Privacy
This notice explains which personal data Finavita uses, why we need it and what rights you have. The Swiss Federal Act on Data Protection and, where applicable, the GDPR apply. Last updated: July 2026.
Your information, explained briefly
Visiting this website does not load financial data from the application. You enter your own values only in your account. Find the key answers here and the full notice below.
You enter your own values.
The sections below explain which information is used and for what purposes.
Information and its use →Your information is stored.
The application stores your account information and entered values. Hosting and the database are at the described locations in the EU; technical logs may be processed worldwide.
Storage locations and providers →You can request access or deletion.
Submit your request in the Privacy area of your account. Retention obligations may prevent complete immediate deletion.
Your rights and contact →Website and application
This product website serves static text and images. It does not load data from the financial application and does not use analytics or advertising cookies. Your chosen appearance (System, Light or Dark) may be saved locally in your browser. Requests generate technically necessary connection data at the website host. You only move to the separate application when you open an account link. The sections below explain data processing in the Finavita application.
Controller and contact
The controller is Horizon Technologies GmbH, a limited liability company at Im Rebacher 1, 8118 Pfaffhausen, Switzerland. UID: CHE-110.629.453. CH-ID: CH-020-4028807-6. EHRA-ID: 744470. Send privacy questions to privacy@horizon-flow.app.
Data we use
We use account and profile data, login and security data, contract and subscription data, and the financial values you enter. Depending on your use, this includes accounts, investments, retirement savings, fixed payments and information used for calculations. The data comes from you or is generated when you use Finavita securely.
Purposes and legal bases
We process account, contract and financial data to provide Finavita and perform calculations. Where the GDPR applies, the legal basis is performance of a contract under Article 6(1)(b) GDPR. We use security data and technical logs to prevent misuse and attacks based on our legitimate interest under Article 6(1)(f) GDPR. We process records required by law under Article 6(1)(c) GDPR.
Necessary cookies and local storage
Finavita needs cookies and local storage for login, sessions, security, language settings and operation. The cookie recording that the privacy notice was dismissed remains stored for no more than one year. We currently use no cookies for analytics, advertising or third-party tracking.
Recipients and locations
Finavita runs on Google Cloud Run in the europe-west1 region in Belgium (EU). The MariaDB database and SMTP delivery of necessary account and security messages run on Hetzner infrastructure in Falkenstein, Germany. Technical application and security logs are processed in globally configured Google Cloud Logging buckets. These providers receive only the data they need for their respective service.
International transfers
The Cloud Run application runtime is located in Belgium (EU); the MariaDB database and SMTP delivery run on Hetzner infrastructure in Falkenstein, Germany. The currently globally configured Google Cloud Logging buckets can store log data in data centers worldwide. Further support providers or subprocessors are reviewed and documented before approval. If a service requires a transfer to a country without a recognized level of data protection, it is approved only after the required safeguards have been assessed, contractually agreed and documented. We communicate material changes.
Retention
We store account and financial data while your account exists. After a confirmed account deletion, we delete or anonymize it unless a legal duty requires retention. Contract and compliance records remain stored while statutory retention or limitation periods apply. We keep security logs, privacy requests and legal acceptances only as long as needed for security, processing, evidence or the defence of legal claims.
Your rights
Depending on legal requirements, you may request access, correction, deletion, restricted processing, data portability or object to processing. If we use consent in the future, you may withdraw it at any time for future processing. If you have an account, submit your request in the Privacy section. Without an account, contact privacy@horizon-flow.app.
Complaint to a supervisory authority
You may report a suspected privacy violation to the Swiss Federal Data Protection and Information Commissioner: FDPIC, Feldeggweg 1, 3003 Bern, Switzerland, www.edoeb.admin.ch. Where the GDPR applies, you may also contact a competent data protection authority in the EU or EEA country of your residence, workplace or the suspected violation.
Required and voluntary information
An email address and password are required to create and protect an account. Without them, you cannot use Finavita with a personal account. Your financial information is voluntary. Without the values needed for a feature, some overviews or calculations may be incomplete.
No automated decisions
Finavita does not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Calculations and projections are for your guidance and do not replace personal financial, tax, legal or investment advice.
New purposes and changes
If we intend to use data for a new purpose in the future, we will first inform you about the purpose and legal basis. We update this notice when Finavita, our providers or legal requirements change and document important versions.
Privacy request in your account
If you have an account, submit your request in the Privacy section. This lets us securely associate it with your account. Without an account, contact privacy@horizon-flow.app.
Log in ↗