Privacy Policy
How we process data and protect your privacy rights
We treat your data the way we want ours treated: securely, sparingly, and transparently.
Last reviewed: 7 September 2026.
1. Controller
GlasBox Studio is operated by Ruta Group, owner Kacper Ruta. We determine the purposes and means of processing on this website.
Ruta Group, Werkstrasse 11 (Studio / Office), 6102 Malters
Switzerland
info@glasbox.ch
2. Hosting and technical logs
The website and our chat service run on infrastructure provided by Infomaniak in Switzerland. GlasBox processes the data in its own environment. Infomaniak provides the hosting infrastructure.
Technical logs contain information needed for security and troubleshooting, such as the request, IP address, browser and timestamp. Logs of website, chat and form requests are retained for 14 days. This retention period is separate from the period for enquiries received by email.
3. GlasBox Chat
GlasBox Chat is an AI assistant. Your messages and a session identifier are sent to our server to generate a response and keep the conversation connected. Processing takes place in our environment on Infomaniak infrastructure in Switzerland.
The server proxy passes requests to our chat service. A proxy does not anonymise the text: a name, email address or other personal detail you enter remains personal data. Please limit messages to the information needed for your enquiry.
The local browser identifier glasbox_sid links messages to a session. It remains in browser storage until you delete the site data; it does not contain the conversation text. The 14-day server-log period does not automatically delete this browser identifier.
Before a chat enquiry is submitted, the chat shows the contact details and request for your confirmation. Confirmed enquiries received by email are retained for 5 years. Technical request logs are retained for 14 days.
4. Browser storage and optional analytics
We save functional preferences in your browser: theme (glasbox_theme), language (glasbox_lang), service and detail view (glasbox_offer_mode, glasbox_view_mode), blog text size (glasbox-blog-text-size), chat identifier (glasbox_sid) and whether the introduction has been shown (gb_glass_intro_v1). These localStorage entries remain until the site data is deleted or the preference is changed. gb_language_glass_intro_seen_v1 uses sessionStorage and ends with the browser tab session.
We also store your analytics and marketing decisions (glasbox_analytics_consent, glasbox_marketing_consent). Marketing cookies are currently not in use. You can reset the decisions on the cookie settings page.
Google Analytics 4 is loaded only after analytics consent. It measures website use so we can improve content and navigation. Google receives usage and device information; its processing can take place outside Switzerland, including the United States. Consent to analytics is separate from the Swiss hosting of our website and chat. We do not send form field values or chat messages to Analytics.
According to Google, GA4 does not log or store individual IP addresses. Network requests still transmit an IP address to the service; this is not a promise that all analytics data is anonymous. See Google’s explanation of GA4 data processing. Refusing analytics leaves the website and contact functions available.
5. Contact form and email enquiries
We process the contact details, request, selected service and any attachments you submit to answer the enquiry and prepare the next step. Transfer from the website is encrypted using HTTPS. Enquiries are delivered to GlasBox by email; our hosting and email infrastructure is provided by Infomaniak in Switzerland.
Form request logs are retained for 14 days. Enquiries and leads in the mailbox are retained for 5 years, then deleted unless a specific legal retention obligation applies to the resulting business correspondence. Access is limited to those handling the enquiry. Sending a form does not subscribe you to a newsletter.
We reply personally within 24 hours. The reply clarifies your need, any missing information and the appropriate next step; the form does not generate a binding quotation.
6. Your rights and contact
You may request information about your personal data, its origin, purposes and recipients, and request correction or deletion under the applicable data protection rules. You may also withdraw optional analytics consent at any time. Deletion requests are assessed against any applicable retention obligations.
Contact info@glasbox.ch. For guidance on Swiss data protection, see the Federal Data Protection and Information Commissioner.