Start
Projects
Services
Team
Career
News
Contact

Privacy Policy

As of: 04.05.2026


With this privacy policy, we inform about how we process personal data in connection with our website www.dayswithus.com as well as our services. We explain in particular which data we process, for which purposes, how long we store them and which rights affected individuals have.


Additional data protection notices may apply to individual additional offers.




1. Responsible Party


days with us AGGrubenstrasse 6, 8045 Zurich, SwitzerlandEmail: hello@dayswithus.comPhone: +41 44 512 15 70


For data protection inquiries, you can contact us at any time by email.




2. Applicable Law


We process personal data in accordance with the Swiss Data Protection Act (DSG) and the Data Protection Ordinance (DSV).


Since we provide services in the EU/EEA area and the use of our website by people in the EU/EEA can be analyzed, we process personal data in certain cases additionally according to the EU General Data Protection Regulation (GDPR).




3. What Personal Data We Process


3.1 Data When Visiting Our Website


When accessing our website, technical data automatically arises:


  • IP address

  • Date and time

  • Accessed pages/files

  • Browser and device information

  • Referrer URL


This data is necessary to operate the website stably and securely.


3.2 Contact


When you contact us (e.g. by email, phone, form), we process:


  • Name, company, function

  • Contact details

  • Content of the inquiry and attachments

  • Communication metadata


3.3 Customer Data / Projects (Workplace Consulting)


We process personal data of our customers and their employees:


  • Master data

  • Communication data

  • Project documents (protocols, workshop results, concepts)

  • Usage data from feedback/surveys


3.4 Newsletter


Upon newsletter subscription:


  • Email address

  • Name (optional)

  • Usage data (opens, clicks) – only with consent


3.5 Applications


We process all submitted documents as well as other relevant information to assess suitability.




4. Purposes and Legal Bases


Swiss DSG


Processing is purpose-bound, proportionate, and data-saving. Additionally, we adhere to the principles of Privacy by Design and Privacy by Default (Art. 7 revDSG), meaning we design our processes and systems so that data protection is technically and organizationally considered by default.


GDPR (as far as applicable)


  1. Provision of the website, IT security– legitimate interest (Art. 6 para. 1 lit. f GDPR)Legitimate interest: operational security, functionality, misuse detection.

  2. Communication– pre-contractual measures / contract fulfillment (Art. 6 para. 1 lit. b)– legitimate interest (Art. 6 para. 1 lit. f)Legitimate interest: efficient customer communication.

  3. Provision of our services– contract fulfillment (Art. 6 para. 1 lit. b)– legal obligations (Art. 6 para. 1 lit. c)

  4. Newsletter & Marketing– consent (Art. 6 para. 1 lit. a)Revocation possible at any time.

  5. Applications– Art. 6 para. 1 lit. b GDPR– national law (Art. 88 GDPR)

  6. Legal requirements– legal obligations




5. Cookies & Tracking


5.1 Cookiebot (Consent Management)


We use Cookiebot (Usercentrics A/S, Denmark) to manage consents.


The following are processed:


  • shortened IP address

  • browser information

  • consent timestamp


5.2 Cookies


We use:


  • necessary cookies

  • optional cookies (analytics/marketing) – only with consent (opt-in)


5.3 Google Analytics (GA4)


We use Google Analytics to analyze our website usage. The following are processed:


  • shortened IP address

  • device information

  • click behavior, dwell time


Legal basis: consent via Cookiebot.


Profiling notice


No profiling with legal effect takes place.


5.4 Meta Pixel (Meta Platforms Ireland Ltd.)


Our website uses the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.


The Meta Pixel allows us to track the behavior of visitors after they have reached our website from an ad on Facebook or Instagram. This enables us to evaluate the effectiveness of our campaigns and optimize our marketing efforts.


The data collected by the pixel is anonymous to us. However, Meta may link this data with the respective Facebook or Instagram account and use it for its own advertising purposes. Data can be transferred to the USA; these transfers are based on the EU-US Data Privacy Framework and the standard contractual clauses of the EU Commission.


Legal basis: consent (Art. 6 para. 1 lit. a GDPR), managed via Cookiebot.


For more information on data protection at Meta: https://www.facebook.com/privacy/policy/


5.5 Hotjar (Hotjar Ltd.)


Our website uses Hotjar, an analysis service by Hotjar Ltd., Level 2, St. Julian's Business Centre, 3 Elia Zammit Street, St. Julian's STJ 1000, Malta.


Hotjar helps us better understand the behavior of our visitors – for example, through the analysis of clicks, scroll behavior, and mouse movements. We use this information solely to make our website more user-friendly.


