Last updated: 7 October 2026

Data Processing by Priverion

As a B2B software provider we are subject to the Swiss Federal Act on Data Protection (FADP). The FADP allows private controllers to process personal data without a specific legal basis as long as the processing principles are respected and no personality rights are unlawfully violated (Art. 6 and 30 FADP). Where we offer our services to companies in the European Union or the EEA, or analyse the behaviour of visitors from there, the EU General Data Protection Regulation (GDPR) also applies to that processing (Art. 3 para. 2 GDPR), and this notice provides the information required by Art. 13 and 14 GDPR. Our goods and services are not intended for private individuals and are only offered to legal entities. Unless otherwise stated, the provision of your personal data is not required by law or contract. You are not obliged to provide the data. The exact extent to which your data is processed may vary depending on the services used, i.e. not all processing or rights listed in this notice may apply.

Sale only to legal entities. No sale to consumers as defined in 93/13/EEC.

Responsible Entity

The entity responsible for processing on this website is

Priverion Solutions AG

Postal address:

Zugerstrasse 32

6340 Baar

Switzerland

Contact:

E-mail: [email protected]

Representative in the European Union (Art. 27 GDPR):

Priverion Deutschland GmbH
Schellingstr. 109 a
80798 Munich
Germany

E-mail: [email protected]

Data subjects in the EU and the EEA and the supervisory authorities may contact our representative on all matters relating to the processing described in this notice, in addition to or instead of contacting us.

General

Categories of data subjects

Depending on the service requested, individual persons can be partially or completely covered by the scope of the processing activity of this data protection notice. The groups of persons concerned include:

• Visitors to our websites
• Applicants
• Corporate customers and their employees
• Potential corporate customers and their employees hereinafter referred to collectively as "users".

Purpose of the processing

The purposes of processing of personal data include:

• Provision of the online offer, its functions and contents and our services
• Responding to contact requests and communication with visitors
• Security measures
• Ad measurement, marketing and sales
• Fulfillment of a contract

Basis for the processing

Under the FADP we may process personal data without a specific legal basis as long as we comply with the principles of Art. 6 FADP and do not unlawfully violate personality rights (Art. 30 FADP). Where a processing operation would violate personality rights, it is justified by our overriding private interest, by your consent or by law (Art. 31 FADP). Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract and pre-contractual steps (Art. 6 para. 1 lit. b GDPR): handling demo requests, enquiries and orders, and providing our services to corporate customers and their employees.
• Consent (Art. 6 para. 1 lit. a GDPR): sending our newsletter and any other processing you expressly agree to. You can withdraw consent at any time with effect for the future, for example via the unsubscribe link in every newsletter or by contacting us.
• Legal obligation (Art. 6 para. 1 lit. c GDPR): retaining business records under the Swiss Code of Obligations and complying with other statutory duties.
• Legitimate interest (Art. 6 para. 1 lit. f GDPR): operating and securing the website, server log files, spam detection, the web analytics and advertising measurement described in this notice, and the targeted information of potential corporate customers. Our interest lies in running, protecting and improving our website and in marketing our services to legal entities; the data concerned is pseudonymous or limited to business contact data, and you can object to this processing at any time (see Your rights).

When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user's details are processed to handle the request. In rare cases we process personal data to fulfil our legal obligations.

Duration of data storage

The personal data of the person concerned shall be deleted or blocked as soon as the purpose of storage ceases to apply or storage is no longer necessary. Personal data is also stored for the time during which claims can be made against our company.

Furthermore, a storage can take place if regulations, laws or other rules require longer storage. Corresponding obligations to provide evidence and to retain data result from the Swiss Code of Obligations, among other things. The storage periods thereafter are generally ten years. The storage of personal usage data and cookies including IP addresses is limited to the period of time necessary for the fulfillment of the purpose.

Transfers to other countries

In most cases, your personal data is processed only in Switzerland and the EU or EEA. Where data is disclosed to a country that does not provide an adequate level of data protection, we do so only in accordance with Art. 16 and 17 FADP and Art. 44 to 49 GDPR: either the recipient is certified under the EU-US Data Privacy Framework, which the European Commission (Decision (EU) 2023/1795) and the Swiss Federal Council (Swiss-US Data Privacy Framework, in force since 15 September 2024) recognise as providing adequate protection, or we conclude the standard contractual clauses of the European Commission, which the Federal Data Protection and Information Commissioner recognises for disclosures from Switzerland (Art. 16 para. 2 lit. d FADP, Art. 46 para. 2 lit. c GDPR).

