How we handle the personal data of client employees and business contacts. Your data, your rights, explained plainly.
The controller of your personal data is:
aqumo technologies SA
Via Ceresio 12 — 6963 Pregassona (Lugano) — Switzerland
Business ID: CHE-113.809.603
Contact form: www.aqumo.net/en/contact.php
For questions about how we handle your personal data, use the contact form above or write to the address above marking the envelope or e-mail subject Data Protection.
This notice is addressed to the employees and representatives of aqumo's clients and prospective clients — anyone whose personal data aqumo receives in the context of a business relationship or a pre-contractual discussion.
It does not cover the operational data (production records, orders, invoices, and similar) that clients upload or transfer to the aqumo platform. That data is processed by aqumo acting as a data processor on the client's instructions; the applicable document is the Data Processing Agreement.
We collect and process the following categories of personal data about client employees and business contacts:
We receive this data directly from you, from your employer as part of the contracting process, or from publicly available professional directories and company websites.
| Purpose | Legal basis under GDPR (where applicable) | Justification under Swiss law (nLPD) |
|---|---|---|
| Managing the business relationship: sending offers, signing and performing contracts, invoicing. | Legitimate interests of aqumo and the Client in managing their business relationship — art. 6(1)(f). | Overriding legitimate interest — nLPD art. 31 para. 2 let. b. |
| Providing technical support, answering enquiries, resolving incidents related to the aqumo platform. | Legitimate interests in fulfilling service obligations towards the Client — art. 6(1)(f). | Overriding legitimate interest — nLPD art. 31 para. 2 let. b. |
| Keeping commercial records as required by Swiss law (Swiss Code of Obligations art. 958f). | Compliance with a legal obligation — art. 6(1)(c). | Legal obligation — CO art. 958f; nLPD art. 31 para. 2 let. c. |
| Security of our systems and prevention of fraud or misuse. | Legitimate interests in protecting our systems and those of our clients — art. 6(1)(f). | Overriding legitimate interest — nLPD art. 31 para. 2 let. b. |
The GDPR requires a positive legal basis for all processing of personal data (art. 6). The nLPD takes a different approach: processing must comply with the principles laid down by the Act and, where processing constitutes an infringement of personality rights under art. 30 nLPD, art. 31 lists the grounds that may justify that infringement. The two columns above reflect this structural difference and must not be read as equivalents. The GDPR applies where the processing falls within its territorial scope.
We retain personal data for as long as the business relationship is active and, after it ends, for as long as required by applicable law. Commercial and accounting records are kept for ten years following the end of the calendar year in which they were created, as required by the Swiss Code of Obligations (art. 958f). Correspondence that does not form part of a commercial record is retained for no longer than five years.
When the retention period expires, data is deleted or anonymised permanently.
aqumo does not sell, rent, or share your personal data with third parties for their own purposes. Access within aqumo is restricted to the people who need it to do their job (need-to-know principle). We may share your data with:
We do not use external processors to process client contact data. Our infrastructure is operated entirely on aqumo-owned servers located in Switzerland.
We do not transfer your personal data outside Switzerland. All processing takes place on aqumo-owned servers located in Switzerland.
Depending on the applicable law and the circumstances, you may have the following rights:
To exercise any of these rights, contact us at www.aqumo.net/en/contact.php. We will respond within 30 days. We may need to verify your identity before fulfilling the request.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the competent supervisory authority:
We would appreciate the opportunity to resolve any concern directly before you contact the authority.
We may update this notice when our processing activities change or when the law requires it. The version number and date in the header above always reflect the current text. If you are a client, we will notify you of material changes by e-mail or through the platform.