Data Privacy Notice

1. Identity and Contact Details

The "Controller" responsible for the data processing described in this notice is:

2. Collection and Processing of Personal Data

We process personal data that you provide to us (e.g., via contact forms or registration) or that we collect automatically during your visit. This includes:

• Technical Data: IP address, operating system, browser type, and timestamps.
• Contact Information: Name, email address, phone number (if provided).
• Usage Data: Pages visited, links clicked, and interaction with our services.

3. Purpose of Data Processing

We process your data for the following purposes:

• Providing and maintaining our website and services.
• Responding to inquiries via contact forms.
• Ensuring IT security and protecting our systems.
• Sending newsletters (if you have consented).

4. Disclosure to Third Parties

We may share your data with the following categories of recipients if necessary for the purposes listed above:

• IT service providers (e.g., hosting, email services).
• Analytics and marketing partners.
• Public authorities (if legally required).
• Subsidiaries of Lubit AG under GDPR compliance.
• Independent licecees of the Lubit AG software (where permitted).

5. Transfer Abroad

Your data is primarily processed in Switzerland. However, we may transfer data to countries that provide an adequate level of data protection (e.g., EU/EEA countries). If we transfer data to a country without adequate protection (e.g., USA), we ensure compliance through:

• Standard Contractual Clauses (SCCs) approved by the FDPIC.
• Adequacy frameworks like the Swiss-U.S. Data Privacy Framework (where applicable).

6. Retention Period

We process and store your personal data only for as long as it is necessary for the fulfillment of our contractual and legal obligations or the purposes pursued with the processing. As soon as the data is no longer required, it will be deleted or anonymized as far as possible.

7. Your Rights

Under the Swiss FADP, you have the following rights regarding your personal data:

• Access: The right to know if and what data we process.
• Correction: The right to have inaccurate data corrected.
• Deletion: The right to request the erasure of your data.
• Restriction/Objection: The right to object to specific processing activities.
• Data Portability: The right to receive your data in a structured, common electronic format.

To exercise these rights, please contact us at the email address provided in Section 1.

8. Data Security

We take appropriate technical and organizational measures (e.g., SSL/TLS encryption) to protect your personal data from unauthorized access, loss, or misuse.