Cookie Policy
Legal
Last updated / Jul 15 / 2025 · Version 1.0
1. Introduction
This website is operated by W&W Global Marketing Group GmbH ("W&W"), acting on behalf of BeskarStaff. We use cookies and similar technologies (such as pixel tags, local storage, and IndexedDB) to operate our website, provide core functionality, and — with your consent — analyse usage patterns, record browsing sessions, and improve our services.
This Cookie Policy explains what cookies are, how we use them, what choices you have, and your rights under applicable law. It should be read together with our Privacy Policy.
This policy is designed to comply with the Swiss Federal Act on Data Protection (FADP, SR 235.1), Art. 45c of the Swiss Telecommunications Act (TCA, SR 784.10), the EU General Data Protection Regulation (GDPR, Regulation 2016/679), and Art. 5(3) of the ePrivacy Directive (Directive 2002/58/EC as amended by Directive 2009/136/EC).
2. What Are Cookies and Similar Technologies
A cookie is a small text file placed on your device by a website you visit. Cookies allow the site to remember your actions and preferences (such as language or display settings) over a period of time, so you do not have to re-enter them each time you return.
We also use similar technologies including local storage (which stores data in your browser without an automatic expiry date) and session storage (which is cleared when you close the browser tab). Under the EDPB Guidelines 2/2023 on the Technical Scope of Art. 5(3) of the ePrivacy Directive, local storage and session storage fall within the same rules as cookies. References to "cookies" in this policy include these similar technologies unless stated otherwise.
3. Cookie Categories
We classify cookies into five categories based on their purpose. Only strictly necessary cookies are placed without your consent. All other categories require your prior opt-in consent before any cookies are set, scripts are loaded, or tracking technologies are activated.
3.1 Strictly Necessary
These cookies are essential for the website to function. They enable core features such as page navigation, secure access, language display, and recording your cookie consent preferences. The website cannot operate properly without them. No consent is required.
Legal basis (EU): Art. 5(3) ePrivacy Directive — strictly necessary exemption. For any personal data processed through these cookies: Art. 6(1)(f) GDPR — legitimate interest of the controller in operating a functional, multilingual website.
Legal basis (Switzerland): Art. 45c lit. b TCA (SR 784.10) — the operator must inform users about data processing and its purpose and inform them of their right to refuse. For functionally necessary cookies, the right to refuse is satisfied by the option to leave the website or adjust browser settings; Art. 6(2) FADP — good faith and proportionality.
3.2 Functional
Functional cookies enable enhanced features such as live chat support and demo booking. They are only activated after you give consent.
Legal basis: Art. 6(1)(a) GDPR — consent; Art. 45c lit. b TCA — information and right-to-refuse obligation satisfied through our consent mechanism.
3.3 Analytics
Analytics cookies help us understand how visitors interact with our website by collecting pseudonymised information about pages visited, time spent, and navigation paths. We use this data exclusively to improve our platform. Analytics data is not used to identify individual users or for advertising purposes. These cookies are only activated after you give consent.
Legal basis: Art. 6(1)(a) GDPR — consent; Art. 45c lit. b TCA — information and right-to-refuse obligation satisfied through our consent mechanism.
3.4 Marketing
Marketing cookies enable personalised communication features. On our website, this category controls the loading of the Chatwoot live chat widget when used for proactive outreach. No separate marketing cookies are set — this category works in conjunction with the Functional category to determine whether the Chatwoot widget loads. These cookies are only activated after you consent to both the Functional and Marketing categories.
Legal basis: Art. 6(1)(a) GDPR — consent; Art. 45c lit. b TCA — information and right-to-refuse obligation satisfied through our consent mechanism.
3.5 Session Recording
When you consent to this category, we use PostHog Session Replay to understand how visitors interact with our website. This section provides detailed information about the technology, in line with emerging regulatory guidance on session replay tools.
What is recorded: Session Replay captures changes to the page structure (DOM mutations), mouse movements, clicks, scrolling behaviour, and page navigation. It does not take screenshots or video recordings of your screen — it reconstructs your browsing experience from structural page changes.
