Skip to main content

Privacy Policy

Last updated: 23 September 2026

This privacy policy explains how TrafficFlow GmbH (“TrafficFlow”, “we”, “us”) processes personal data when you visit trafficflow.ch, contact us, or when we work on your behalf as your agency, including through our Google Ads management tool. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

TrafficFlow GmbH
Staubstrasse 1
8038 Zürich, Switzerland
Email: hello@trafficflow.ch
Phone: +41 44 499 09 16

For any question about data protection, or to exercise your rights, write to hello@trafficflow.ch.

2. Visiting our website

Server logs

When you open trafficflow.ch, our hosting provider automatically records technical data such as your IP address, date and time of access, the page requested, the referring page and your browser and operating system. We use this data to deliver the website, keep it secure and fix errors. Log files are deleted after a short period unless they are needed to investigate a security incident.

Google Analytics

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA, to understand how visitors use our website. Google Analytics uses cookies and similar technologies to collect information such as pages visited, time on site, device and approximate location. Google Analytics 4 does not store full IP addresses. The information may be transferred to and processed on servers of Google in the United States. You can prevent the collection by declining analytics cookies, deleting cookies in your browser, or installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

Google Fonts

Our website loads fonts from Google Fonts (Google Ireland Limited / Google LLC). When a page loads, your browser connects to Google’s servers, which receive your IP address. We use this to display our website consistently.

3. Contacting us

If you contact us by email or phone, we process the information you provide (for example your name, company, email address, phone number and message) to answer your enquiry and, if applicable, to prepare or carry out a contract. We keep this correspondence for as long as needed for that purpose and as required by statutory retention obligations.

4. Working for our clients

When we manage advertising, analytics or websites for a client, we process data on the client’s behalf and according to the client’s instructions. In that role the client is responsible for the data, and we act as its processor. We only access the accounts and systems our clients grant us access to, and only for the services agreed with them.

5. Google Ads management tool and data from Google APIs

TrafficFlow operates an internal tool, the “trafficflow ads manager”, that connects to Google services through the Google Ads API and related Google APIs (for example Google Analytics data in BigQuery and Google Merchant Center). The tool signs in with a Google service account that our clients add to their own Google Ads accounts. It is not offered to the public and does not ask end users to sign in with their Google account.

Through this access we read campaign structure, settings and performance data (such as costs, clicks, conversions and conversion value) of our clients’ advertising accounts, and, with the client’s instruction, create or change campaigns, keywords, ads and budgets in those accounts. Where we use shop or order data, we use it in aggregated form only (for example orders and revenue per day or per product); we do not copy personal data of our clients’ customers.

Limited use. TrafficFlow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use data received from Google APIs only to provide advertising management and reporting to the client whose account the data belongs to. We do not sell this data, do not use it for advertising of our own or for any purpose unrelated to that service, and do not transfer it to third parties except the service providers listed below that help us provide the service, as required by law, or with the client’s consent.

Account data, reports and a record of every change we make are kept in an access-restricted, private repository for the duration of the client relationship and deleted or returned when it ends, unless statutory retention obligations apply. Access credentials are stored in the operating system’s credential store and never in files, code or version history.

6. Service providers and transfers abroad

We work with the following providers, which may process personal data on our behalf:

  • our website hosting provider (website and server logs);
  • Google Ireland Limited and Google LLC (Google Analytics, Google Fonts, Google Cloud and the Google Ads API);
  • GitHub, Inc. (Microsoft), USA (private code and data repository used for client work);
  • Anthropic PBC, USA (AI assistant “Claude” that we use to analyse and manage client advertising accounts under our supervision).

Some of these providers are located in the United States or may access data from there. Where data is transferred to a country without an adequate level of data protection, we rely on the Swiss-US and EU-US Data Privacy Framework where the provider is certified, or on the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner and the European Commission.

7. How long we keep data

We keep personal data only as long as needed for the purposes described above, for the duration of a contract, or as long as statutory retention obligations require (in Switzerland generally ten years for business records). Afterwards we delete or anonymise it.

8. Your rights

Under the applicable data protection law you have the right to request information about the personal data we process about you, to have incorrect data corrected, to have data deleted, to restrict or object to processing, to receive your data in a common format, and to withdraw any consent you have given with effect for the future. To exercise these rights, contact us at hello@trafficflow.ch. You may also lodge a complaint with a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), or with the authority of your country of residence in the EU.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted connections (HTTPS), access restrictions and least-privilege access to client accounts.

10. Changes

We may update this privacy policy when our services or legal requirements change. The current version is always available on this page.