Privacy Policy

1. Controller

The controller responsible for data processing is:

2. Data Processed

When using the platform, the following data may be processed:

• account data
• company information
• project data
• uploaded documents
• communication data
• technical usage data

3. Purposes of Data Processing

Processing takes place in particular for the following purposes:

• providing the platform
• managing user accounts
• providing support
• improving the platform
• ensuring security

4. Legal Bases

Personal data is processed on the basis of:

• performance of a contract
• legitimate interests
• legal obligations

5. Processing on Behalf of Customers

Where customers upload personal data to the platform, the provider processes this data on behalf of the customer.

The details are governed by the Data Processing Agreement (DPA).

6. Disclosure to Service Providers

The following categories of service providers may be used to provide the platform:

• cloud hosting
• email delivery
• monitoring
• security services

A current list of service providers is available here.

7. Hosting

The platform is hosted by Amazon Warehouse Services (AWS) in data centers located in Switzerland.

8. Data Security

The provider implements technical and organizational measures, in particular:

• encryption of data transmission
• access controls
• regular backups
• system monitoring

9. Retention Period

Personal data is stored only for as long as necessary for the respective purposes. After the end of the contract, data is deleted in accordance with the periods described in the terms of service.

10. Cookies

The platform uses technically necessary cookies in order to:

• enable user logins
• ensure platform security
• store settings

If additional analytics or tracking tools are used, this will only take place with the corresponding consent.

11. International Data Transfers

If data is transferred outside Switzerland or the EU, this will only take place subject to appropriate safeguards.

12. Rights of Data Subjects

Data subjects have the right to:

• access
• rectification
• erasure
• restriction of processing
• data portability

13. Right to Lodge a Complaint

Data subjects may lodge a complaint with the competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

14. Changes to This Privacy Policy

The provider may amend this Privacy Policy if necessary. The current version is available on the website and in the app under Settings → Legal.