What is masked and excluded: All text input fields (including search fields, form inputs, and text areas) are masked by default — the actual text you type is replaced with asterisks before it leaves your browser and is never transmitted to our servers. Password fields are always masked regardless of configuration. We apply the PostHog ph-no-capture CSS class to additional sensitive interface elements where appropriate. Network request payloads are not recorded by default.
Purpose: Session recordings are used exclusively to identify usability issues, diagnose errors, and improve the user experience. Recordings are never used for advertising, profiling, or automated decision-making.
Retention: Session recordings are retained for a maximum of 3 months and then automatically deleted.
Access controls: Access to session recordings is restricted to authorised BeskarStaff team members on a need-to-know basis.
Sampling: Not all sessions are recorded. We apply session sampling to limit the volume of recordings to what is necessary for our improvement purposes.
Your rights: You may request deletion of any session recording associated with your visit by contacting us at privacy@beskarstaff.com. We have conducted a Data Protection Impact Assessment (DPIA) for our use of session recording technology, as required by Art. 35 GDPR.
Legal basis: Art. 6(1)(a) GDPR — consent; Art. 45c lit. b TCA — information and right-to-refuse obligation satisfied through our consent mechanism.
4. Cookie and Storage Declaration
The following tables list all cookies and similar technologies used on this website, organised by category.
4.1 Strictly Necessary
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| locale | BeskarStaff (first-party) | Stores your preferred language (EN, DE, FR, IT) so the website displays content in the correct language. Essential for operating a multilingual website serving users across Switzerland and the EU. | HTTP Cookie | Session |
| cookie_consent_id | BeskarStaff (first-party) | Stores a unique identifier linking to your cookie consent record on our server. Contains no personal data — only a random identifier used to respect your consent choices across visits. | Local Storage | Persistent (until cleared by user) |
We do not use Google Analytics, Google Tag Manager, Meta Pixel, or any third-party advertising network cookies or scripts.
4.2 Functional Cookies
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| cw_conversation | BeskarStaff (first-party, via self-hosted Chatwoot) | Stores the active conversation identifier to resume your chat if you navigate between pages. | HTTP Cookie | Up to 1 year |
| Cal.com session | BeskarStaff (first-party, via self-hosted Cal.com) | Manages session data for the demo booking widget, including slot reservation and preventing duplicate bookings. | HTTP Cookie | Session |
4.3 Analytics
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| ph_<project_key>_posthog | PostHog (Cloud EU — Frankfurt, Germany) | Stores a pseudonymous distinct user ID and session ID for product analytics. Used to understand how visitors navigate the website, which pages are viewed, and which features are used. This same cookie also supports session recording (Section 3.5) when that category is separately consented to — declining session recording disables replay functionality server-side even though this cookie persists for analytics. | HTTP Cookie | 1 year |
| ph_<project_key>_posthog | PostHog (Cloud EU — Frankfurt, Germany) | Stores additional analytics data including feature flags, super properties, queued events, UTM parameters, referrer data, and SDK configuration. The cookie (above) contains only the distinct_id and session_id; all other data is held in local storage. | Local Storage | Persistent (until cleared by user) |
4.4 Marketing
This category does not set separate cookies. It controls whether the Chatwoot live chat widget (see Section 4.2) is loaded. The widget activates only when both the Functional and Marketing consent categories are enabled. When Marketing consent is not given, the Chatwoot widget does not load and no chat-related cookies are set.
4.5 Session Recording
Session recording uses the same ph_<project_key>_posthog cookie and local storage items described in Section 4.3. No additional cookies or storage items are created for session recording. When you consent to session recording, PostHog activates its Session Replay feature using the existing session identifier. When you decline or withdraw consent, session recording is disabled server-side — the analytics cookie is not affected. See Section 3.5 for full details on what session recording captures, what is masked, and your rights regarding recordings.
5. Your Consent and How to Manage It
When you first visit our website, a cookie consent banner appears offering you three options: Accept All (enables all cookie categories), Reject All (enables only strictly necessary cookies), or Customize (select individual categories). No non-essential cookies are set, scripts are loaded, or tracking technologies are activated before you give your consent.
