As of: July 2026

1. Who we are

Skriba GmbH develops software that enables companies to create employment references more easily and in a legally compliant manner. For our own website skriba.ch, we are responsible for protecting your data.

Company Information

• Company: Skriba GmbH

• Address: Freilagerstrasse 101, 8047 Zurich, Switzerland

• Contact: privacy@skriba.ch

• Data Protection: Timothy Rabozzi (Information Security Officer)

2. What we collect and why

2.1  Website Visit

When you visit skriba.ch, our servers briefly process technical connection data: your IP address, pages accessed, time and browser type. This is necessary for the website to function in the first place. This data is not linked to your name or other personal details.

Legal basis: Legitimate interests (Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP).

2.2  Book a Demo

When you request a demo, you provide your name and email address. We use this to coordinate the appointment and to stay in touch with you afterwards. Booking is handled via Cal.com.

Legal basis: Pre-contractual measures (Art. 6 para. 1 lit. b GDPR / Art. 31 para. 2 lit. a FADP).

Retention period: Maximum 3 years from last contact, unless a business relationship is established.

2.3  Newsletter

You can sign up for our newsletter to stay informed about product innovations and updates. We will only send you emails if you have actively consented (opt-in). You can unsubscribe from the newsletter at any time via the unsubscribe link at the end of each email. We use Loops for sending.

Legal basis: Consent (Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP).

2.4  Website Analysis

To understand how our website is used and to improve it, we use PostHog. PostHog collects data such as page views, clicks, browser type and an approximate location (based on IP address). PostHog runs on EU servers.

This analysis is optional. We ask for your permission when you first visit via our cookie banner. You can withdraw your consent at any time via the banner.

Legal basis: Consent (Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP).

3. Who else has access

We do not share or sell your data. However, to operate our website, we work with a few service providers who process data on our behalf:

• Microsoft Azure

  • Location: Switzerland (Region Switzerland North)

  • Purpose: Web hosting and provision of the cloud infrastructure for our website.

  • Basis of protection: Adequacy decision (Switzerland).

  • Privacy Policy: Microsoft Trust Center
    
    

• Cal.com Inc.

  • Location: USA

  • Purpose: Provision of the calendar and booking function for demo appointments and consultations.

  • Basis of protection: Swiss-U.S. Data Privacy Framework (DPF) / Standard Contractual Clauses (SCCs).

  • Privacy Policy: Cal.com Privacy Policy
    
    

• PostHog Inc.

  • Location: Germany / EU (hosting takes place on European servers)

  • Purpose: Analysis of product and website usage to optimize our offering.

  • Basis of protection: GDPR-compliant through storage within the EU.

  • Privacy Policy: PostHog Privacy Policy
    
    

• Google LLC (Workspace)

  • Location: Switzerland

  • Purpose: Processing of our business email communications and internal collaboration.

  • Basis of protection: Adequacy decision (Switzerland) / Swiss-U.S. Data Privacy Framework (DPF).

  • Privacy Policy: Google Cloud Data Processing Addendum
    
    

• Lemlist (Lempire SAS)

  • Location: France

  • Purpose: Sales automation, email outreach and management of sales campaigns.

  • Basis of protection: GDPR-compliant through location and hosting within the European Union (France).

  • Privacy Policy: Lemlist Privacy Policy
    
    

• Missive (Helio Networks)

  • Location: Canada

  • Purpose: Email collaboration in the team and efficient processing of support requests.

  • Basis of protection: Adequacy decision for Canada (considered a safe third country under Swiss and EU law).

  • Privacy Policy: Missive Privacy Policy
    
    

• Allo (The Mobile-First Company)

  • Location: France

  • Purpose: Provision of our cloud telephone system (VoIP) for telephone customer support.

  • Basis of protection: GDPR-compliant due to company headquarters within the European Union.

  • Privacy Policy: The Mobile-First Company Legal & Privacy
    
    

• Attio Inc.

  • Location: United Kingdom (UK)

  • Purpose: Customer Relationship Management (CRM) and management of our B2B lead pipeline.

  • Basis of protection: Adequacy decision for the United Kingdom.

  • Privacy Policy: Attio Compliance & Privacy
    
    

• Relay (Relay.app)

  • Location: USA

  • Purpose: Data enrichment and automated workflow integrations in the background.

  • Basis of protection: Swiss-U.S. Data Privacy Framework (DPF) / Standard Contractual Clauses (SCCs).

  • Privacy Policy: Relay Privacy Policy
    
    

• Slack Technologies

  • Location: USA

  • Purpose: Internal team communication and automated notifications about incoming customer inquiries.

  • Basis of protection: Swiss-U.S. Data Privacy Framework (DPF) / Standard Contractual Clauses (SCCs).

  • Privacy Policy: Slack Privacy Policy

For providers based in the USA, we ensure that an adequate level of data protection exists, either via the EU-US Data Privacy Framework (DPF) or EU Standard Contractual Clauses.

4. Cookies

We use technically necessary cookies, without which the website would not function. In addition, with your consent, we use analysis cookies from PostHog. You can change your settings at any time via the cookie banner.

5. Your Rights

You have the right at any time:

• To obtain information about what data we have about you.

• To have incorrect data corrected.

• To have your data deleted, provided there is no legal retention obligation.

• To restrict or object to the processing.

• To receive your data in a structured, commonly used format (data portability).

• To withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Simply write to us at privacy@skriba.ch. We will respond within 30 days.

If you feel that we are not handling your data correctly, you can also lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

6. Security

Your data is stored on Microsoft Azure in Switzerland. Transmission is encrypted (TLS/SSL). Access is restricted to individuals who require it for their work. Our information security is based on ISO 27001.

7. Changes

If we adjust this policy, we will publish the updated version on skriba.ch/privacy. In the event of material changes, we will inform you by email if we have your address.