Hotjar uses cookies and similar technologies to capture usage behavior. The collected data is processed anonymously and is not linked to personal profiles.


Legal basis: consent (Art. 6 para. 1 lit. a GDPR), managed via Cookiebot.


For more information on data protection at Hotjar: https://www.hotjar.com/legal/policies/privacy/




6. Online Forms & Surveys (Typeform)


We use Typeform (Spain). Data can be processed outside of Switzerland/EU. Safeguards: standard contractual clauses.




7. CRM and Marketing Tools


7.1 HubSpot (CRM, Forms, Marketing Automation)


Our HubSpot account is hosted in a German data center (EU). Therefore, the processing of personal data essentially takes place within the EU.


Since HubSpot is a US provider, data transfers to the USA may nevertheless occur as part of support, service, or technical operations. These transfers are based on:


  • EU-US Data Privacy Framework

  • standard contractual clauses of the EU Commission

  • additional protective measures


7.2 Mailchimp (Newsletter dispatch)


We use Mailchimp (Intuit Inc., USA). Mailchimp processes data on servers in the USA.


The transfers are based on:


  • EU-US Data Privacy Framework

  • standard contractual clauses of the EU Commission


Processed data:


  • Email address

  • optional name

  • opening and click behavior (with consent)


We use the double opt-in procedure. Unsubscription possible at any time.


7.3 AI-Based Work Tools (Anthropic / OpenAI)


For internal work processes, we use AI-based text and image generation tools:


  • Claude (Anthropic, PBC, 548 Market St, San Francisco, CA 94104, USA) – for internal analyses and text processing

  • ChatGPT / DALL·E (OpenAI, LLC, 3180 18th St, San Francisco, CA 94110, USA) – for creating visualizations in the context of customer projects (e.g. office concepts)


In individual cases, project-related customer content (e.g. room descriptions, concept sketches) can be processed. We have disabled the use for training purposes of the entered data with both providers.


Since both providers are based in the USA, data transfers to a third country occur. These are secured by the standard contractual clauses of the EU Commission.


Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR) and, insofar as customer data is concerned, contractual basis (Art. 6 para. 1 lit. b GDPR).




8. Disclosure to Third Parties / Processors


Recipients may include:


  • Netlify (Hosting, Deployment, Forms; EU + USA)

  • HubSpot (EU hosting, possible US transfers)

  • Mailchimp (USA)

  • Typeform

  • Google

  • Meta Platforms Ireland Ltd. (Meta Pixel; possible US transfers)

  • Hotjar Ltd. (Malta)

  • Anthropic, PBC (Claude; USA)

  • OpenAI, LLC (ChatGPT / DALL·E; USA)


Transfers are made only:


  • for contractual fulfillment

  • in case of legal obligation

  • in case of overriding interest

  • with consent


Processing agreements exist with all service providers.




9. Data Transfers Abroad


Data can be transferred to third countries (especially USA), e.g. through:


  • Netlify

  • Mailchimp

  • HubSpot

  • Meta Platforms Ireland Ltd. (as part of the Meta Pixel)


Safeguards:


  • adequacy decisions (e.g. EU-US DPF)

  • standard contractual clauses

  • additional protective measures

  • consent





10. Retention Period


  • Contact inquiries: 12–24 months

  • Project data: 5–10 years

  • Billing data: 10 years

  • Applications: 6–12 months

  • Newsletter data: until unsubscription





11. Data Security


We take technical and organizational measures (encryption, access controls, etc.).





12. Rights of Affected Persons


You have the right to:


  • Information

  • Correction

  • Deletion

  • Restriction

  • Objection

  • Data portability

  • Revocation of consents


In addition, there is the right to file a complaint with the competent supervisory authority. For Switzerland, this is the Federal Data Protection and Information Commissioner (EDÖB).


Special GDPR objection notice (Art. 21 GDPR)


You can object to processing based on legitimate interests at any time.





13. Herkunft der Daten


Wir verarbeiten primär Daten, die wir direkt von euch erhalten.Falls Daten aus anderen Quellen stammen, bitte hier ergänzen:z. B. öffentliche Register, HubSpot-Tracking etc.





14. Datenschutzbeauftragter / Datenschutzberater


Name: Yannick Müller
Adresse: Grubenstrasse 6
8045 ZürichE-Mail: hello@dayswithus.com
Funktion (intern): Co-Founder




15. Änderungen


Wir können diese Datenschutzerklärung jederzeit anpassen. Es gilt die jeweils aktuelle Version auf unserer Website.