Data Processing Agreement (DPA)

Last updated: August 2026

This DPA governs the processing of personal data that Pixelized.ch Sagl ("Processor") carries out on behalf of the customer ("Controller") when providing the AlpStats.ch service. It forms part of the Terms of Service and applies for as long as the Processor processes data for the Controller.

1. Roles

The Controller (the customer) determines the purposes and means of measuring their own website. The Processor (Pixelized.ch Sagl) processes visitor data only on the Controller's behalf and documented instructions. Each party complies with the nFADP/nLPD and, where applicable, the GDPR.

2. Subject, nature and purpose

Subject: provision of cookieless web analytics. Nature and purpose: collecting and aggregating anonymous usage statistics for the Controller's registered sites. Duration: for the term of the subscription, then the data lifecycle in section 8 applies.

3. Data subjects and categories of data

Data subjects: visitors of the Controller's websites. Categories: page path, referrer domain, approximate country (derived locally from IP, which is not stored), device/browser/OS classification, screen size and optional language, and an anonymous daily visitor hash. No cookies, no persistent identifiers, no stored IP address, no raw user-agent, no special-category data.

4. Processor obligations

• Process personal data only on the Controller's documented instructions (these Terms and the service settings).
• Ensure persons authorised to process the data are bound by confidentiality.
• Implement appropriate technical and organisational security measures (HTTPS, hashing, data minimisation, access control, backups).
• Assist the Controller, taking into account the nature of processing, in responding to data-subject requests and in meeting security, breach-notification and impact-assessment obligations.
• Notify the Controller without undue delay after becoming aware of a personal-data breach affecting their data.
• At the end of the service, delete the collected data according to the lifecycle in section 8 (aggregates are anonymous).
• Make available the information needed to demonstrate compliance.

5. Sub-processors

The Controller authorises the Processor to engage the following sub-processors. We will inform Controllers of intended changes and they may object on reasonable data-protection grounds.

Sub-processor	Purpose	Location
Infomaniak Network SA	Hosting, data storage and e-mail delivery	Switzerland
Stripe, Inc. / Stripe Payments Europe	Payment processing (billing data only)	EU / USA, with safeguards

Geolocation uses a local MaxMind GeoLite2 database; no visitor data is transmitted to MaxMind.

6. International transfers

Visitor and account data is stored in Switzerland. Where a sub-processor (e.g. Stripe) processes data abroad, it is covered by appropriate safeguards such as EU standard contractual clauses or recognised adequacy.

7. Audit

The Processor makes available, on reasonable request, the information needed to demonstrate compliance with this DPA, and allows for and contributes to audits that are proportionate and respectful of confidentiality and other customers' data.

8. Data lifecycle after the service ends

On cancellation, collection stops at the end of the period and collected data is deleted after the retention window. On non-payment, collection continues for a grace window, then stops, and data is deleted after a longer window. "Protected" sites are exempt at the Controller/administrator's request. Billing records are kept as required by law.

9. Liability and governing law

Liability under this DPA follows the Terms of Service. This DPA is governed by Swiss law, place of jurisdiction Lugano.

10. Clause for your own privacy policy

You should reference AlpStats.ch in the privacy policy of your website. You can copy the text below: