Privacy policy
Last updated: 8 October 2026
This policy explains what happens to your data when you visit this website. It covers this website only — not any product, engagement or contract you may have with us separately.
Our cookie policy is the companion to this page: it lists every cookie and every piece of browser storage this site uses by name, with what each one holds and how long it lasts.
Who is responsible
The controller for the processing described here is:
Value Accelerator GmbH
Grabenstrasse 11b
6340 Baar, Switzerland
Company identification number (UID): CHE-293.771.534
Registered seat and jurisdiction: Canton Zug, Switzerland
Represented by: Stefano Silvani, Managing Director, and Gabriele Perrone, Managing Director and Chairman
Email: info@value-accelerator.ai
Data protection officer: we have not appointed one, and are not required to. Art. 37 GDPR makes a DPO mandatory for public authorities, and for controllers whose core activities consist of large-scale systematic monitoring or large-scale processing of special categories of data. Ours is commercial consulting; the analytics described below are incidental to it and are neither of those things. Swiss law leaves the equivalent role voluntary. Anything you would put to a DPO can be sent to the address above, where it reaches the managing directors directly.
As a Swiss company we are subject to the Swiss Federal Act on Data Protection (FADP). Because we also offer our services to people in the EU and EEA, the GDPR applies to that processing as well, and the legal bases named below are the GDPR ones.
Nothing loads before you agree
Analytics and session-recording tools are switched off until you choose "Accept". Until then no Google or Hotjar script is fetched, no cookie is set by them, and no data reaches them. If you choose "Reject", they stay off.
Your choice is stored in your browser's local storage under the key va-consent-v1, together with a randomly generated identifier. That entry is what stops us asking again on your next visit. You can change your mind at any time using the "Cookie preferences" link in the footer of any page, or by clearing your browser storage for this site.
Each time you answer the banner, we also keep a record of that answer, because the law requires us to be able to show that you consented. The record holds the random identifier from your browser's entry, your choice and the button you used, the text of the banner you were shown, the page and its language, and the time. It holds no IP address, no browser details and nothing else about who you are: only someone with access to the entry in your browser can link a record to it. Records are kept on our own infrastructure at Amazon Web Services in Zurich and are deleted automatically after two years.
Legal basis: our legal obligation to be able to demonstrate your consent (Art. 6(1)(c) GDPR, read with Art. 7(1) GDPR).
We never enable advertising features. Google's advertising storage, ad personalisation and ad-user-data signals are set to "denied" on every page load and are never turned on, whatever you consent to.
What runs only after consent
Google Analytics 4
Purpose: to understand which pages people read, which calls to action they use, and which version of a page performs better.
Data: pages viewed, clicks on booking and contact links, approximate location derived from your IP address, device and browser type, and a randomly generated identifier stored in a cookie. IP anonymisation is enabled, so your full IP address is not stored by Google Analytics.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Processor: Google Ireland Limited, with transfers to Google LLC in the United States under the EU–US Data Privacy Framework and standard contractual clauses.
Retention: event-level data is deleted after the retention period configured in our Google Analytics property; aggregated reports are kept beyond that. Email us and we will tell you the period currently set.
More detail: Google's privacy policy.
Hotjar (Contentsquare)
Purpose: to see how pages are actually used — where people scroll, hesitate and click — so we can improve them.
Data: Hotjar records a playback of your visit: mouse movement, clicks, scrolling, page changes, screen size, device and browser type, approximate location by country, and a randomly generated identifier. Hotjar suppresses the contents of form fields by default, so what you type is not captured.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Processor: Hotjar Ltd (part of Contentsquare), Malta, with sub-processors including Contentsquare SAS.
Retention: recordings and heatmap data are deleted after the retention period configured in our Hotjar account. Email us and we will tell you the period currently set.
More detail: Hotjar's privacy policy. You can also use Hotjar's global opt-out.
Booking a call
Our booking buttons open a Calendly scheduling window. Calendly's code is only fetched at the moment you open that window — not on page load. Anything you enter there (your name, email address and any message) is submitted to Calendly and to us in order to arrange the meeting you asked for.
Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).
Processor: Calendly LLC, United States. See Calendly's privacy notice.
Downloading the Blueprint toolkit
The toolkit page in the GTM Blueprint asks for your first name, surname, company and work email address, and records which bundle you asked for. The form is submitted to us, on the same Swiss infrastructure that serves this site. We first email you a link to confirm the address is yours; nothing else happens until you click it, and if you do not, the link expires after 24 hours and we keep nothing. When you confirm, we email you a link to the bundle — it works for one hour, and the file cannot be reached without it — and we record your details as a contact request in our own customer relationship system, ValueOS, which we operate ourselves on Amazon Web Services in Zurich. We use them to follow up about the toolkit. You can ask us at any time to delete them, using the contact details at the top of this policy. All of these emails are sent through Amazon Web Services, named below as our hosting processor.
Legal basis: steps taken at your request, to deliver the material you asked for (Art. 6(1)(b) GDPR); our legitimate interest in following up with you about the toolkit (Art. 6(1)(f) GDPR), which you can object to at any time by emailing us.
The toolkit files are served from this website, on our own infrastructure, and only to someone holding a current link. Downloading one reaches no third party at all: no other company sees your IP address, your browser type or which file you asked for.
Hosting and server logs
This site is static and is hosted with Amazon Web Services on infrastructure located in Switzerland. Delivering a page necessarily involves processing your IP address, and AWS records standard access logs for security and operation of the service.
Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
Processor: Amazon Web Services EMEA SARL, Luxembourg.
What we do not do
We do not run advertising or retargeting on this site, we do not use automated decision-making or profiling that produces legal effects, and we do not embed third-party fonts, images or videos — every font and image is served from our own domain. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as the terms "sell" and "share" are defined by the California Consumer Privacy Act (CCPA/CPRA): Google Analytics runs here with every advertising signal switched off, we disclose nothing to data brokers, and we receive no money or other value in exchange for your data.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time — the "Cookie preferences" link in the footer does exactly this — without affecting the lawfulness of what happened before you withdrew it.
To exercise any of these rights, email info@value-accelerator.ai.
You also have the right to complain to a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC) in Bern. If you are in the EU or EEA, you can instead complain to the supervisory authority where you live or work.
Changes to this policy
If we add or remove a tool, or change what we do with your data, we update this page and the date at the top of it.