Privacy Policy

About us

This Privacy Policy explains how we process and protect your personal data when you use this website or the services offered through thesalesplaybook.com (together, “our services”).

The website is operated by SalesPlaybook AG, Badenerstrasse 114, 8952 Schlieren, Switzerland (“the company”, “we”, “our” or “us”). The company is the controller for the processing activities described in this policy.

Unless otherwise defined, terms used in this policy have the same meaning as in the Swiss Federal Act on Data Protection (FADP) or the EU General Data Protection Regulation (GDPR).

Privacy contact: [email protected]
Address: Badenerstrasse 114, CH-8952 Schlieren, Switzerland

1. Personal data we collect

When you use our services, we may collect or receive personal data for purposes connected with our business operations. This includes:

Usage data, such as pages viewed and aggregated reach statistics
Contact data, such as name, address, phone number and email address
Login details, such as username and session information
Payment data, such as invoice details and account information
Application data, such as CVs and motivation letters
Request details, such as the content of contact requests and the figures you enter in our calculators
Website visitor data, such as IP address, log files, browser information and referrer
Business-related data, such as company, role and, for bookings, revenue information

You are not obliged to provide personal data. Please note, however, that some services cannot be provided if the necessary data is not supplied.

2. How we collect personal data

We collect data directly and indirectly.

Directly

Through our website and electronic communication
When you use our services or enter into a contract with us
When you fill in a form, submit a request or use one of our calculators
When you apply to SalesPlaybook
When you book an appointment, including a Launchpad booking

Indirectly

From public sources, such as commercial registers or internet research
From external service providers, as described in section 5
Through analytics tools and embedded services, where you have consented

3. Legal bases and purposes of processing

The legal basis for processing depends on the data collected and the respective purpose.

Contract performance: To fulfil pre-contractual or contractual obligations: handling enquiries, providing our services, account setup, invoicing and recruitment.
Consent: Where you have expressly consented: optional analytics, external media and marketing communication. Consent can be withdrawn at any time with effect for the future.
Legitimate interests: Technically necessary tools, website operation, security, quality assurance and further development of our services, provided your fundamental rights do not override these interests.
Legal obligations: Compliance with applicable regulations, retention obligations, authority requests and enforcement of legal claims.

4. Retention periods

We retain personal data for as long as necessary for the relevant processing purpose or as required by statutory retention obligations. After that period, data is deleted or fully anonymised.

Specific periods for website-related services:

Analytics raw data (Matomo): maximum 13 months
Cookie settings stored in your browser: maximum 12 months, or until you delete them or withdraw your consent
Enquiries and the associated contact data in our CRM: for as long as needed to handle your enquiry and to maintain the business relationship, then deleted unless statutory retention obligations apply
Application documents: up to 6 months after completion of the recruitment process

5. Recipients of personal data

We engage third-party companies and service providers to support the operation of our services. They access your data only to the extent required for their tasks and are contractually obliged to comply with data protection standards.

Categories of service providers:

IT and hosting providers
CRM and customer communication providers
Payment providers and banks
Accounting, tax and legal advisors
Analytics providers, only where there is a legal basis
Providers of embedded media, where you have consented
Recruitment platforms, for job applications

The following providers are engaged for the operation of this website:

Hosting: Provider: Hostinger Global S.à r.l., 6 Avenue Pasteur, L-2310 Luxembourg
Purpose: Operation of this website, of our analytics instance and of our content management system on our own server environment.
Server location: Frankfurt, Germany (EU). Together with the provider's seat in Luxembourg, the entire hosting chain stays within the EU — no third-country transfer.
Basis: data processing agreement pursuant to Art. 28 GDPR.
CRM: Provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA
Purpose: Processing of enquiries submitted through our forms and management of the customer relationship. Details in section 5a.
Third country: USA — HubSpot is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework; see section 6.
HubSpot privacy policy:legal.hubspot.com/privacy-policy
Recruitment: Provider: JOIN Solutions AG (join.com), Eichenstrasse 2, 8808 Pfäffikon, Switzerland
Purpose: Receiving and managing job applications. You only reach this platform if you actively follow one of our job links.
Third country: none — provider based in Switzerland.

