Bucher & Ambühl GmbH ("B&A", "we", "us") builds and operates infrastructure for clients. Every client receives an isolated virtual private server (VPS) hosted in the European Union. We do not share infrastructure between clients. We do not use US-based cloud providers.
All client data is stored on dedicated VPS instances hosted by Hostinger (EU data centers). Each client has their own server, their own database, and their own cloud storage instance. No client can access another client's data. Physical servers are located in the European Union.
We process the following categories of data on behalf of our clients:
Access to client systems is restricted to authorized B&A personnel (Michael Bucher, Andreas Ambühl). Access is logged. Third parties do not have access to client data. We do not sell, share, or monetize client data.
Client data is retained for the duration of the service agreement. Upon termination, client data is deleted within 30 days, unless legal retention requirements apply. Backups are retained for 30 days after deletion.
Daily encrypted backups are stored offsite at a separate EU hosting provider (Infomaniak, Switzerland). Backups are encrypted at rest. Backup retention is 30 days.
All data in transit is encrypted via TLS (HTTPS). VPS disk encryption (LUKS) is available upon request. Backups are encrypted with AES-256.
Under the Swiss Data Protection Act (DSG) and GDPR (where applicable), you have the right to:
We use the following subprocessors to provide our services:
No subprocessor has access to client data directly. All access is mediated by B&A.
For privacy questions or data requests: contact@bucherambuehl.com
Bucher & Ambühl GmbH, Im Fronberg 7, 8172 Niederglatt ZH, Switzerland
Version 1.0 — August 2026