Privacy notice
Responsible person
Mika Niederprüm
niederpruem.tech
Maria-Stader-Weg 9
8590 Romanshorn, Switzerland
Email: info@niederpruem.tech
Data storage location
OTTRORA application, account and customer data is stored as part of the web hosting provided by METANET AG in Swiss data centres. METANET names Zurich and Oberengstringen as its data-centre locations. This excludes data transmitted to other service providers for the functions described below.
Website delivery and hosting
When the website is accessed, the hosting provider processes technically necessary connection data, in particular the IP address, time, requested address, browser information and server status. This processing supports secure, stable and abuse-free operation. Server logs are retained only as long as required for operation, troubleshooting and security.
Cookie-free web analytics
OTTRORA performs its own cookie-free audience measurement. The technically transmitted IP address is converted with a secret key into a visitor identifier that is valid only for the respective calendar day; the complete IP address is not stored in the analytics data. Recorded data includes public pages viewed, daily navigation paths, entry and exit pages, number of views, first and last view, approximate visit duration, referring domain, voluntary UTM source and campaign, device class, browser family without version number, operating-system family, preferred browser language, country code and successfully submitted trial requests. No analytics cookies, persistent visitor identifiers or device fingerprints are used, and visitors are not recognised across calendar days. If the web server supplies no country information, the IP address is sent once to country.is and only the returned country code is stored. country.is states that it does not log requests. Analytics data is automatically deleted after 90 days.
Google Analytics (with consent only)
Google Analytics 4 may be used on public pages only with your explicit consent. The provider for users in Switzerland and the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; further processing by Google LLC in the United States is possible. The Google tag is not loaded before consent. After consent, information such as the page viewed, page title, time, referring page, approximate region, browser and device information, usage events and online identifiers may be processed. Google Analytics may set cookies such as _ga and _ga_<Container-ID>. The IP address is technically transmitted to Google. Advertising and personalisation signals are disabled in our integration. The measurement ID is G-F5RRXJ2GPH. Processing is based on your consent, which you can withdraw at any time through Privacy settings with effect for the future.
Contact, trial and support requests
For trial, contact and support requests, the contact details and message entered are stored for processing, communication and abuse prevention. Mandatory fields are marked accordingly. Without this information, a request may not be processed.
User accounts and necessary cookies
For customer and administration access, contact details, login information, tenant and IT documentation data as well as security and activity logs are processed. Technically necessary session cookies support login, MFA, security and session management; they are not used for advertising.
Processors and international disclosure
METANET AG in Zurich, Switzerland, is used as a processor for hosting and technical operation. Transactional emails are sent through Brevo SAS in the European Union; the recipient name, email address and message content are transmitted. For optional country detection, the IP address may be transmitted to country.is. Where data reaches countries without an adequate level of protection, the safeguards required by law or an applicable statutory exception are used.
Retention period
Analytics data is automatically deleted after 90 days. Other personal data is retained only for as long as required for the respective purpose, contract performance, security and statutory retention or evidence obligations. Trial and support requests can be deleted in the MSP area. Account data is deleted or anonymised after use ends unless statutory obligations or legitimate evidentiary interests require retention.
Rights of data subjects
Under the Swiss Data Protection Act, data subjects may in particular request information about their personal data and ask for correction, disclosure or deletion. They may object to processing where the statutory requirements are met. A message to the email address listed under Responsible person is sufficient to exercise these rights.
Data security
OTTRORA takes appropriate technical and organisational security measures. These include encrypted transmission, tenant-based access separation, MFA or passkeys, session limits and logging of security-relevant events. When encryption is enabled, sensitive customer and IT data is additionally stored encrypted with a separate key for each organisation. The installation key is stored separately from the database; the recovery key shown once remains with the customer. Absolute protection cannot be guaranteed.
Changes to this privacy notice
This privacy notice may be amended when functions, service providers or the legal situation change. The version published on this website applies. Last updated: August 2026.