Countries to which we may disclose data include:

• Switzerland (file server, accounting, newsletter)
• Ireland and the EU (Google Ireland Limited, LinkedIn Ireland Unlimited Company and Microsoft Ireland Operations Limited as our contracting partners for advertising, web analytics and video communication)
• United Kingdom (Ecologi Action Ltd, impact badge; the UK provides an adequate level of data protection recognised by the Federal Council and the European Commission)
• USA (Cloudflare, Inc. for the content delivery network and web security in front of our web servers; Google LLC for Google Analytics and Google Ads; LinkedIn Corporation for the LinkedIn Insight Tag; all certified under the EU-US Data Privacy Framework and its Swiss extension)

This does not include the production clusters, as these are selected by the customer individually.

Website

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the computer system of a user. If a user calls up a website, a cookie can be stored on the user's device. The cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies for the purpose of making our website more user-friendly, effective and safer. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a change of page.

The processing is based on our legitimate interest in the above-mentioned purposes. The data collected from you in this way will be pseudonymised by technical precautions. It is therefore not possible to assign the data directly to your person. The data will not be stored together with other personal data of yours.

The Cookie Directive (European Directive 2009/136/EC) is not applicable. Art. 45c lit. b of the Telecommunications Act shall apply.

You have the right to object to the processing of personal data concerning you. Cookies are stored on your computer. Therefore you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all functions of this website to their full extent.

The following links will give you information on how to manage (and deactivate) cookies in the most important browsers:

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Safari

Server log files

Every time you access our website, usage data is transmitted by your Internet browser and stored in log files (server log files). These stored data include, for example, the name of the page accessed, the date and time of access, the amount of data transferred and the requesting provider as well as IP addresses. This data is processed for our legitimate interests and is used exclusively to ensure the trouble-free operation of our website and to improve our services.

Collection and processing when using the contact form

When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you have provided it. The data processing serves the purpose of establishing contact and initiating a contractual relationship. The processing is done in the interest of efficient communication. We use your e-mail address to process your enquiry or for the subsequent handling of contractual services.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). Google Analytics sets the cookies "_ga" and "_ga_<property ID>" (valid for two years), which contain a random client ID so that your browser can be recognised on later visits, and records how the website is used: pages viewed, time spent, approximate region, device and browser type, the referring website and interactions such as clicks on calls to action, form submissions and downloads. Google Analytics 4 does not log or store your IP address; it is used only briefly to derive an approximate location. Google processes the data on our behalf under Google's data processing terms and may transfer it to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework and its Swiss extension. We use the reports to understand and improve our website and our marketing; the data is not combined with your name or contact details. Google deletes user- and event-level data after at most 14 months.

The processing is based on our legitimate interest in analysing and improving our website (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). You can prevent the collection by installing the browser add-on https://tools.google.com/dlpage/gaoptout, by blocking cookies in your browser or by objecting to us. Further information: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

Google Ads & Conversion Tracking

This website uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (registered number: 368047) with its registered office located at 1st and 2nd Floor, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). As part of Google Ads, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked through Google Ads advertisers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie in your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

Google processes the conversion data on our behalf and may transfer it to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework and its Swiss extension. The processing is based on our legitimate interest in measuring the effectiveness of our advertising (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). You can find more information about Google Ads and Google conversion tracking in Google's privacy notice: https://policies.google.com/privacy. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag, a conversion tracking tool of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; "LinkedIn"), on our website. The tag sets a cookie and collects the page address, the referring site, your IP address, device and browser characteristics and a timestamp; the data is pseudonymised within seven days and deleted within 180 days, and we receive only aggregated reports on the audience of our website and on campaign conversions, never information that identifies you personally. LinkedIn may transfer the data to LinkedIn Corporation in the USA, which is certified under the EU-US Data Privacy Framework and its Swiss extension; in addition, LinkedIn relies on the standard contractual clauses of the European Commission (https://www.linkedin.com/legal/l/dpa). The processing is based on our legitimate interest in measuring and improving our advertising on LinkedIn (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). LinkedIn members can control the use of their data in their account settings; anyone can object to the tag at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information: https://www.linkedin.com/help/linkedin/answer/a427660 and https://www.linkedin.com/legal/privacy-policy.

Ecologi impact badge

Our pages embed the impact badge of Ecologi Action Ltd (483 Green Lanes, London N13 4BS, United Kingdom; "Ecologi"), which shows the climate projects we support. The badge is a small script loaded from widgets.ecologi.com; when a page is displayed, your browser requests it from Ecologi's servers, which therefore receive your IP address, browser type and the address of the page you are viewing. We do not use the badge to set cookies or to track you, and we receive no data from Ecologi about your visit. The processing is based on our legitimate interest in showing our climate commitment (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). The United Kingdom provides an adequate level of data protection recognised by the Federal Council and the European Commission. Further information: https://ecologi.com/resources/privacy-policy.

Other data processing

Collection, processing and use of personal data for orders

When you place an order, we collect and use your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data marked as mandatory in the fields is necessary for the conclusion of the contract. Failure to provide this information means that no contract can be concluded.

Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners that we need to process the contractual relationship or service providers we use for processing orders. In addition to the recipients named in the respective clauses of this privacy policy, these are, for example, recipients of the following categories:

• Payment service provider
• Service provider for order processing
• Webhoster, IT service provider
• Marketing service provider

In all cases we strictly observe the legal requirements. Appropriate contract processing agreements have been concluded with the contract processors in order to guarantee data protection.

Microsoft Teams for the purpose of Video Communications

We would like to inform you below about the processing of personal data in connection with the use of "Microsoft Teams".

We use the "Microsoft Teams" tool to hold conference calls, online meetings, video conferences and / or webinars (hereinafter: "Online Meetings"). "Microsoft Teams" is a service of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland), our contracting partner for Microsoft 365 services.

Note: If you access the "Microsoft Teams" website, the provider of "Microsoft Teams" is responsible for data processing. Accessing the website is only required to use "Microsoft Teams" to download the software for using "Microsoft Teams".

If you do not want to or cannot use the "Microsoft Teams" app, you can also use "Microsoft Teams" via your browser. The service is then also provided via the "Microsoft Teams" website. When using "Microsoft Teams", different types of data are processed. The scope of the data also depends on the details of the data you provide before or when participating in an "online meeting".

The following personal data are processed:

• User information: e.g. display name ("Display name"), possibly e-mail address, profile picture (optional), preferred language.
• Meeting metadata: e.g. date, time, meeting ID, phone numbers, location
• Text, audio and video data: You may have the option of using the chat function in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting". In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and any video camera on the terminal device are processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time using the "Microsoft Teams" applications.

We use "Microsoft Teams" to conduct "online meetings". If we want to record "online meetings", we will inform you transparently in advance and, if necessary, ask for your consent. The chat content is logged when using Microsoft Teams. We store the chat content for a period of one month. If it is necessary for the purpose of logging the results of an online meeting, we will log the chat content. However, this will usually not be the case.

Personal data that are processed in connection with participation in "online meetings" are generally not passed on to third parties unless they are intended to be passed on. Please note that content from "online meetings" as well as from personal meetings is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients:

The provider of "Microsoft Teams" necessarily receives knowledge of the above data, insofar as this is provided for in our order processing contract with "Microsoft Teams". Data processing outside of Switzerland does not take place, as we have limited our storage location to data centers in Switzerland. However, we cannot rule out that the routing of data takes place via internet servers that are located outside of Switzerland. This can be the case in particular if participants in an "online meeting" are in a third country. However, the data is encrypted during transport over the Internet and is thus protected against unauthorized access by third parties.

Your rights

Under the FADP (Art. 25 to 29 and 32) and, where it applies, the GDPR (Art. 15 to 22), you have the following rights with regard to your personal data. To exercise them, contact us using the contact details given at the beginning of this notice; in the EU and the EEA you may also contact our representative.

• Access: you can ask whether we process personal data about you and receive the information listed below (Art. 25 FADP; Art. 15 GDPR).
• Rectification: you can have inaccurate or incomplete data corrected (Art. 32 para. 1 FADP; Art. 16 GDPR).
• Erasure and restriction: you can request the deletion or destruction of your data, or that its processing be restricted, where the legal conditions are met (Art. 32 para. 2 FADP; Art. 17 and 18 GDPR).
• Data portability: you can receive the data you have provided to us in a common electronic format, or have it transmitted to another controller, where the processing is automated and based on your consent or a contract (Art. 28 FADP; Art. 20 GDPR).
• Objection: you can object at any time to processing based on our legitimate interests, and in particular to the use of your data for direct marketing, including profiling for that purpose; we will then stop the processing unless we can demonstrate compelling legitimate grounds (Art. 30 para. 2 lit. b FADP; Art. 21 GDPR).
• Withdrawal of consent: where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7 para. 3 GDPR).
• Complaint: you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern, https://www.edoeb.admin.ch, or, where the GDPR applies, with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

We do not take decisions based solely on automated processing that have legal effects on you or similarly significantly affect you (Art. 21 FADP; Art. 22 GDPR).

If you request access, you will receive the information necessary to assert your rights and to ensure transparent processing.

In any case, you will be informed of the following:

• the identity and contact details of the responsible (see information at the beginning of this notice)
• the processed personal data as such
• the processing purpose (see purpose of processing section above)
• the retention period of the personal data or, if this is not possible, the criteria for determining this period
• the available information about the origin of the personal data, insofar as they were not obtained from the person concerned
• if applicable, the existence of an automated individual decision and the logic on which the decision is based
• if applicable, the recipients or the categories of recipients to whom personal data are disclosed (see section Transfers to other countries)

Data Protection Notice for Applicants

The data protection notice for applicants additionally applies to applicants for positions within the Priverion Group.