Clear terms before the conversation starts.

With your separate, optional consent, Tanda Gruppe GmbH uses Microsoft Clarity to analyse page visits, clicks, scrolling, heatmaps and masked session replays to improve this website. Clarity receives usage and device data, including page addresses, and uses cookies for analytics. The inquiry form is masked; we do not send its field values or identify visitors by name or email. Microsoft advertising consent is denied. You can decline or withdraw consent in Privacy settings at the bottom of any page. Clarity is not loaded before consent; withdrawal stops recording, and allowing it again takes effect on the next page visit. Your choice is stored on this device for 180 days. Microsoft may process data outside Switzerland and the EEA; see its privacy statement for processing and transfer details.

Microsoft Privacy Statement

• Tanda Gruppe GmbH
• c/o Dmytro Shvetsov, Bürgstrasse 3, 3700 Spiez, Switzerland
• Swiss company identification number (UID): CHE-466.023.689
• Managing Director: Dmytro Shvetsov
• Email: d.shvetsov@tandagroup.ch

Tanda Gruppe GmbH is the provider of this website and the controller responsible for the personal data described below. Dmytro Shvetsov is responsible for the editorial content.

The website presents management advisory services and invites an initial conversation about possible work together. Website content, a reply to an enquiry, or an initial conversation does not by itself create a mandate, fee obligation, exclusivity, or other contract. An engagement begins only after separate written confirmation or agreement by the parties.

The material is general management commentary. It is not legal, tax, audit, investment, or other regulated professional advice. Decisions should not be made solely on the basis of this website. No specific commercial result is promised or guaranteed.

To the extent permitted by law, Tanda Gruppe GmbH accepts no liability for decisions based solely on the website or for third-party content reached through external links. Liability that cannot legally be excluded remains unaffected.

All texts and management theses on this website express the personal views of Dmytro Shvetsov. Copyright in their individual expression arises automatically under applicable law. This notice does not claim exclusive rights over ideas, methods, concepts, facts, or general management principles as such.

The protected wording, structure, graphics and other original elements may not be reproduced, republished, translated, adapted, distributed or used commercially without prior written permission. Mandatory legal exceptions remain unaffected, including quotation that is limited to its purpose and properly identifies the author and source.

When you use the enquiry form, Tanda Gruppe GmbH processes the information you provide: your name, email address, company and role, a description of the business situation, and details of the decision you need to make. Required fields are marked in the form. The server adds a random enquiry reference and the receipt time. If advertising measurement has been allowed, the website may add the first-touch source, medium, campaign, term and content, the landing route and referring hostname, and any gclid, wbraid, gbraid or msclkid present in the landing URL. Those attribution fields are stored separately from the enquiry content. The internal Brevo notification contains the attribution status and available campaign fields; it shows only the click-ID type and a masked ending, while full click identifiers remain in the separate server-side attribution record. The raw IP address, Turnstile token and pseudonymous rate-limit key are excluded from the email payload. No advertising profile is created.

The data is used to review and answer the enquiry, take steps requested before a possible engagement, prevent misuse, maintain business correspondence, and comply with legal obligations. Where the GDPR applies, the legal bases are Article 6(1)(b), 6(1)(f) and, where required, 6(1)(c). The legitimate interests are secure communication, efficient handling of enquiries and protection of legal claims.

Cloudflare, Inc. processes technical data for hosting, security and Turnstile bot verification. Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, acts as a processor for the transactional delivery of website enquiries to Tanda Gruppe GmbH’s controlled business mailbox. Brevo receives only the minimised email payload described above. Access is limited to what is necessary for the respective task.

Brevo identifies France, Germany and Belgium as the primary database locations for this service. Support access or subprocessor processing in other countries, including the United States where applicable, may occur. Where required, international transfers are protected by safeguards identified in Brevo’s DPA, including the European Commission’s Standard Contractual Clauses with supplementary measures, the EU-US Data Privacy Framework while valid, or safeguards applicable to the particular subprocessor. Other providers may process data in Switzerland, the EEA, the United States or other locations disclosed by them. The form requests explicit consent to the described transmission and provides direct email as an alternative.

Tanda Gruppe GmbH does not sell enquiry data and does not use it for unrelated advertising.

ChatGPT Ads measurement is a separate optional purpose and is off by default. If expressly allowed, Tanda stores the canonical first landing path and any valid OpenAI click reference (oppref) only in sessionStorage in the current browser tab for no longer than 24 hours. Only after the enquiry delivery provider has accepted the request may Tanda send one server-side standard lead_created event. The event uses the random enquiry reference as its event ID and contains the canonical first landing URL, post-acceptance event time, customer_action type, opt_out=true and, when present, the consented oppref. It contains no user object, name, email address or hash, company, enquiry text, raw IP address, user agent, external ID or obref. No OpenAI browser Pixel, SDK or OpenAI measurement cookie is used, and the server event does not depend on Automatic Advanced Matching. Declining or withdrawing this separate permission prevents future ChatGPT Ads events and clears the session record.

Website funnel measurement is a separate optional purpose and is off by default. If you explicitly allow it, the browser sends canonical funnel stages with only coarse language, device class, canonical landing-page key and traffic class. Tanda stores these only as independent daily aggregate counters. Funnel metrics contain no journey, form, attempt, event or enquiry identifier; no exact event timestamp, IP address, user agent, raw URL, query, referrer, UTM or advertising click ID; and no name, email address, company or free text. They are not forwarded to Google Ads, GA4, Clarity, Brevo, Sentry or another analytics provider. With permission unset, declined or withdrawn, the browser sends no funnel events; withdrawal also clears session-only counting guards.

