Privacy Policy

Part B: Application (app.agency-atelier.ch)

The controller responsible for processing personal data in the app.agency-atelier.ch application is Marcel Heiniger, sole proprietorship trading as agency-atelier, Ipsachstrasse 1, 2563 Ipsach, Switzerland. For any data protection matter, you can reach us at hello@agency-atelier.com.

This policy (Part B) applies to the use of the application by our customers and by the people they invite into their organisation. For the agency-atelier.ch website and for matters not covered here (service providers we use, data security, your further rights, the right to lodge a complaint with the FDPIC), the website privacy policy (Part A, available in German) applies in addition: https://agency-atelier.ch/datenschutz/. For the application, this Part B prevails in case of any difference.

B.1 Data we process. Account data (name, e-mail address, password only as an irreversible hash, two-factor sign-in data), data on the organisation and the contract (company name, address, chosen plan, subscription and payment status) and the log data described in section B.2. Payments are handled by our payment provider Payrexx AG (Switzerland); we do not receive card data.

B.2 Change log (audit log). Every transaction in the application is part of performing the contract. We therefore log the operations that you or people in your organisation carry out in the application, in particular sign-up, conclusion, change, cancellation and reactivation of the subscription, payments and refunds, invitations, role changes, API keys and the reset of the organisation's data. An entry records who acted (user identifier or type of actor), when, which action was taken on which object and which data were changed. Depending on the operation, it may also contain the e-mail address of the acting person at the time of the operation, the IP address and the browser identifier (user agent). Operations triggered by the system itself (payment provider notifications, scheduled jobs) are logged as system operations.

Purpose: proof of the conclusion, content and performance of the contract, traceability of the accounting records, platform security and prevention of misuse. We do not use the log for advertising, profiling or monitoring the behaviour of employees.

Legal basis: processing of data about the contracting party in direct connection with the conclusion and performance of the contract (art. 31 para. 2 let. a FADP) and our overriding interest in preserving evidence (art. 31 para. 1 FADP), the latter also for invited people who are not themselves parties to the contract. Where the GDPR applies: art. 6(1)(b) and (f) GDPR.

Retention: 10 years from the end of the calendar year of the operation, in line with the limitation period of art. 127 of the Swiss Code of Obligations; entries are then deleted or anonymised. This also applies after the contract ends and after the organisation is deleted. Entries cannot be altered afterwards.

Access within your organisation: people with administration rights in your organisation can view the organisation's change log.

Your rights: you may request access to the entries concerning you at any time. Individual entries cannot be erased or corrected before the period ends insofar as they are needed to establish, exercise or defend legal claims; in that case we restrict processing to that purpose and, on request, add a note that you dispute their accuracy. Please send your request to the address given above.

B.3 Third-party data (processing on your behalf). Personal data of third parties that you enter in the application (e.g. contacts, customers, notes, invoices, support requests) are processed by us as a processor, solely on your behalf and on your instructions; you are responsible for these data. We provide a Data Processing Agreement on request.

E-mail provider you choose: e-mails you send from the application (e.g. invoices, quotes, reminders) go through the e-mail provider that your organisation has itself chosen and connected in the settings (e.g. Microsoft 365 / Outlook, Google Workspace / Gmail, Cloudflare Email Service, Resend or your own SMTP server). We pass these e-mails to that provider on your instructions. The provider processes them under your own contract with it and is not our processor. Depending on the provider, the e-mails and their attachments may be processed outside Switzerland, in particular in the United States; the information on our own service providers and on data storage in Switzerland (Part A) does not apply to that provider. You are responsible for choosing the provider and for your contract with it, including any resulting disclosure of data abroad. For the connection we store the necessary credentials (app password, API key or Microsoft access token) in encrypted form and, for Microsoft, the address of the connected mailbox. We delete them when you switch provider or delete the configuration; copies in backups remain until those backups are deleted in their regular rotation. You can also revoke access at any time directly with the provider.