5a. Contact forms, calculators and appointment booking

You can send us an enquiry through the forms on this website, request a callback, unlock a calculator result or book an appointment. Every submission is voluntary and requires your active confirmation.

Enquiries and callbacks: Data: the details you enter — depending on the form your email address, name, phone number and your message — together with the page from which you sent the enquiry. If you used one of our calculators beforehand, the values you entered and the result calculated from them are sent along with the enquiry so that we can respond to it in context.
Purpose: Answering your enquiry and preparing a possible working relationship.
Recipient: HubSpot, Inc. as our CRM provider — see section 5.
Legal basis: your consent and pre-contractual measures (Art. 6(1)(a) and (b) GDPR / Art. 31 FADP).
Appointment booking: Data: the details you provide when booking, such as name, business email address and company, together with the appointment itself.
Purpose: Arranging and holding the appointment you requested.
Note: Our booking calendar is embedded from HubSpot and is only loaded once you have allowed external media — see section 10.2.
Legal basis: pre-contractual measures and consent (Art. 6(1)(b) and (a) GDPR / Art. 31 FADP).
Protection against misuse: Purpose: Our forms contain a field that stays invisible to you, and we limit how many submissions can be sent from one IP address per minute. Both exist solely to block automated submissions.
Retention: The counter is kept in the server's working memory for a few minutes and is not stored permanently.
Legal basis: legitimate interests in the security of our systems (Art. 6(1)(f) GDPR / Art. 31 FADP).

6. Data transfers to third countries

We and our service providers may transfer personal data to countries outside Switzerland, the EU or the EEA. In such cases, we ensure an adequate level of protection through:

Adequacy decisions by the Swiss Federal Council or the European Commission. For certified providers in the USA these are the EU-U.S. Data Privacy Framework (in force since 10 July 2023) and the Swiss-U.S. Data Privacy Framework (in force since 15 September 2024).
EU Standard Contractual Clauses (SCCs), which we additionally agree with our US providers so that the transfer remains safeguarded even if a certification lapses.
Binding corporate rules or equivalent safeguards

The US providers we use for this website — Google, HubSpot and Vimeo — participate in the applicable Data Privacy Frameworks. Should a transfer to a third country ever take place without an adequacy decision and without suitable safeguards, there would be a risk that authorities in that country could access the transferred data and that your rights as a data subject could not be enforced. We do not carry out any such transfers for this website.

6a. EU representative (Art. 27 GDPR)

SalesPlaybook AG is based in Switzerland and also directs its services at persons in the EU and the EEA.

Data subjects in the EU and the EEA can contact us directly at [email protected] on all matters concerning the processing of their personal data and the exercise of their rights. We respond to such enquiries in the same way as enquiries from Switzerland.

7. Disclosure of data

We may disclose your personal data where this is necessary:

To comply with a legal obligation or respond to authority requests
To protect the security of our website and defend our rights
To prevent or investigate possible misconduct
In connection with a corporate transaction, such as a merger or acquisition, where legally permitted

8. Data security

We use appropriate technical and organisational security measures to protect your data against loss, misuse, unauthorised access and unauthorised disclosure. We continuously adapt our measures to technological developments.

Our employees and engaged service providers are bound by confidentiality and receive only the data access required for their respective tasks.

Please note that no method of transmission over the internet or electronic storage is 100% secure. We recommend using antivirus software and a firewall.

9. Your rights

You may exercise your rights by contacting [email protected]. We reserve the right to verify your identity before processing a request.

