Data Protection Policy (GDPR)

SwissApp Group places great importance on the protection of your personal data. This data protection policy explains how we collect, use, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FDPA).

1. Controller

The controller for data processing is:

2. Collection and Processing of Personal Data

We collect and process personal data only if there is a legal basis for doing so (e.g., consent, contract fulfillment, legal obligation, or legitimate interest) or if you have given us your consent.

• **When using our website:** We may automatically collect information such as your IP address, browser type, and pages visited.
• **When contacting us:** If you contact us by email or contact form, we store your details to process the request.
• **In the context of our services:** For the provision of our services (app development, etc.), we process the data necessary for the fulfillment of the contract.

3. Purpose of Data Processing

We use your data for the following purposes:

• To provide and improve our website.
• To answer your inquiries and communicate with you.
• To provide our contractual services.
• To comply with legal obligations.
• To protect our legitimate interests (e.g., to improve our services).

4. Disclosure of Data to Third Parties

We only disclose your personal data to third parties if this is legally permissible or necessary, necessary for the fulfillment of the contract, or if you have given your consent. This may be the case, for example, with the following categories of recipients:

• IT service providers (for the operation of our systems)
• Payment service providers (for payment processing)
• Authorities (in the event of legal obligations)

5. Data Transfer Abroad

Your data will only be transferred to countries outside the EU/EEA (third countries) if an adequate level of protection is guaranteed (e.g., through adequacy decisions of the EU Commission, standard data protection clauses, or your express consent). The provisions of the Swiss Data Protection Act are also observed.

6. Data Security

We take technical and organizational measures to protect your data from unauthorized access, loss, or destruction. These measures include, among others:

• Encryption of data transmission (SSL/TLS)
• Access controls and authorization management
• Regular security checks and training
• Data storage on secure servers

7. Your Rights

You have the following rights regarding your personal data:

• **Right of access:** You can request information about the data we have stored about you.
• **Right to rectification:** You can request the correction of incorrect data.
• **Right to erasure:** You can request the deletion of your data, provided that the legal requirements are met.
• **Right to restriction of processing:** You can request the restriction of the processing of your data.
• **Right to data portability:** You can request the transfer of your data to another controller.
• **Right to object:** You have the right to object to the processing of your data if the processing is based on our legitimate interests.
• **Right to withdraw consent:** You can withdraw your consent at any time.
• **Right to complain:** You have the right to complain to a supervisory authority (in the EU and to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland).

8. Data Retention Period

We store your data only as long as it is necessary for the respective purposes or as required by law.

9. Changes to this Data Protection Policy

We reserve the right to update this data protection policy as necessary. The current version will be published on our website.

10. Contact

If you have any questions about data protection, you can reach us using the contact details above.