Data protection
This page explains what data we process when you use our site, for what purposes, to whom we disclose it and how long we keep it.
Controller
SPTS - Swiss Payroll & Tax Services Sàrl, Chemin de la Chesnaie 8, 1219 Châtelaine, Switzerland, IDE CHE-272.150.214, which operates the SPTS Fiduciaire brand.
For any question about your data: contact@spts.ch.
What we process and why
Contact form
- Data processed
- Name, email address, service chosen, message
- Purpose
- Replying to your request
- Retention period
- 12 months after the last exchange, if no engagement follows
- Recipients and countries concerned
- Vercel, which runs the form in Frankfurt (Germany); Resend, which forwards your message to us by email, in the European Union; Google, our email service, in the European Union
Form protection
- Data processed
- Non-reversible fingerprint of your IP address
- Purpose
- Limiting abusive submissions
- Retention period
- 48 hours at most
- Recipients and countries concerned
- Supabase, the site's database, in Frankfurt (Germany)
Job application
- Data processed
- Name, email address, message, CV
- Purpose
- Processing your application
- Retention period
- 6 months after the end of the recruitment process
- Recipients and countries concerned
- The same as for the contact form; the CV is attached to the email
Simulators and diagnostic
- Data processed
- What you enter
- Purpose
- Calculating an estimate
- Retention period
- None: the calculation takes place in your browser
- Recipients and countries concerned
- None
Calendar of deadlines
- Data processed
- Profile chosen: type of taxpayer, canton, VAT registration, employer
- Purpose
- Showing your deadlines and, if you wish, adding them to your calendar
- Retention period
- None on our site
- Recipients and countries concerned
- If you subscribe or add a deadline, the calendar service you choose
Audience measurement, with your consent
- Data processed
- Measurement identifier, pages viewed, technical information about your browser and device, approximate location
- Purpose
- Measuring the site's traffic
- Retention period
- 14 months
- Recipients and countries concerned
- Google, collection in the European Union and storage in the United States
Site hosting
- Data processed
- IP address, page requested, browser, date and time
- Purpose
- Running and protecting the site
- Retention period
- 1 day for execution logs
- Recipients and countries concerned
- Vercel, in Frankfurt (Germany)
| Use or service | Data processed | Purpose | Retention period | Recipients and countries concerned |
|---|---|---|---|---|
| Contact form | Name, email address, service chosen, message | Replying to your request | 12 months after the last exchange, if no engagement follows | Vercel, which runs the form in Frankfurt (Germany); Resend, which forwards your message to us by email, in the European Union; Google, our email service, in the European Union |
| Form protection | Non-reversible fingerprint of your IP address | Limiting abusive submissions | 48 hours at most | Supabase, the site's database, in Frankfurt (Germany) |
| Job application | Name, email address, message, CV | Processing your application | 6 months after the end of the recruitment process | The same as for the contact form; the CV is attached to the email |
| Simulators and diagnostic | What you enter | Calculating an estimate | None: the calculation takes place in your browser | None |
| Calendar of deadlines | Profile chosen: type of taxpayer, canton, VAT registration, employer | Showing your deadlines and, if you wish, adding them to your calendar | None on our site | If you subscribe or add a deadline, the calendar service you choose |
| Audience measurement, with your consent | Measurement identifier, pages viewed, technical information about your browser and device, approximate location | Measuring the site's traffic | 14 months | Google, collection in the European Union and storage in the United States |
| Site hosting | IP address, page requested, browser, date and time | Running and protecting the site | 1 day for execution logs | Vercel, in Frankfurt (Germany) |
This processing relates to the use of the site. If you entrust us with an engagement, the data needed to perform it is processed under the terms agreed for that engagement.
Simulators and the calendar
The calculations of the withholding tax simulator, the VAT diagnostic and the list of steps for arriving in or leaving Switzerland take place in your browser. The data you enter is not sent to us and is not recorded.
The calendar of deadlines works the same way, with one exception: if you subscribe to the calendar or add a deadline to Google Calendar or Outlook, the calendar's address, which reflects the profile chosen, is passed to your calendar application and to the service you use.
The data you enter is distinct from the technical data linked to visiting the site, such as your IP address, which our host processes to run the site.
Religious affiliation in the withholding tax simulator
In cantons whose withholding tax tariff distinguishes church tax, the simulator asks for your religious affiliation, because it changes the applicable tariff.
This field is optional: it is set to "None" by default. If you do not change it, the estimate does not take any church tax into account. Like the simulator's other inputs, this information stays in your browser.
Audience measurement
With your consent, we use Google Analytics 4 to measure the site's traffic and understand which pages and tools visitors consult.
Before you choose, and if you decline, Google Analytics is not loaded and no data is sent to Google. If you withdraw your consent, measurement stops and the Google Analytics cookies are deleted from your browser; data already sent remains subject to the retention period shown above.
We do not send Google Analytics the content of your messages, your name, your email address or the data entered in our tools.
The data is collected in the European Union and then stored in the United States. Google LLC is certified under the Swiss-U.S. Data Privacy Framework, which the Swiss Federal Council recognises as ensuring an adequate level of protection for certified companies.
You can change your preferences at any time from our Cookies page.
Your rights
You can ask whether we process data about you and which data, obtain a copy of it, have it corrected if it is inaccurate, request its deletion or object to processing, and withdraw any consent you have given. These rights apply within the limits set by law, in particular where a legal obligation requires us to retain certain data.
To exercise your rights, write to contact@spts.ch. We may ask you for the information needed to verify your identity. We normally reply within 30 days; if that is not possible, we tell you when you will receive our reply.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
Security
The site's form is intended for a first contact: do not attach sensitive data to it. Emails exchanged with us are encrypted in transit where the email services allow it, but not end to end; on request, we agree on another means of transmission for particularly sensitive data.
We protect data with appropriate measures, in particular encrypted connections, access to our tools limited to the people who need it, two-factor authentication on our email service, protection of our forms against automated submissions, and our staff's duty of confidentiality.
If a data security breach is likely to result in a high risk to your rights, we report it to the FDPIC as soon as possible and inform you where this is necessary for your protection or the FDPIC requires it.
Changes
This policy provides information about our processing of data; it does not form part of any contract. We may update it. The date of the last update is shown below.
Last updated: 11 October 2026