You can change or withdraw your consent at any time by clicking the "Cookie Settings" link in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).
Your consent preferences are stored securely on our server and linked to an anonymous identifier in your browser's local storage (cookie_consent_id). This allows us to respect your choices across visits and to demonstrate compliance with applicable consent requirements (Art. 7(1) GDPR). Our consent records include the timestamp, the policy version displayed, the specific categories accepted or rejected, and the method of consent.
Consent validity: Your consent preferences are valid for 6 months. After this period, we will ask you to confirm or update your choices. This aligns with the CNIL's recommended maximum consent duration.
6. Browser Settings and Privacy Signals
In addition to our cookie consent controls, you can manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling strictly necessary cookies may prevent the website from functioning correctly.
For instructions on managing cookies in common browsers, please visit: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge.
We are monitoring developments around Global Privacy Control (GPC), a browser-level signal that communicates your privacy preferences. While GPC is not yet legally mandated under GDPR or Swiss law, we are evaluating support for this standard in a future update.
7. Data Processing and International Transfers
All cookies and similar technologies on this website are processed within the European Economic Area (EEA) or Switzerland. We use the following infrastructure:
PostHog (product analytics and session recording): PostHog Cloud EU, hosted on AWS eu-central-1 in Frankfurt, Germany. All event data is stored exclusively within the EEA (AWS eu-central-1, Frankfurt, Germany). No bulk data exports occur outside the EEA. PostHog Inc. is a US-incorporated company; limited operational access by PostHog personnel from outside the EEA may occur for maintenance and support purposes. This access is protected by PostHog's certification under the EU-US Data Privacy Framework (Commission adequacy decision of 10 July 2023) and the EU Standard Contractual Clauses (Commission Implementing Decision 2021/914) incorporated into our Data Processing Agreement. PostHog's privacy policy is available at posthog.com/privacy.
Chatwoot (live chat): Open-source software self-hosted on our own infrastructure within the EU with no external data transmission. No data is sent to Chatwoot Inc. or any external server — all chat data remains under our direct control. Chatwoot is not a third-party data processor.
Cal.com (demo booking): Open-source software self-hosted on our own infrastructure within the EU with no external data transmission. No data is sent to Cal.com Inc. or any external server — all booking data remains under our direct control. Cal.com is not a third-party data processor.
All cookie and analytics data is stored within the EEA or Switzerland. Chatwoot and Cal.com are self-hosted on our own EU infrastructure with no external data transmission. For PostHog, see the disclosure above regarding potential operational access from outside the EEA.
8. Your Rights
Under the GDPR and the FADP, you have the following rights in relation to personal data collected through cookies and similar technologies:
The right to access personal data collected through cookies (Art. 15 GDPR; Art. 25 FADP). The right to request rectification of inaccurate data (Art. 16 GDPR; Art. 32 FADP). The right to request erasure of your data, including specific session recordings (Art. 17 GDPR; Art. 32 FADP). The right to restrict processing (Art. 18 GDPR). The right to data portability (Art. 20 GDPR; Art. 28 FADP). The right to object to processing based on legitimate interest (Art. 21 GDPR; Art. 32 FADP). The right to withdraw consent at any time (Art. 7(3) GDPR) — via the Cookie Settings link in the footer. The right to lodge a complaint with a supervisory authority.
For Swiss residents, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). For EU/EEA residents, you may contact the supervisory authority in the Member State of your habitual residence or place of work.
To exercise any of these rights, please contact us at privacy@beskarstaff.com.
9. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our use of cookies or applicable legal requirements. Material changes will be communicated through a prominent notice on our website. Where changes affect existing consent categories, we will request fresh consent. The "Last updated" date at the top of this page indicates when this policy was last revised.
10. Contact Us
If you have questions about this Cookie Policy or our use of cookies, please contact us:
W&W Global Marketing Group GmbH (acting on behalf of BeskarStaff)
Landis + Gyr-Strasse 1, 6300 Zug, Switzerland
Email: privacy@beskarstaff.com