Privacy Policy

House of Test GmbH Steinbruchstrasse 3, 5506 Mägenwil, Switzerland

Last updated: 2026-09-14

Who we are

House of Test GmbH is responsible for the personal data described here. We are based in Switzerland and subject to the Swiss Federal Act on Data Protection (revFADP / revDSG). Where we process data about people in the EU or EEA, the GDPR applies as well.

For anything to do with your data, write to nikola.ristic@houseoftest.ch. We answer in writing.

What we collect, and why

When you use the Release Risk Self-Check

You answer 25 statements about how your team ships software, then give us your first name and email address so we can send you the result.

We store your answers, your score, your per-dimension scores, the language you used, the page you came from, and — if you arrived from an ad — the campaign parameters in the link.

Why we may do this: to provide what you asked for. You asked for your score; sending it is performing that request. We also keep the result to understand software quality practice in the Swiss market. That second purpose is our legitimate interest in understanding the market we work in, and you can object to it at any time by writing to us.

When you tick the marketing box

Separately and optionally, you can ask us to send occasional emails about testing practice. That is a free choice, we record when and where you gave it, and you can withdraw it at any time — every email carries an unsubscribe link, and withdrawing is as easy as giving it was.

We do not send you marketing unless you ticked that box. Ticking it does not change what happens to your score.

When you contact us

Name, email, phone number and whatever you write to us, so we can reply and keep track of the conversation. Our legitimate interest in answering people who contact us, and where a contract follows, performance of that contract.

When you visit the website

Standard server and analytics data, plus cookies. What is set depends on the choices you make in the cookie banner. Only strictly necessary cookies are set without your consent.

Who else handles your data

We use these providers. They process data on our instructions, under a data processing agreement, and are not permitted to use it for their own purposes.

  • ‍ProviderHosts the website; stores form submissions
  • Make (Celonis): Moves your submission to the systems below – EU (Frankfurt)
  • monday.com: Our CRM — where your contact record lives – US / Israel
  • Intuit Mailchimp: Mailing list, only if you ticked the marketing box – US
  • Google Workspace: Sends the score email – US / EU
  • Google (reCAPTCHA, Tag Manager, Ads): Spam protection and measurement – US
  • Cloudflare: Spam protection – US
  • LinkedIn: Advertising measurement, only with your consent – US / EU
  • Finsweet: Cookie consent tool – US

Transfers outside Switzerland. Several of these are in the United States. Switzerland has recognised the Swiss–US Data Privacy Framework since 14 August 2024, so transfers to providers certified under it are treated as adequately protected. Where a provider is not certified, we rely on the Standard Contractual Clauses with the Swiss addendum. You can ask us which basis applies to a given provider and we will tell you.

How long we keep it

If you ask us to delete your data we do it sooner, except where the law requires us to keep something.

We keep your self-check result and contact details for as long as we might plausibly still be useful to each other — in practice five years from the last time you were in touch — and then delete them.

If you're on the marketing list, you stay there until you unsubscribe.

A few things have their own clock: our automation logs clear themselves after seven days, and contracts and accounting records have to be kept for ten years under Swiss law.

Ask us to delete your data and we'll do it sooner, apart from anything the law requires us to keep.

‍

Your rights

You can ask us to:

  • tell you what data we hold about you, and give you a copy
  • correct anything that is wrong
  • delete it
  • restrict what we do with it
  • hand it over in a portable format, or send it to someone else
  • stop processing it where we rely on legitimate interest
  • withdraw your consent to marketing, with no effect on what we did before you withdrew it

Write to nikola.ristic@houseoftest.ch. We reply within 30 days and there is no charge.

If you are unhappy with how we handled it, you can complain to the Federal Data Protection and Information Commissioner (FDPIC / EDÖB) in Bern. If you are in the EU or EEA, you can also complain to your national supervisory authority.

Security

We use providers that encrypt data in transit and at rest, and we limit access to the people who need it. No system is perfectly secure, and we will not pretend otherwise — but if something happens that puts your data at risk, we will tell you and the authorities as the law requires.

Children

The self-check and our services are for people at work. We do not aim any of this at children and we do not knowingly collect data about them.

Changes

If we change how any of this works, we change this page and update the date at the top.

‍