Privacy Policy

Last updated: July 15, 2023

Introduction

SchaffhApp ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our electronic services application and website (collectively, the "Service").

We adhere to the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). By accessing or using our Service, you consent to the collection, use, and storage of your information as described in this Privacy Policy.

Information We Collect

Personal Data

We may collect personal information that you voluntarily provide when using our Service, including:

  • Contact information (name, email address, phone number, postal address)
  • Account credentials (username, password)
  • Identity verification information (ID numbers, residence permits)
  • Payment information (credit card details, bank account information)
  • Communication data (messages sent through our platform)
  • Document data (information contained in documents you upload)

Usage Data

We automatically collect certain information when you visit, use, or navigate our Service. This information may include:

  • Device information (IP address, browser type, operating system)
  • Usage patterns (pages visited, time spent on pages, click paths)
  • Location data (country, canton)
  • Log data (access times, features used)

How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing and maintaining our Service
  • Processing transactions and payments
  • Verifying your identity for security purposes
  • Communicating with you about updates, security alerts, and support
  • Responding to your inquiries and customer service requests
  • Analyzing usage patterns to improve our Service
  • Preventing fraudulent activities and ensuring compliance with legal obligations
  • Personalizing your experience and providing tailored content

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Performance of a contract when we provide you with our Service
  • Your consent when you agree to the processing of your data
  • Legitimate interests in operating and improving our business
  • Compliance with legal obligations under Swiss and, where applicable, EU law

Data Sharing and Disclosure

We may share your information with:

  • Service providers who perform services on our behalf (payment processors, hosting providers, analytics services)
  • Government authorities when required by law or to protect our rights
  • Business partners with your consent or when necessary to provide the Service
  • Professional advisors such as lawyers, auditors, and insurers

We do not sell your personal data to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • End-to-end encryption for sensitive data
  • Regular security assessments and penetration testing
  • Access controls and authentication procedures
  • Data backup and recovery protocols
  • Employee training on data protection and security practices

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you
  • Legal obligations to retain data for certain periods
  • Statute of limitations under applicable law
  • Ongoing or potential legal disputes

Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to access and receive a copy of your personal data
  • Right to rectify inaccurate or incomplete data
  • Right to erasure (the "right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information provided at the end of this policy.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use information about you and your interaction with our Service. Cookies are small data files that are placed on your device when you visit a website, which store information about your preferences and actions.

We use the following types of cookies:

  • Essential cookies: Necessary for the functioning of our Service
  • Performance cookies: Help us analyze how users interact with our Service
  • Functional cookies: Allow us to remember your preferences and settings

You can control cookies through your browser settings and other tools. However, if you block certain cookies, you may not be able to use all features of our Service.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

International Data Transfers

Your personal data may be processed in Switzerland and, in some cases, in other countries where our service providers are located. These countries may have data protection laws that differ from those in your country of residence.

When we transfer personal data outside of Switzerland or the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your information, such as standard contractual clauses approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

SchaffhApp
Bahnhofstrasse 42
8001 Zürich
Switzerland

Email: privacy@schaffh.shop
Phone: +41 44 123 45 67