Access: you may request a copy of the personal data we store about you.
Rectification: you may request correction of inaccurate or incomplete data.
Erasure: you may request deletion of data if it is no longer needed for the original purpose or was processed unlawfully.
Restriction of processing: under certain conditions, you may request that we restrict the processing of your data.
Data portability: you may request that we transmit your data in a commonly used format to you or another controller, where processing is based on consent or contract.
Objection: where we process your data based on legitimate interests, you may object for reasons arising from your particular situation. We will stop processing unless compelling legitimate grounds prevail.
Withdrawal of consent: consent can be withdrawn at any time with effect for the future, without affecting the lawfulness of prior processing. You can change your choice about analytics and external media at any time in the cookie settings in the footer of this website.
Complaint with a supervisory authority: you have the right to lodge a complaint with a data protection supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern, [email protected]. A list of EU authorities is available at edpb.europa.eu.

10. Cookies and tracking

A cookie is a small text file stored on your device. Similar technologies include web storage (localStorage/sessionStorage), tags and pixels.

This website uses technically necessary technology based on legitimate interests. All optional services, especially analytics and external media, are activated only after your express consent. You can change or withdraw your choice at any time: . The same control is available in the footer of every page.

Where data is transferred to third countries in this context, section 6 of this Privacy Policy and the risks associated with third-country transfers apply.

The following entries are set by us and stay in your browser. They are not transmitted to our servers, contain no advertising identifiers and cannot be used to recognise you on other websites.

Your privacy choice: Key:sp_cookie_consent_v1 (localStorage)
Purpose: Stores which categories you allowed, so that we do not have to ask again on every page.
Stored data: selected categories (yes/no), the time of your decision and a version number of the settings.
Retention: a maximum of 12 months, after which we ask again. You can delete the entry at any time through the cookie settings or your browser.
Legal basis: legitimate interests in documenting your choice (Art. 6(1)(f) GDPR / Art. 31 FADP).
Display of our notices: Keys:sp_engage_ms, sp_engage_shown, sp_engage_interest, sp_engage_converted (sessionStorage), sp_engage_done, sp_engage_dismissals (localStorage)
Purpose: We occasionally offer a callback or a matching resource. These entries note that a notice has already been shown or closed and which topic area of the website it related to, so that the same notice is not shown to you repeatedly.
Transmission: The entries stay in your browser. Only if you then send us a form is the topic area transmitted together with your enquiry, so that we can assign it correctly.
Retention: the session-related entries end when you close the tab; the note about a closed notice expires after seven days.
Legal basis: legitimate interests in a needs-based presentation of our website (Art. 6(1)(f) GDPR / Art. 31 FADP).

