Privacy policy
This version describes the planned operation of the Swiss website. The final legal review of provider details, contracts, transfers and retention periods is still pending.
1. Controller and contact
The company identified for this website is World Automatics d.o.o., Župečja vas 6A, 2324 Lovrenc na Dravskem polju, Slovenia. Send questions about the processing of your data to [email protected]. The final regional responsibility will be confirmed during the legal review.
2. Inquiries, configurations and email
When you send an inquiry, we process your name, required email address and other details you provide, such as company, optional phone number, city and message. Configurator inquiries include your chosen configurations and preview images. We also store market, language, receipt time and delivery status. This allows us to receive and later handle your non-binding expression of interest.
Sales in Switzerland have not started. We are not accepting orders or providing individual offers or personal replies. Any automated acknowledgment enabled later confirms receipt only; it is neither acceptance of an order nor a newsletter.
Internal notifications are sent through the business GoDaddy/Titan email account. Brevo is not used in the selected delivery setup. Business messages are also collected in a connected Google Gmail account. Contact details, messages and attachments may therefore be processed by these providers.
3. Storage, backups and deletion
Inquiries, configurations and preview images are stored in an access-restricted database on our server, outside the public website directory. Daily backups are created on the same server. Delivery monitoring reports aggregate error counts without contact details or message contents. Uncertain delivery is not automatically repeated as a new inquiry.
The intended retention rule deletes unprocessed inquiries received before sales start twelve calendar months after the actual sales start. Automatic deletion for Swiss inquiries remains disabled until the actual Swiss start date is recorded. Active business cases must be explicitly protected. Separate periods must be set for inquiries received after sales start and active cases.
Daily database backups are removed after 90 days when a current backup has passed an integrity check. Deleted data may remain in older copies until this period expires. The deletion policy must be reapplied after restoration. This automation does not delete business messages from GoDaddy/Titan or Gmail; retention periods for those messages and other logs remain subject to final review.
4. Your choice and functional browser storage
You can accept or reject optional analytics and change your decision through the privacy settings on this page. Google Analytics, Umami and Cloudflare Web Analytics are not loaded without consent. Rejecting analytics does not restrict the inquiry form or configurator.
Your choice and its timestamp are stored locally under flora_analytics_consent_v1. Configurations you choose to save are stored under sopkomat_saved_configs. Passing a selected model to the configurator uses session storage. The language of the Swiss site follows the selected page URL. Saved configurations and consent choices currently have no automatic expiry and remain until overwritten or website data is cleared; session storage ends with the browser session.
When you withdraw consent, we stop further analytics and remove Google Analytics cookies accessible to this website. Withdrawal does not automatically erase data already transmitted.
5. Optional website analytics
With your consent, Google Analytics 4, self-hosted Umami and Cloudflare Web Analytics measure page views, traffic sources, campaign attribution, time spent, scroll depth and interactions with navigation, models, configurator and forms. Form measurements include starting, attempting submission, errors, abandonment and successful receipt. Market and language distinguish Swiss usage from other regional websites. Rejection and technical restrictions prevent complete measurement of every visit.
Our event logic does not send names, email addresses, phone numbers or form messages to analytics services. Page URLs and referrers are sanitised for Google Analytics and Umami; arbitrary URL parameters and fragments are removed. External referrers are limited to the source domain. Campaign identifiers must not contain personal data. Session recordings are not enabled.
Google Analytics may use cookies and online identifiers. Google Signals and advertising personalisation are disabled in our integration. According to their providers, Umami and Cloudflare Web Analytics operate without analytics cookies; we still load them only after consent. Cloudflare Web Analytics is omitted where the URL context cannot be safely cleared by our checks.
6. Hosting, security and providers
Hosting and infrastructure process technically necessary data such as IP address, request time, requested page and browser details to provide, secure and troubleshoot the site. Cloudflare also acts as infrastructure in front of our server. This processing is separate from optional web analytics and does not fully stop when analytics is rejected.
Providers include hosting, Cloudflare, Google for Analytics and Gmail, and GoDaddy/Titan for email. Data may be processed outside Switzerland and the European Economic Area. Exact provider entities, server locations, recipient countries, contracts, transfer safeguards, cookie lifetimes and analytics retention settings remain to be documented during the final legal review. This version does not confirm unverified contracts or safeguards.
7. Applicable law and your rights
The final legal review will consider Swiss data protection requirements and the EU General Data Protection Regulation where applicable. The final allocation of legal bases for inquiries, pre-sales retention, security and optional analytics is still pending.
Subject to applicable law, you may request access, correction and deletion, and where applicable restriction, portability or objection to processing. You may withdraw consent for future processing and contact a competent data protection authority. Contact: [email protected].
8. Provider information
The links below provide further information about the services used. They do not replace review of our actual setup.
Updated: 9 October 2026 - version for final legal review