Privacy Policy

Quantoro Technologies AG (hereinafter also "we", "us", "Company") obtains and processes personal data concerning you. The term "data" means "personal data" or "personal information" according to applicable data protection laws.

In this privacy policy (“Privacy Policy”), we describe how we process your data when you use www.quantoro.com (hereinafter "Website"), purchase our services or products, otherwise have a contractual relationship with us, communicate with us or otherwise deal with us. This Privacy Policy may be supplemented by other documents such as contractual terms and conditions or additional specific privacy policies.

If you provide us with data from third parties, we assume that you are authorised to do so, and that this data is correct. By transmitting data from third parties, you confirm this and ensure that these third parties have been informed of this Privacy Policy. Our own obligations to provide information in accordance with applicable data protection laws remain unaffected by this.

The Swiss Federal Act on Data Protection ("FADP") and the Swiss Data Protection Ordinance ("DPO") generally apply to the processing of your personal data. In some cases, for example if you access our website from a member state of the European Union ("EU") or the European Economic Area ("EEA"), the EU General Data Protection Regulation ("GDPR") and, if applicable, other national laws of your country also apply. Where specific reference is made to an article of the GDPR, this refers exclusively to the processing of data of persons residing in the EU or the EEA.

Quantoro Technologies GmbH is responsible for the data processing described in this data protection declaration, unless otherwise communicated:

Quantoro Technologies AG
Räspweg 11
8126 Zumikon
Switzerland
E-mail address: info@quantoro.com
Website: www.quantoro.com

We primarily process personal data that you transmit to us or that we collect when operating our Website. We may also receive personal data from third parties. The processed personal data may originate from the following categories:

1. Technical data (cookie identifier, IP address, etc.);
2. Communication data (telephone number, e-mail address, etc.);
3. Master data (name, address, date of birth, etc.);
4. Contract data (contractual services to be provided, contract duration, etc.);
5. Behavioural and preference data (use of the website, selection of products and services, etc.);
6. Particularly sensitive data or special categories of personal data (biometric data, information about your health, etc.);
7. Other data (photos, videos, sound recordings, etc.);

If we ask for your consent for certain processing (e.g. for the processing of particularly sensitive personal data), we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time with effect for the future by sending an e-mail to info@quantoro.com.

Where we do not ask you for your consent, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (pursuant to Art. 6 para. 1 lit. b GDPR) or the processing is necessary due to other legitimate interests of us or third parties and there is no reason to assume that you have an overriding interest in non-processing (pursuant to Art. 6 para. 1 lit. f GDPR), in particular in order to pursue the purposes described below and to be able to carry out corresponding measures.

If we receive particularly sensitive data, we may also process your data based on other legal bases, e.g. in the event of disputes due to the necessity of processing for any litigation or the enforcement or defence of legal claims.

We process your data in connection with communication with you and for the establishment, administration and processing of contractual relationships. In addition, we may process data for marketing purposes, for the assertion of legal claims, for defence in legal disputes, for relationship management, consulting services, market research, and product development, as well as for compliance with laws, instructions and recommendations from authorities and internal regulations. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations.

1. Use of our Website

With regard to the use of our Website, the following purposes of data processing arise in particular: 

• Logfiles

When you visit our Website, we may automatically record general technical visit information in so-called log files. The browsers and versions used, the operating system used by the accessing system, the website from which an accessing system accesses our Website, the sub-websites that are accessed on our Website, the date and time of access to our Website, the IP address of the device used to visit the Website, the Internet service provider of the accessing system and other similar information that can be used to prevent attacks on our systems can be recorded. 

These log files may be collected and processed for the purpose of enabling the use of our Website (establishing a connection), ensuring and increasing the security and stability of our systems in the long term, enabling the optimisation of our Website and for internal statistical purposes. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The aforementioned log files are regularly deleted after two weeks and only stored for longer in the event of a cyberattack until the incident has been clarified.

• Newsletter

You can register for our newsletter. We process the data collected in the process in order to inform you about us, our services and products, general developments in the industry and other news by means of a newsletter. You can unsubscribe from the newsletter at any time by sending an email to info@quantoro.com or by clicking the "Unsubscribe" button in the newsletter.

• Contact form, chat and e-mail contact

You can contact us using the contact form, chat or e-mail. We process the data collected in this way in order to check your enquiry, contact you and, for example, arrange an appointment. Further information - in particular the content of the request communicated - is communicated expressly on a voluntary basis and with your consent in the case of general enquiries, Art. 6 para. 1 lit. a GDPR or in the case of (pre-)contractual enquiries on the basis of Art. 6 para. 1 lit. b GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your enquiry. Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, your request has been fully processed and no further communication with you is required or desired by you. Please note that in the case of (pre-)contractual enquiries, we may be subject to statutory retention obligations and may only be able to delete your data once these have expired.

• User account

You can open a user account on our Website. We process the data collected to identify you and provide you with an overview of your orders and the contracts concluded with you in this context. We may also use the data to communicate with you. The legal basis for processing is Art. 6 para. 1 lit. b GDPR.

• Online orders

You can order products and services from us online. We process the data collected in the process in order to process your order and deliver the desired products or services to you. The legal basis for processing is Art. 6 para. 1 lit. b GDPR.

