Legal.
This translation is provided for convenience. The German version prevails.
Legal notice
- Provider
- Enerson GmbH
- Address
- Chäppelimatt 7
6232 Geuensee
Switzerland - Commercial register
- CH-100.4.805.358-1
- Contact person
- Daniel Müller
- info@enerson.tech
enerson.tech is developed in-house by Enerson GmbH for the day-to-day business of electrical installation companies: time recording, reports, customer master, invoices and document archive.
Privacy policy
Who processes the data
The controller within the meaning of Art. 5 let. j of the Swiss Data Protection Act (DSG) is the above-named Enerson GmbH — for all data processed in the application. There is currently no processing on behalf of third parties. Enquiries about data protection go to info@enerson.tech.
Should the application in future be operated for another company, that company becomes the controller for its business data and Enerson GmbH becomes the processor under Art. 9 DSG. A written contract will then be concluded for this, and this policy will be supplemented accordingly.
Which data and for what purpose
- Account request: name, username, email, company, optional note, password (stored only as an Argon2id hash, never in plain text). Purpose: review and activation of access.
- Sign-in and use: time, IP address, browser identifier, requested path, response code. Purpose: secure operation, detection of abuse attempts, traceability of changes.
- Second step (two-factor): one secret per account, stored in the database only in encrypted form; the key is kept outside the database.
- Passkeys: Anyone who creates a passkey deposits the public key, an identifier, the chosen device name and the time of creation and of last use; the private key remains on the device. On every password change, on a reset by the owner and on an account lock, all passkeys of the account are revoked. Signing in with a passkey does not name a username; the device shows the stored passkeys, also as a suggestion in the name field. For this purpose, when the sign-in screen is opened in browsers with passkey support, a random number is stored together with the IP address (valid for five minutes, deleted one day after expiry) and the call is recorded in the access trail.
- Forgotten password: Anyone who forgets their password submits a request on the sign-in screen; the owner confirms it and hands over a new password by email link (valid for 24 hours) or in person. Owner accounts with an email address additionally receive a link immediately (valid for 60 minutes). Requests store the time and IP address until they are dealt with, at most 30 days, and are deleted six months after completion; one-time links store a checksum, the validity period and the IP addresses of creation and use and are deleted six months after expiry. The request itself is additionally recorded in the audit log with the requester's IP address and browser identifier (see «How long»).
- Appearance: The chosen appearance (Classic, Focus, Night blue) is saved to the account; the browser additionally remembers it locally, without any personal reference.
- Search (Ctrl+K): The most recently opened views are kept only in the browser and are deleted on sign-out. Search terms — both of this search and of the lists (customers, sites, reports, invoices, articles, documents, archive, tickets) — are not stored in any log; the inbound proxy removes them before writing the access log.
- Business data: working times, reports including signature, customer and site master, invoices, archive documents. Purpose: handling of day-to-day business and fulfilment of statutory record-keeping and retention obligations.
No location determination takes place. The application never calls the browser's
geolocation function, and the server additionally prohibits it via the header
Permissions-Policy: geolocation=(). This can be verified in the developer tools
of any browser.
There is no advertising, no audience measurement and no profiling. No data is sold to third parties or analysed for the purposes of others.
Cookies
A single cookie: __Host-es_sitzung, the identifier of the sign-in session. It is
technically necessary (Art. 45c of the Swiss Telecommunications Act, FMG), is transmitted only over HTTPS,
cannot be read by JavaScript and is not sent to third-party sites. It expires after 12 hours without access,
at the latest after 14 days and on sign-out. Until 3 October 2026, a still-existing cookie
with the former name carrera_sess is replaced by
__Host-es_sitzung and deleted on the first call. A consent banner is not
required for this and is therefore not shown.
Disclosure abroad
The data is processed and backed up on servers of Enerson GmbH in Germany; processing is carried out under the Swiss Data Protection Act (DSG) and in compliance with the GDPR. No data centre operator and no hosting provider is interposed. Germany is on the list of states with adequate data protection in Annex 1 of the Data Protection Ordinance (DSV); additional safeguards under Art. 16 para. 2 DSG are therefore not required. This information is provided pursuant to Art. 19 para. 4 DSG.
No data is processed outside Switzerland and the EU. No service providers from third countries are involved.
Recipients
- the persons activated by the owner, within the scope of their role in the application;
- Enerson GmbH as operator, for operation, backup and fault resolution;
- authorities, insofar as a legal obligation requires it.
How long
| What | Duration | Reason |
|---|---|---|
| Account and sign-in data | as long as the account exists, then 12 months | Traceability |
| Rejected or never activated requests | 6 months | Proportionality, Art. 6 DSG |
| Access trail (IP, browser identifier, path, response code) | 6 months | Abuse detection |
| IP address and browser identifier in the audit log (every sign-in, every password request, every logged change) | 10 years, with the audit log | Traceability, Art. 958f of the Swiss Code of Obligations (OR) |
| Application journal of the server (start-up and error messages; on failed email delivery the recipient address in shortened form; no access lines) | 6 months | Troubleshooting |
| Access log of the inbound proxy (IP address, browser identifier, path including address parameters; without search terms, one-time links, referrers or cookie contents) | rotated by size, at most 90 days | Operational security |
| Working time records | 5 years | Art. 46 of the Swiss Employment Act (ArG) in conjunction with Art. 73 ArGV 1 |
| Invoices and business records | 10 years | Art. 958f OR |
These logs serve security and traceability, not the monitoring of employees' behaviour.
Security
Transmission exclusively encrypted over HTTPS. Passwords are hashed with Argon2id and never stored in plain text. The second step is mandatory after ten sign-ins. Permissions are tied to roles; anyone with a role lacking the corresponding permission is not even served the data. Changes to audit-relevant data are recorded in a continuously chained log that the application itself cannot alter. Changes to an account's email address are recorded in the audit log with the new address in plain text and the previous one in shortened form; this log is retained for ten years, even after deletion of the account.
Your rights
Under the DSG you have the right of access (Art. 25), rectification (Art. 32), data release and portability (Art. 28), as well as the right to object to processing or to withdraw consent. Please contact info@enerson.tech.
You may also contact the Federal Data Protection and Information Commissioner: FDPIC (EDÖB), Feldeggweg 1, 3003 Bern.
Scope
The offer is expressly aimed at companies domiciled in Switzerland. An account can only be requested by those who confirm this. It is not aimed at persons in the European Union.
Changes
This policy may be amended when the application changes. The version published here at any given time is authoritative; the date is shown above.