Privacy Policy.

Reverz Group AG, Poststrasse 30, 6300 Zug, Switzerland (UID CHE-417.231.969), operates www.reverz.com and is responsible for the personal data processed through it. For any question about this statement or about your data, write to info@reverz.com.

This statement covers the website: its forms, the customer accounts and the online shop. It applies under the Swiss Federal Act on Data Protection (FADP) and, where you are in the European Union, under the General Data Protection Regulation (GDPR).

Consultation and contact form. Your name, work e-mail address, company, phone number and message, and the language of the page. We use them to answer your request: as a step before a possible contract (GDPR Art. 6(1)(b)) and in our legitimate interest in following up a business enquiry (Art. 6(1)(f)).

ITAD presentation. Your name, work e-mail address and company, and the language of the page. We use them to e-mail you the download link and to follow up on your interest (Art. 6(1)(f)). The request is recorded in our customer relationship management system (CRM).

Asset-list request. Your company, contact person, work e-mail address, optional phone number and country; the number of sites, the service and the period you ask for; your message; whether you asked for a non-disclosure agreement; and the asset list you send. We use them to prepare and discuss your quote (Art. 6(1)(b)). The request and the list reach our team by e-mail. An asset list normally describes equipment, not people: please leave out personal data the quote does not need.

CareOne request. Your company, contact person, work e-mail address and optional phone number; when your OEM support ends, the approximate number of systems and the service level you are considering; your message; and the OEM renewal quote or asset list you send, through the form or by e-mail. We use them to prepare your coverage check and TCO comparison (Art. 6(1)(b)). The request and the file reach our team by e-mail.

The fields a form marks as required are needed to answer you; without them we cannot handle the request.

Only if you tick the box on the presentation form do we add your e-mail address, name and company to our newsletter list, on the basis of your consent (Art. 6(1)(a)). Every newsletter carries an unsubscribe link, and you can withdraw your consent at any time by writing to us; withdrawal does not affect what happened before it.

An asset list or renewal quote you send with a form travels over an encrypted connection to the website. The website checks its real file type and refuses spreadsheets with macros, embedded objects or links to outside data, CSV files with formulas and PDF files with scripts. It then e-mails the file, with your request, to our team; it keeps no copy. Our e-mail service scans incoming attachments for malware.

It is used only to prepare your quote or comparison. It is never shared with buyers or other third parties.

If you create an account, we store your e-mail address and a hash of your password (never the password itself), and then the addresses, shopping carts and orders you add to it, so that you can sign in, order and use the customer platform (Art. 6(1)(b)). Account e-mails, such as a confirmation link or a security code, are sent through our e-mail provider.

When you place an order in the marketplace, your order, payment and delivery details are processed by Shopify, which runs our shop, and by the payment provider you choose at checkout, to fulfil the order (Art. 6(1)(b)) and to keep the records the law requires (Art. 6(1)(c)).

Our hosting provider records technical data, such as your IP address, your browser and the page requested, to deliver the website and keep it secure (Art. 6(1)(f)). These logs are kept for a short period, at most 30 days.

Our forms are protected against automated abuse with Cloudflare Turnstile, which runs invisibly and may process limited technical data, such as your IP address, to tell people from bots. This processing is described in the Cloudflare Turnstile Privacy Addendum.

Data travels encrypted (TLS) and is stored encrypted. Access is limited to the people who need it for the purposes described here.

This website measures how it is used, so we can see which pages are read and where visitors leave.

Vercel Web Analytics runs on every visit. It is cookieless and aggregate: it stores nothing on your device and does not follow you across sites.

Google Analytics 4 runs under Google Consent Mode. Until you accept, it stores and reads nothing on your device and reports only cookieless, aggregate measurements. If you accept, it sets two first-party cookies (_ga and _ga_ZHZ2E7J7MY) that let us recognise a returning browser (Art. 6(1)(a)). No advertising or personalisation signals are enabled, nothing is shared with advertisers, and there is no cross-site tracking.

You can change or withdraw your answer at any time through “Cookie Settings” in the footer. Declining also removes any analytics cookies already stored.

We use the following service providers, each bound by a data processing agreement and each only for the task named.

Vercel hosts the website, on servers in Frankfurt, Germany. Supabase stores the customer accounts, in Frankfurt. Resend delivers our e-mails, from Ireland. Microsoft 365 hosts our company e-mail, where requests sent with a file arrive. Odoo hosts our CRM, in the EU. Cloudflare provides the bot protection on our forms. Google provides Google Analytics, as described above. Shopify runs the online shop.

Within the Reverz group, your request is shared only with the people who handle it. We do not sell personal data, and we do not share it for advertising.

Switzerland and the European Union recognise each other's level of data protection. Some of our providers are companies based in the United States (Vercel, Supabase, Resend, Cloudflare, Google, Microsoft) or in Canada (Shopify). Where your data reaches them, the transfer is covered by an adequacy decision (Canada), by the EU-U.S. and Swiss-U.S. Data Privacy Framework where the provider is certified, and otherwise by the European Commission's standard contractual clauses.

Requests through our forms are kept as long as needed to handle and follow them up, and no longer than 24 months after our last contact, unless a business relationship follows; the records of that relationship are then kept as long as the law requires (in Switzerland, ten years for business records).

Asset lists and renewal quotes are not stored on the website. They reach our team by e-mail and are deleted 24 months after the request, unless a contract follows.

Newsletter subscriptions are kept until you unsubscribe. Accounts are kept as long as they exist; when an account is deleted, only the order records the law requires us to keep remain. Google Analytics keeps event data for at most 14 months, and server logs are kept for at most 30 days.

You can ask us for access to your data, for its correction or deletion, and for its processing to be restricted. You can object to processing based on our legitimate interest, receive the data you gave us in a portable format, and withdraw your consent at any time. Send your request to info@reverz.com; we answer within 30 days.

We do not make decisions about you based solely on automated processing.

You can lodge a complaint with a data protection authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and in the European Union with the authority in the country where you live or work, for example the Dutch Autoriteit Persoonsgegevens or the Belgian Data Protection Authority.

We update this statement when what we do with your data changes. This version is dated 13 October 2026. The English text prevails over any translation.