The Italian version prevails; this English version is provided for convenience.
This document governs the processing of the personal data the Customer enters into the SecurGest software. It is accepted at sign-up, together with the terms and conditions, of which it forms an integral part, and applies for the entire duration of the relationship.
| Controller | The Customer — the company, self-employed professional or institution that signs up and uses the software. It decides the purposes and means of the processing. |
|---|---|
| Processor | SecurData Sagl, Via Gaggiolo 27, 6855 Stabio, Switzerland, CHE-246.572.621. It processes the data on behalf of the controller, solely to run the service. |
The appointment covers the data the Customer enters into the software: its customers, suppliers, staff, documents and everything it uploads there. It does not cover the Customer's account data (company name, contact person, invoicing, access logs): for those SecurData is the controller, and the processing is described in the privacy notice.
The Swiss Federal Act on Data Protection applies (in particular art. 9) and, where the Customer is established in the European Union or processes data of people located there, art. 28 of Regulation (EU) 2016/679 (GDPR).
| Subject matter and nature | Storage, organisation, consultation, modification and deletion of the data entered into the software, and the operations the Customer performs with its features: issuing documents, sending communications, managing deadlines and jobs. |
|---|---|
| Purpose | Solely the provision of the service described in the terms and conditions. No purpose of SecurData's own. |
| Categories of data subjects | Customers, prospects, suppliers, staff and contact persons of the Customer. |
| Types of data | Identification and contact data, contractual and commercial data, administrative and accounting data, and any other data the Customer chooses to enter. |
| Duration | As long as the service contract, plus the return and deletion period set out in section 8. |
Sensitive personal data (health, biometric data, opinions, criminal convictions): the software is not intended to process it. If the Customer nevertheless decides to enter such data, it does so under its own responsibility and must verify that the measures described in section 5 are adequate for its case.
SecurData processes the data only on the Customer's documented instructions. Use of the software, the settings chosen and support requests constitute instructions. Any further instruction is to be given in writing to info@securdata.ch.
SecurData does not use the data for its own purposes: it does not analyse it, does not combine it with other customers' data, does not disclose it to third parties and does not use it to train artificial intelligence systems.
If an instruction appears to breach data protection law, SecurData informs the Customer and may suspend its execution until written confirmation.
The people who may access the data on SecurData's behalf are bound to confidentiality, by contract or by law, including after the end of their employment. Access is limited to those who have to act and to the extent necessary: support requested by the Customer, or repair of a fault.
SecurData implements appropriate technical and organisational measures, in particular:
The measures may be updated over time: the level of protection is not reduced.
SecurData's backups do not replace the Customer's copies. The Customer exports its own copies periodically and keeps them on media under its own control, as provided in section 7 of the terms and conditions.
The Customer authorises SecurData to use the sub-processors listed below, which are bound by the same obligations as those set out in this agreement.
| Sub-processor | Service | Location |
|---|---|---|
| Infomaniak Network SA, Geneva | Hosting of the servers, the databases and the mailboxes of the service | Switzerland |
If SecurData intends to add or replace a sub-processor, it notifies the Customer at least 30 days in advance. Within that period the Customer may object on reasoned data protection grounds; if the disagreement persists, it may terminate the contract, at no cost, as of the date the new sub-processor would start.
When the relationship ends, the Customer has 60 days to export the data using the features of the software, which remain available at no extra cost. On written request within that period, SecurData provides a full export.
After the period expires, the Customer's database and the backups containing it are permanently deleted. Only the data SecurData is required by law to keep remains, in particular the accounting data relating to the relationship with the Customer.
On written request, SecurData provides the Customer with the information needed to demonstrate compliance with these obligations. The Customer may carry out an audit once a year, with at least 30 days' notice, during working hours, without prejudice to the security of other customers and at its own expense; a further audit is allowed where a security breach justifies it.
The data entered into the software stays in Switzerland and is not disclosed abroad. Were this to change, SecurData would give advance notice under section 6 and ensure the conditions required by art. 16 and 17 of the Swiss Data Protection Act and, where applicable, by Chapter V GDPR.
Anything not governed here is governed by the terms and conditions, including the liability clause. In the event of a conflict on a point concerning data processing, this document prevails.
Swiss law applies; the place of jurisdiction is the registered office of SecurData Sagl in Stabio, subject to mandatory places of jurisdiction.
The appointment takes effect with the box ticked at sign-up. SecurData records the date, time, IP address and version of the documents accepted, and keeps them as evidence for the duration of the relationship. The Customer may request a copy at any time.
| Company | SecurData Sagl |
|---|---|
| Address | Via Gaggiolo 27, 6855 Stabio, Switzerland |
| UID | CHE-246.572.621 |
| info@securdata.ch | |
| Phone | +41 91 230 10 05 |