This Privacy Policy describes how SERGENTA Group AG ("SERGENTA", "we", "us") collects, processes, and protects personal data when you use the SERGENTA AI platform and website at sergenta.ai. We process personal data in accordance with the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Data Controller
SERGENTA Group AG is the controller responsible for the processing of your personal data under this Privacy Policy.
Data Protection Officer / Contact: privacy@sergenta.ai. Postal address available on request.
2. Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, role, and profile information you provide when registering.
- Usage data: pages visited, features used, IP address, browser type, device information, and session timestamps.
- Communication data: messages, support requests, and content you submit through forms or the platform.
- Cookies and similar technologies: see section 9 below.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent (Art. 6 GDPR / Art. 7 revDSG): when you explicitly consent, e.g. newsletter subscription or optional cookies.
- Contract (Art. 6 GDPR): to provide and operate the platform under our Terms of Service.
- Legitimate interests (Art. 6 GDPR / Art. 31 revDSG): platform security, fraud prevention, and product improvement.
- Legal obligation: compliance with applicable laws and regulatory requirements.
4. How We Use Your Data
We process personal data for the following purposes:
- Providing, operating, and securing the platform and your account.
- Communicating with you about your account, updates, and support.
- Analysing and improving our services, features, and user experience.
- Meeting legal, accounting, and regulatory obligations.
6. International Data Transfers
SERGENTA is a Swiss company. Personal data is processed in Switzerland. Where data is transferred to processors outside Switzerland or the EEA, we ensure an adequate level of protection through Standard Contractual Clauses or other lawful transfer mechanisms.
7. Data Retention
We retain personal data only as long as necessary for the purposes set out in this policy or as required by law. Account data is deleted upon account closure, subject to legal retention obligations.
8. Your Privacy Rights
Under the revDSG and GDPR, you have the right to:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data ('right to be forgotten').
- Restriction: limit the processing of your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: at any time, without affecting prior processing.
- Lodge a complaint: with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.
10. Data Security
We implement enterprise-grade technical and organisational measures: encryption in transit and at rest, row-level access control, least-privilege architecture, immutable audit logs, and secrets management. No method is fully secure, but we work to protect your data.
11. Children's Privacy
Our services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be announced on the platform. Continued use after changes constitutes acceptance.
13. Contact Us
For privacy questions, requests, or to exercise your rights, contact us at privacy@sergenta.ai.