The Italian version prevails; this English version is provided for convenience.
In short. The data is held on servers in Switzerland, at Infomaniak, in a database dedicated to your company. We do not sell data, we do not use it for advertising and we do not use it to train artificial intelligence systems. The software contains no analytics tool and no advertising cookies. What you enter into the software stays yours: we process it only to make it work.
SecurData Sagl, Via Gaggiolo 27, 6855 Stabio (Ticino, Switzerland), CHE-246.572.621 — info@securdata.ch, +41 91 230 10 05.
This notice covers the SecurGest software: sign-up, the trial period and any paid use that follows. It also applies after sign-up, for the entire duration of the relationship.
Two categories of data live side by side in the software, and our role differs for each.
| Data | Our role |
|---|---|
| Account data who you are, how we contact you, how we invoice, the technical access logs |
We are the controller: we decide why and how this data is processed, within the limits set out in section 3. |
| Data you enter into the software your customers, suppliers, staff, quotes, invoices, jobs, documents |
You are the controller. We are the processor within the meaning of art. 9 of the Swiss Data Protection Act: we process this data only on your instructions, to run the service for you, and for no purpose of our own. |
In practical terms, for the data you enter: we do not read it for our own purposes, we do not analyse it, we do not combine it with other customers' data, we do not disclose it to anyone and we do not use it to train artificial intelligence systems. We access it only if you ask us to for support, or to the extent strictly necessary to fix a fault — and in that case only by the technical staff who have to act.
| Data | Why | How long |
|---|---|---|
| Company name, first and last name, email address, phone, address | Create and manage access, write about service matters, issue invoices | For the duration of the relationship, then 60 days. Data appearing on invoices is kept for 10 years, as accounting and administrative obligations require |
| Password | Verify access. It is stored only as an encrypted fingerprint: we do not know it and cannot read it | As above |
| IP address, date and time of sign-ins, technical logs | Security of the service, detection of abusive access, fault diagnosis | 12 months |
| Invoicing and payment data | Meet accounting and tax obligations | 10 years, as the law requires (art. 958f Swiss Code of Obligations) |
| Messages you send us (support, contact) | Reply and reconstruct the history of an issue | 12 months |
On what basis. We process this data to perform the contract between us, to comply with legal obligations (accounting, tax) and, for the security logs, on the basis of a legitimate interest of ours and yours in keeping the service safe. If your company is established in the European Union, these bases correspond to art. 6(1)(b), (c) and (f) GDPR.
We do not send you advertising you have not asked for. If we ever offer a newsletter, subscribing will be voluntary and cancellable with one click.
With no one, other than the technical providers we need to run the service. They are contractually bound to process the data only on our instructions and under the same confidentiality obligations as ours.
| Provider | What it does | Where |
|---|---|---|
| Infomaniak Network SA, Geneva | Hosts the servers and the mailboxes of the service: this is where the data and the backups are | Switzerland |
| Cloudflare — only the Turnstile anti-bot check, when it is active on the sign-up page | Tells a person from an automated program at sign-up. It receives the IP address and technical browser data, not the form data | International network |
| Stripe Payments Europe, Limited, Dublin | Handles card payments. It receives your name, email address, billing address and the card details, which you enter on Stripe's own pages and which never pass through our servers. It receives this data only if you choose to pay by card | European Union |
No one else. There are no analytics tools, no Google Analytics, no social media buttons and no advertising providers. Data is disclosed to authorities or third parties only where there is a legal obligation or an order from a competent authority.
If another provider is ever added — for card payments, for example — this page will be updated and customers informed before it goes live.
Our backups do not replace yours. They are there to get the service running again, not to act as your archive. The software lets you export everything at any time: use it regularly and keep the copies yourself. This is also stated in the terms and conditions, section 7.
The software uses only technical cookies, needed to make it work: the one that keeps the session open after sign-in and those that remember preferences such as language or theme. They are not used to track you and cannot be switched off without preventing access; that is why there is no consent banner. No third-party cookies, no advertising cookies.
When the relationship ends — termination, no activation after the trial, dissolution — you have 60 days to export everything. After that, the database of your software and the backups containing it are deleted. Only the data we are legally required to keep remains: the accounting records and the details they contain — company name, address, invoice references — for ten years.
You can also ask for deletion earlier: we carry it out within 30 days, with the same limit arising from accounting obligations.
Regarding the account data, you can at any time:
For the data you have entered into the software you need ask us nothing: you manage it directly and export it whenever you want. If a person whose data you have entered contacts us, we direct them to you, as the controller.
Write to info@securdata.ch: we reply within 30 days. If the answer does not satisfy you, you can turn to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. If your company is established in the European Union, to the supervisory authority of your country.
If something substantial changes — a new provider, a new purpose — we notify it by email or within the software at least 30 days in advance. The version in force is always the one published on this page, with the date at the top.
| Company | SecurData Sagl |
|---|---|
| Address | Via Gaggiolo 27, 6855 Stabio, Switzerland |
| UID | CHE-246.572.621 |
| info@securdata.ch | |
| Phone | +41 91 230 10 05 |