Privacy policy

Last updated: 4 November 2026

This privacy policy explains how personal data is processed when you use contacture – both when booking an appointment and when our customers use the admin area. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller and roles

For bookings, the business named on the booking page (our customer) is the controller. contacture processes booking data on its behalf. Questions about a specific booking are best addressed directly to that business; we forward requests sent to us. When you book an appointment with Moonfield itself, Moonfield is also the controller.

For the admin area (our customers' accounts) and for operating the website, we are the controller.

2. Booking an appointment

When you book an appointment, we process:

• name, email address and – if requested – phone number
• the selected time, time zone and any information you provide voluntarily (note, answers to additional questions)
• technical request data (IP address, time) to prevent abuse

The purpose is to arrange and hold the appointment: confirmation by email, an entry in the host's calendar (see section 4) and contact related to the appointment. The legal basis under the GDPR is the performance of pre-contractual measures or a contract (Art. 6(1)(b)) and our legitimate interest in secure scheduling (Art. 6(1)(f)).

Booking data is kept as long as the customer needs it for the appointment and its follow-up or as required by law. Customers can cancel bookings at any time; their account and all related data are deleted on request.

3. Embedding on websites

Booking pages can be embedded on our customers' websites. The script loaded for this does not read any data from the website, sets no cookies and transmits nothing unless you use the booking. The booking itself runs in an isolated frame directly on contacture.com.

4. Google Calendar

Customers can connect their Google Calendar. contacture then only asks Google when the customer is busy (no titles, attendees or contents of other events) and adds appointments booked through contacture to their calendar, or removes them on cancellation. Your name, email address, the appointment and your information are transmitted to Google for this; Google may send you a calendar invitation. Google may also process data in the USA.

contacture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used solely for scheduling – not for advertising, not sold and not used to train AI models. The access is stored encrypted and can be revoked by the customer at any time in contacture or at myaccount.google.com.

5. Customer accounts (admin area)

For our customers' accounts we process name, email address, a securely hashed password, settings, logo and event types. For sign-in we set one strictly necessary session cookie. We use no other cookies, analytics or advertising services.

Company details that customers enter (registered name, address, contact email, phone, website, imprint link and – if no imprint of their own is linked – register details, management and VAT ID/UID) are published on the customer's behalf on their booking page and in the confirmation and cancellation emails to their guests, so that guests can see whom they are booking with. If these details contain names of people (e.g. for sole proprietorships or managing directors), they are publicly visible. Customers can change or remove them at any time.

6. Servers and logs

contacture runs on servers of Hetzner Online GmbH in Germany or the EU. Requests create technical logs (including IP address, time, requested address, browser). They are used for secure operation and troubleshooting and are overwritten automatically after a short time. Password links and sign-in data are not logged. Backups are kept for 14 days.

7. Emails

We send confirmations and notifications through an email service provider. Data may also be processed outside Switzerland and the EU, in particular in the USA.

8. Recipients and processing abroad

We only share personal data where necessary for the purposes above: with the business you book with, with hosting, email and calendar providers (see above), and with authorities where we are legally required to. For transfers to countries without adequate data protection we ensure appropriate safeguards, in particular standard contractual clauses, where legally required.

Address suggestions: When customers type their business address in the admin area, our server requests suggestions from the Photon service of komoot GmbH (Germany, data from OpenStreetMap) and checks an accepted address there once more when saving. Only the address details typed in are transmitted, not your browser's IP address. Guests using a booking page are not affected.

9. Data security

All connections are encrypted (HTTPS). Calendar access is additionally stored encrypted. We take appropriate technical and organisational measures against loss, misuse and unauthorised access.

10. Your rights

Within the scope of applicable law you have the right to access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with a supervisory authority (in Switzerland: the FDPIC). Contact: hello@moonfield.ch.

11. Automated decisions

We do not make automated individual decisions that have legal effects or similarly significantly affect you.

12. Changes

We may update this privacy policy. The version published on this page applies.

Imprint · Privacy · Terms