Privacy Policy

Last updated: July 2026

Welcome to the website of Think To Link Sagl. The protection of your personal data is of fundamental importance to us. This Privacy Policy explains how we collect, use, transmit, and protect your data in accordance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation of the European Union (GDPR).

1. Data Controller

The data controller for the data collected through this website is:

• Company name: Think To Link Sagl
• Registered office: Via Stefano Franscini 10, 6850 Mendrisio (CH)
• Registration number (IDI): CHE-142.775.573 IVA
• Email contact: info@thinktolink.net
• Telephone contacts: +41 78 221 4251 / +39 393 9705412

2. Types of Data Collected

We collect only the data necessary to provide our services and improve your browsing experience:

• Data provided voluntarily by the user: Name, surname, company, telephone number, email address, and content of the message sent via the contact form or via the WhatsApp chat active on the website.
• Browsing data (Cookies and technical data): IP address, server log data, browser type, device information, and site page usage data.

3. Purpose of Processing and Legal Bases

Personal data are processed for the following explicit purposes:

4. Detailed Information on Third-Party Services and Tools Used

Our website uses technological infrastructures, widgets, and analysis services provided by external partners to ensure security, speed, and proper interaction with visitors. The individual services used are listed in detail below:

4.1 Infrastructure, Hosting, and Website Functionality

• WordPress (Self-hosted): The website is developed on the WordPress CMS platform. Being a self-managed version, the data entered into the website are not transmitted to WordPress.org, but remain saved exclusively on the company’s hosting server.
• GoDaddy Web Hosting (GoDaddy Operating Company, LLC): This is the provider of the server space where the website resides. Technical browsing data and server logs (such as anonymized IP addresses, date, time, and browser used) transit through and are protected on GoDaddy’s systems.
  • Legal basis: Legitimate interest in ensuring the delivery, stability, and IT security of the website.
• Bunny CDN (BunnyWay d.o.o.): To speed up the global loading of images and static files on the website, we use the Content Delivery Network by Bunny, based in Slovenia (European Union). Bunny CDN processes the visitor’s IP address solely to route the request to the nearest server, applying automatic anonymization of logs.
  • Legal basis: Legitimate interest in optimizing website performance.

4.2 Data Collection, Forms, and User Interaction

• Contact Form and Elementor Form Widget (Elementor Ltd.): The forms on the website (managed through Elementor’s graphic infrastructure) are used to collect data voluntarily entered by the user (Name, Surname, Email, Phone, Company, and message text) in order to process personalized responses and quotes. The data are stored in the website’s database and sent via email to the Data Controller.
  • Legal basis: Execution of pre-contractual or contractual measures at the user’s request.
• WhatsApp Business Chat Widget (Meta Platforms Ireland Limited): The site integrates a widget that allows users to quickly start a chat with the company on WhatsApp. By clicking the button, the user is redirected to the WhatsApp application. Data relating to the phone number and the conversation are managed directly by Meta Platforms according to its own privacy policy.
  • Legal basis: User consent (expressed through the explicit action of clicking the widget and sending the message).

4.3 Statistics, Tracking, and Content Visualization

• Google Tag Manager (Google Ireland Limited): This service allows the centralized management and implementation of the various tags (scripts) required for the website’s operation. Google Tag Manager does not collect personally identifiable data (it does not store IPs or issue its own tracking cookies) but merely activates other scripts based on the preferences provided by the user.
  • Legal basis: Legitimate interest in the technical optimization of services.
• Google Analytics 4 (Google Ireland Limited): GA4 is used to understand in an aggregate and anonymous form how visitors interact with the website. We have configured the tool with IP address anonymization active by default, ensuring that the collected data are not crossed with other Google services.
  • Legal basis: User consent, optionally provided via the specific cookie banner (active in Google Consent Mode v2).
• Google Fonts (Google Ireland Limited): To ensure a consistent visual experience and optimal layout of the brand’s texts, the website calls upon the Google Fonts character library. The call to download the font only processes the IP address necessary for transmitting the file.
  • Legal basis: Legitimate interest in maintaining the visual identity and readability of the website.

• Google Maps Widget (Google Ireland Limited): A map is integrated within the website pages (e.g., contact section) to facilitate the geolocation of the Mendrisio office. The widget may collect browsing data, place third-party cookies, and track map usage.
  • Legal basis: User consent, conditional on accepting profiling/third-party cookies via the banner.

5. Data Transfer Abroad

Our registered office is located in Switzerland. Switzerland is recognized by the European Union as a country that guarantees an adequate level of personal data protection.
If data are transferred to or stored with third parties (e.g., website hosting, chat tools, or IT services) with servers located outside of Switzerland or the European Economic Area (EEA), we ensure that appropriate legal safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission and the Federal Data Protection and Information Commissioner (FDPIC).

6. Data Retention Period

We retain your personal data only for the time strictly necessary to achieve the purposes for which they were collected, or for the period provided for by applicable legal obligations in fiscal and corporate matters (usually 10 years for Switzerland and Italy). Data linked to simple contact requests or unsuccessful quotes are deleted within 12–24 months.

7. Rights of the Data Subject

In accordance with the FADP and the GDPR, you have the right to exercise the following rights at any time:

• Right of Access: To know what data we are processing and obtain a copy.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data.
• Right to Restriction and Objection: To object to the processing or request its restriction.
• Right to Data Portability: To receive your data in a structured, legible format.
• Withdrawal of Consent: To withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

You can freely exercise your rights by writing to info@thinktolink.net . We will respond to your request as quickly as possible and within the statutory deadlines (maximum 30 days). You also have the right to lodge a complaint with the competent supervisory authority (the FDPIC in Switzerland or the Garante Privacy in Italy).

8. Data Security

We adopt appropriate technical and organizational security measures to protect your personal data from unauthorized access, manipulation, loss, or destruction. The website uses SSL/TLS encryption to protect the transmission of data entered into the forms.