10.2 Optional tools (only after consent)

Google Tag Manager — management of analytics tags: Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; services may also be provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Purpose: Technical management and controlled delivery of analytics tags used on this website. The container itself does not create user profiles; the tags configured in it determine which further processing takes place.
Consent control: Before you make a choice, all analytics and advertising consent signals are set to “denied”. If you allow analytics, only analytics storage is changed to “granted”; advertising storage, advertising user data and ad personalisation remain denied. If you withdraw consent, analytics storage is denied again and Google Analytics cookies accessible to this website are removed.
Data processed: When the container is requested, technical connection data such as IP address, browser information, page URL, timestamp and consent status may be transmitted to Google. Tags enabled after consent may process additional usage and event data as described by the relevant service.
Third country: Processing by Google LLC in the USA cannot be excluded. Transfers are safeguarded by the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and, where applicable, EU Standard Contractual Clauses.
Legal basis for analytics: consent (Art. 6(1)(a) GDPR / Art. 31 FADP).
Google privacy information:policies.google.com/privacy
Matomo — reach measurement we host ourselves: Operated by: SalesPlaybook AG, self-hosted on matomo.thesalesplaybook.com. The data is not passed on to any third party and is not combined with data from other sources.
Purpose: Data-minimised measurement of how our content is used and which consent-based campaign, high-intent and conversion paths help us improve it.
Data processed: Sanitised page paths, language and service category, interaction events such as pricing views, booking intent, successful form submissions and downloads, plus campaign parameters and the referring host where available. Event names never contain names, email addresses or company names.
Session attribution: After analytics consent, the first landing page, campaign parameters, referring host and last high-intent page are kept in session storage until the tab is closed. If you submit a form, this context is sent with the enquiry to HubSpot; it is not used as a Matomo user ID.
Cookies: Once you consent, Matomo sets its own cookies (_pk_id, _pk_ses) on our domain. They let us recognise a returning visit as one continuous journey instead of counting it as a new person each time. Lifetime: a maximum of 12 months — never longer than your consent. They are deleted when you withdraw it.
How we keep this limited:
— The cookies hold nothing but a random identifier, no personal details.
— IP addresses are shortened before they are stored.
— No user profiles are created and no data is used for advertising.
— The measurement data is not linked to your contact record in our CRM.
— Matomo is loaded only after your consent and is switched off again when you withdraw it.
Retention: a maximum of 13 months, then automatic deletion.
Server location: Frankfurt, Germany (EU) — no third-country transfer.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 FADP).
Dealfront Leadfeeder — company visitor recognition: Provider: Dealfront Finland Oy, part of Dealfront Group GmbH.
Purpose: Understanding which companies visit our website and which content indicates business interest.
Data processed: IP address and session information such as pages viewed, time and date, visit duration and traffic source. Dealfront compares this information with a database of known companies and enriches a match with company information such as name and industry.
Activation: The tracker is loaded only after you allow analytics. It may then use first-party cookies to recognise repeat visits. If you withdraw consent, we stop loading the tracker on subsequent page views and remove Leadfeeder storage accessible to this website.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 FADP).
Dealfront privacy information:dealfront.com/privacy-center
Vimeo — external media: Provider: Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA
Purpose: Embedding and playback of videos in customer stories and case studies. Videos are not loaded automatically; a connection to Vimeo is established only once you allow external media or actively load a video.
Data processed by Vimeo: IP address, browser information and your interactions with the player. We request playback with the “Do Not Track” option enabled.
Third country: USA — Vimeo is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. The transfer is therefore based on the adequacy decisions of the European Commission and the Swiss Federal Council; EU Standard Contractual Clauses apply in addition.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 FADP).
Vimeo privacy policy:vimeo.com/privacy
HubSpot Meetings — appointment calendar: Provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA
Purpose: Display of our bookable appointments. The calendar is not loaded automatically; a connection to HubSpot is established only once you allow external media.
Data processed by HubSpot: IP address, browser information and your interactions with the calendar. Within the embedded calendar HubSpot sets its own cookies (including hubspotutk, __hstc, __hssc and __hssrc) in order to follow the booking process.
Third country: USA — HubSpot is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework; EU Standard Contractual Clauses apply in addition.
Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 FADP).
HubSpot privacy policy:legal.hubspot.com/privacy-policy

11. Social media and third-party links

Our website may contain links to websites or apps not operated by us. The respective providers are responsible for their own privacy practices.

We maintain online presences on social networks to communicate with customers and interested parties. Where we transfer personal data from these presences into our own systems, we are independently responsible for that processing (legal basis: pre-contractual measures and contract performance).

LinkedIn:LinkedIn Privacy Policy
YouTube:Google/YouTube Privacy Policy

At the end of each page we offer links that open the page you are currently on in a search service or AI assistant of your choice. These are ordinary links: nothing is transmitted until you click one, and all that is passed on is the address of the page. The processing is then the responsibility of the provider you selected.

12. Automated decision-making

We do not use automated decision-making or profiling procedures that have legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect current legal requirements or changes to our services. Material changes will be communicated on this page. The “last updated” date at the beginning of the policy indicates when it was last updated. We recommend reviewing this page regularly.

14. Contact

If you have questions about this Privacy Policy or want to exercise your rights, please contact:

Email: [email protected]
Postal address: SalesPlaybook AG, Badenerstrasse 114, CH-8952 Schlieren, Switzerland