When a visitor actually submits the enquiry form, the server may increment daily operational counters for validation, Turnstile, API and provider outcomes regardless of optional funnel permission. Without funnel permission those counters contain only the canonical event and a normalised result or reason code plus the server-derived UTC date and count—no device, source, landing page, CTA or behavioural context. Provider acceptance means that the transactional API accepted the request; it is not evidence of mailbox delivery. Metrics failures are fail-open and do not change form delivery, the response or Google Ads conversion behaviour.

Sentry receives a minimised browser error report to help identify website faults: a standard error category, JavaScript asset path and line number where available, release identifier and timestamp. Error messages, form contents, page query parameters, user profiles and navigation history are removed before transmission. Session Replay, performance tracing and logs are not enabled. Reports use Sentry’s German ingestion endpoint; the network connection necessarily exposes the sender’s IP address to the receiving infrastructure.

Tanda Gruppe GmbH uses Google Ads conversion measurement supplied by Google Ireland Limited / Google LLC. Consent Mode v2 denies ad storage, analytics storage, advertising user data and ad personalisation by default. A visitor may optionally allow advertising measurement. If permission is given, ad storage and advertising user data are set to granted; analytics storage and ad personalisation remain denied. The choice is stored locally in the browser and can be changed at any time through Privacy settings. After permission, Tanda’s own first-touch attribution record is stored only in sessionStorage for the current browser tab, for no longer than 24 hours, and survives normal page navigation and re-rendering. Declining or withdrawing permission clears it; without permission Tanda does not retain or send those campaign and click identifiers with the form. Google may still receive cookieless technical consent signals as described by Consent Mode. Ads data redaction is enabled while permission is denied. URL passthrough is enabled, so eligible Google advertising click parameters, such as gclid, dclid, gclsrc, _gl or wbraid, may be appended to links as visitors move between pages on this website for conversion attribution. Hosting and security providers may also process technical access and security logs required to deliver and protect the site.

The server-side form route enforces origin, content-type, body-size, field and consent checks. Cloudflare Turnstile verifies an anti-abuse token on the server. The request IP address is used temporarily for that verification and is converted with a secret HMAC into a pseudonymous rate-limit key used for a ten-minute control window; expired keys are removed by subsequent form traffic, and neither the raw address nor the key is sent to Brevo. After all checks pass, the server sends the enquiry and its internal attribution summary directly to the Brevo transactional email API using a fixed server-side sender and recipient. The visitor’s validated email address is used only as Reply-To. Brevo’s anonymous tracking for transactional emails is enabled. Open and click events may therefore be recorded in anonymised aggregate form without being linked to an individual recipient. The form route sends contactPixelTrackingConsent as false, and no marketing or CRM tracking is used for enquiries. Only HTTP 201 with a non-empty Brevo message ID is treated as provider acceptance and returns a one-time reference to the browser; this is not proof of mailbox delivery. On the current form page, the browser first records a pending local conversion state and then queues exactly one Google Ads conversion event with a nominal value of CHF 1 before navigating to the success page. The success page is used only as a fallback for a genuine remaining pending state and never retries a queued ambiguous event. A direct visit to the success page does not create a conversion. The enquiry reference, name, email address, company and enquiry content are not included in the Google conversion payload. Tanda Gruppe GmbH does not use this website for automated individual decision-making or behavioural profiling.

Aggregate funnel buckets are kept for a maximum business-analysis window of 12 months and may be removed opportunistically during later metric writes. Because they contain only daily independent totals and no persistent user- or journey-level records, this housekeeping is not used as a personal-data deletion control. The dormant historical observability test tables are not used or written by the active runtime.

Enquiries in Tanda Gruppe GmbH’s correspondence are normally retained for up to 24 months after the last meaningful contact and then deleted or anonymised. Data may be retained longer where a mandate is concluded, a statutory retention duty applies, or it is reasonably required to establish, exercise or defend legal claims. The separate server-side attribution record receives a 90-day expiry timestamp. Expired records are physically removed by subsequent valid form traffic and may therefore remain until the next such request. The current Brevo account settings retain transactional logs for one month and do not store transactional email previews. Other technical logs are retained only for the necessary security periods of the relevant provider.

Subject to the applicable law, you may request access, correction, deletion, restriction, data portability, or object to processing. You may withdraw consent with effect for the future; withdrawal does not affect processing already carried out. Send requests to d.shvetsov@tandagroup.ch. Identity verification may be required before disclosing personal data.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, where the GDPR applies, with the competent EEA supervisory authority. Mandatory rights and remedies remain unaffected.

Reasonable technical and organisational measures are used to protect enquiries. Internet transmission cannot be guaranteed to be completely secure. Do not send passwords, medical data, identity documents, payment-card details, trade secrets or other highly sensitive information through the form. Use direct email to arrange an appropriate channel when necessary. The website is intended for business users and not for children.

Swiss law applies to the use of this website. To the extent legally permitted, the courts at the registered office of Tanda Gruppe GmbH have jurisdiction. Mandatory consumer, data-protection and other statutory rights remain unaffected.

This notice may be updated when the website, providers or law change. The version date above identifies the current text.