Privacy Policy

1. Introduction

Qubitech Sàrl (hereinafter "Qubitech", "we" or "our") attaches fundamental importance to the protection of your personal data. This Privacy Policy describes how we collect, use, store and protect your personal data, in accordance with the Swiss Federal Act on Data Protection (nFADP) of 25 September 2020, which came into force on 1 September 2023.

2. Data controller

The controller responsible for processing your personal data is:

Company name: Qubitech Sàrl
UID: CHE-334.915.436
Legal form: Limited liability company
Registered office: Meyrin
Address: Avenue Louis-Casaï 71, 1216 Cointrin, Geneva, Switzerland
Website: https://qubitech.ch
Contact email: info@qubitech.ch
Phone: +41 22 558 25 80

For any question relating to the protection of your personal data, you can contact us at the email address indicated above.

3. Personal data collected

3.1 Data you provide to us directly

When you interact with our services (contact form, communication by email or phone), we may collect:

- First and last name
- Email address
- Phone number
- The content of your messages and requests

3.2 Data collected automatically

When you browse our website, we automatically collect:

- IP address
- Browser type and version
- Pages viewed and duration of visit
- Browsing data and interactions with the site
- Data from cookies (see Article 8)

4. Purposes of processing and legal bases

In accordance with art. 31 nFADP, each processing of your data relies on one of the following legal bases:

Provision of our services: Legal basis: Performance of a contract (art. 31 para. 2 let. a nFADP). We process your data to perform our services and respond to your requests.

Improvement of our services and statistical analyses: Legal basis: Legitimate interest (art. 31 para. 2 let. b nFADP). Our legitimate interest lies in the continuous improvement of the quality of our services.

Customer support and response to your requests: Legal basis: Performance of a contract or legitimate interest depending on the context.

Sending commercial information and newsletters: Legal basis: Consent (art. 31 para. 1 nFADP). You may withdraw your consent at any time.

Compliance with legal obligations: Legal basis: Legal obligation (art. 31 para. 2 let. c nFADP), for example retention of accounting data.

5. Retention periods

In accordance with art. 19 nFADP, your personal data is only retained for as long as necessary for the purposes for which it was collected:

- Customer and contractual data: 10 years from the end of the contractual relationship (legal accounting and tax obligation).
- Contact and support data: 3 years from the last exchange.
- Browsing data and technical logs: 12 months maximum.
- Newsletter and marketing communications data: until consent is withdrawn, then deletion within 30 days.

At the end of these periods, your data is deleted or irreversibly anonymised.

6. Subprocessors and data sharing

We use third-party service providers for certain processing operations. These providers act exclusively on our instructions and are bound by contracts guaranteeing an adequate level of protection, in accordance with art. 9 nFADP.

The categories of providers we use notably include hosting, web analytics, messaging and calendar management services. We do not sell or rent your personal data to third parties for commercial purposes.

7. Transfers of data abroad

In accordance with art. 16 and 17 nFADP, some of our providers are established in the United States. These transfers are governed by appropriate safeguards, in particular the standard contractual clauses recognised by the FDPIC. The providers concerned are as follows:

7.1 Vercel Inc. - Website hosting

Company: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States
Purpose: Hosting and delivery of the qubitech.ch website
Country: United States
Safeguards: Standard contractual clauses (Vercel Data Processing Agreement)
Privacy policy: https://vercel.com/legal/privacy-policy

7.2 Google LLC - Google Analytics

Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Purpose: Statistical analysis of the audience and behaviour of visitors on our website
Country: United States
Safeguards: Standard contractual clauses - Google Ads Data Processing Terms
Privacy policy: https://policies.google.com/privacy

Note: Google Analytics uses cookies requiring your prior consent (see Article 8).

7.3 Google LLC - Google Calendar

Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Purpose: Integration of an online calendar on our site for appointment booking
Country: United States
Safeguards: Standard contractual clauses - Google Workspace Data Processing Amendment
Privacy policy: https://policies.google.com/privacy

7.4 Google LLC - YouTube

Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Purpose: Delivery of embedded videos on our website
Country: United States
Safeguards: Standard contractual clauses
Privacy policy: https://policies.google.com/privacy

Note: Embedded YouTube videos may set tracking cookies. Their loading is subject to your prior consent (see Article 8).

8. Cookies

Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit.

8.1 Types of cookies used

- Essential cookies: necessary for the operation of the site, do not require consent.
- Analytics cookies (Google Analytics): allow analysis of the use of the site. Require your prior consent.
- Third-party content cookies (YouTube): set when viewing embedded videos. Require your prior consent.

8.2 Consent management

On your first visit, a consent banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time.

For the complete details of the cookies used (name, purpose, lifespan, publisher), please consult our dedicated Cookie Policy, accessible on our website.

9. Data security

In accordance with art. 8 nFADP, we implement technical and organisational measures to protect your personal data against any unauthorised access, loss, destruction or disclosure. These measures notably include:

- Encryption of data in transit (TLS/SSL) and at rest
- Strict access control based on the principle of least privilege
- Secure authentication for access to sensitive systems
- Regular security audits
- Staff training in data protection best practices

In the event of a data breach likely to result in a high risk to your rights, we will inform you as soon as possible, in accordance with art. 24 nFADP.

10. Automated decisions and profiling

Qubitech does not carry out automated decisions producing legal effects or similarly significant effects concerning you, nor high-risk profiling within the meaning of art. 21 nFADP.

11. Your rights

In accordance with art. 25 to 27 nFADP, you have the following rights regarding your personal data:

- Right of access (art. 25 nFADP): obtain confirmation of the processing of your data and receive a copy of it.
- Right to rectification (art. 32 nFADP): have inaccurate or incomplete data corrected.
- Right to erasure: request the deletion of your data in the cases provided for by law.
- Right to data portability (art. 28 nFADP): receive your data in a structured, commonly used format, and transmit it to another controller.
- Right to object: object to the processing of your data based on legitimate interest.
- Right to withdraw your consent: at any time, without affecting the lawfulness of the processing carried out before the withdrawal.
- Right to lodge a complaint: with the Federal Data Protection and Information Commissioner (FDPIC).

To exercise your rights, please contact us at: info@qubitech.ch. We undertake to respond to your request within 30 days.

12. Supervisory authority

If you consider that the processing of your personal data does not comply with the nFADP, you have the right to lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)

Address: Feldeggweg 1, 3003 Bern, Switzerland
Website: www.edoeb.admin.ch
Email: info@edoeb.admin.ch

13. Changes to the privacy policy

We reserve the right to modify this Privacy Policy at any time to reflect legal, regulatory or operational changes.

In the event of a significant change affecting your rights or the way we process your data:

- We will inform you by email if we have your address.
- A visible notice will be displayed on our website for at least 30 days.

The update date at the top of this document indicates the version in force.

14. Contact us

For any question, request or complaint relating to the protection of your personal data:

By email: info@qubitech.ch
By post: Qubitech Sàrl, Avenue Louis-Casaï 71, 1216 Cointrin, Geneva, Switzerland
By phone: +41 22 558 25 80
Qubitech Sàrl - CHE-334.915.436 - Avenue Louis-Casaï 71, 1216 Cointrin, Geneva, Switzerland
https://qubitech.ch | info@qubitech.ch | +41 22 558 25 80