the data has been unlawfully processed.
Right to data portability (Art. 28 FADP; Art. 20 GDPR): You may request that we provide you with the data relating to you in a commonly used, machine-readable format or transfer it to another controller.
Right of revocation: Where data processing is based on your consent, you may revoke it at any time with effect for the future. Processing carried out prior to revocation remains unaffected.
Exercising your rights: To exercise your rights, please contact:
Wumex
Email: support@wumex.com
Right to lodge a complaint: You also have the right to file a complaint with the competent data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), accessible at https://www.edoeb.admin.ch. You may also contact the competent data protection authority in your EU/EEA member state.
Notes on this privacy policy
Validity and currency: We reserve the right to update this privacy policy at any time in order to adapt it to changed legal frameworks, new technical circumstances or extensions of our offering. The version published at the time of your website visit shall apply. We recommend that you review this privacy policy regularly.
Responsibility of the website operator: This privacy policy was automatically generated on the basis of the information provided by the website operator. The website operator is solely responsible for the accuracy, completeness and currency of the information contained in this privacy policy. This applies in particular to the correct specification of the services, cookies and data processing activities used, as well as to the consistency of these specifications with the actual practice on the website. The use of automatically generated legal texts does not replace individual legal advice. The website operator is recommended to have the privacy policy reviewed by a qualified person in order to ensure compliance with the applicable data protection provisions.
Last updated: 22.05.2026