• Online applications

You can apply for a job with us online. We process the data collected in the process in order to store, analyse, allocate and forward your application and thus handle the application process. In particular, CVs and data provided for the application may contain details of particularly sensitive data. If we conclude an employment contract with you, we will process the data as part of this. 

• Cookies

Cookies are small pieces of information that can be used to uniquely identify your browser and in which further information such as user settings can be stored. When you visit our Website, technically necessary cookies are automatically stored on your end device. We only use cookies other than technically necessary cookies with your prior express consent. Such cookies can help us to make your visit to the website easier, more pleasant and more meaningful. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. We use the following cookies:

• - Technically necessary cookies: These cookies are absolutely necessary for the functioning of our Website and cannot be deactivated in our systems.
• - Functionality cookies: These cookies enable the provision of improved functions and personalisation. They may be set by us or by third parties whose services we use on our Website.
• - Analysis cookies: These cookies allow us to count visits and identify traffic sources in order to determine and improve the performance of our Website.
• - Marketing cookies: These cookies and other tracking technologies enable us to show you personalised advertising.
 


You can set your browser in the respective browser settings so that cookies are automatically blocked. However, this may result in some areas of the Website not working.

We will inform you about cookies and similar technologies when you first visit our website and offer you the opportunity to access and adjust your current cookie settings on our website at any time. The legal basis for processing is Art. 6 para. 1 lit. a GDPR.

• Tracking and analysis tools

We use various technical systems, mainly from third-party providers such as Google Analytics or Mailchimp, to measure and analyse the use of our Website and our newsletter. We process the data collected in this way for the purpose of designing our Website and newsletter in line with requirements and optimising them on an ongoing basis. These tracking and analysis tools use cookies and similar technologies; please check the section on cookies for more information on their use on our Website. 

It is possible that the third-party providers may draw conclusions about your identity from the data for their own purposes, create personal profiles and link this data to any user accounts you may have. If you consent to the use of the corresponding services and their cookies, you explicitly consent to such processing, which may also include the transfer of personal data (in particular usage data for the website and app, device information and individual IDs) to the USA and other countries.

• Pages in social networks

We use pages on social networks to share information about us, our services and other news. We also use these pages to communicate with you and third parties. 

When you visit our pages on social networks or interact with us, we receive data about you. We process this data for communication, marketing purposes and market research. We may process content published by you ourselves. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. For further information on the processing carried out by the platform operators, please refer to the platforms' data protection notices. There you can also find out in which countries they process your data, what rights of access, erasure and other rights of data subjects you have and how you can exercise these or obtain further information.

We use plugins. When you access a link to one of our pages on social networks, a direct connection is established between your browser and the server of the social network in question. This enables us to offer certain functions on the pages.

2. Contractual relationships with customers, suppliers and other business partners 

In order to fulfil our contractual obligations, we process master data (e.g. names and addresses as well as contact data), contract data (e.g. services used, names of contact persons, payment information) of customers, suppliers and other business partners with regard to the best possible fulfilment of our contractual obligations and services in accordance with Art. 6 para. 1 lit. b GDPR as well as for invoicing and communication purposes.

We may automatically evaluate certain of your personal characteristics ("profiling") if we want to determine preference data, but also to determine abuse and security risks, carry out statistical analyses or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioural and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics.

In certain situations, for reasons of efficiency and consistency of decision-making processes, it may be necessary for us to automate relevant discretionary decisions with legal effects or potentially significant disadvantages ("automated individual decisions"). In this case, we will inform you accordingly and take the measures required under applicable law.

We treat your personal data confidentially and only disclose it to the third parties listed in this Privacy Policy. This disclosure takes place in connection with our contracts, the Website, our services and products, our legal obligations or to safeguard our legitimate interests and the purposes listed above under letter E) .

We use external service providers for various administrative activities. These external service providers may gain access to your personal data due to their activities, whereby they generally are contractually obliged to treat your personal data confidentially. To this end, we have concluded data processing contracts with them where necessary.

In particular, we may disclose your personal data to the following recipients:

1. Trustee in connection with bookkeeping and the preparation and dispatch of invoices;
2. Tax consultant, if this should be necessary for the preparation of the tax return;
3. Logistics service providers in connection with the dispatch of our products;
4. Banks and insurance companies, insofar as this is necessary in connection with our contracts;
5. Our Group companies; 
6. IT service companies that provide the software programmes and services we use and manage the website and related services (e.g. web hosts, newsletter providers, tracking and analysis tool providers);
7. Debt collection agencies, if we have to assert our claims by way of debt collection;
8. law firms, especially in the event of a dispute;
9. Credit card acquirer, if you use our paid services;
10. Social media companies if you access a link to one of our social media profiles via plugins;
11. Offices, courts and other authorities if we are legally obliged or authorised to do so or if this appears necessary to protect our interests;
12. other service providers involved in the specific case. 

We only pass on your data to the listed third parties for these purposes if:

• - you have given your express consent in accordance with Art. 6 para. 1 lit. a and, if applicable, Art. 9 para. 2 lit. a GDPR for particularly sensitive data;
• - the disclosure pursuant to Art. 6 para. 1 lit. b and, if applicable, Art. 9 para. 2 lit. b GDPR is necessary for the establishment and performance of a contractual relationship;
• - there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR;
• - the disclosure pursuant to Art. 6 para. 1 lit. f GDPR is necessary to safeguard the legitimate interests of us and/or third parties and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

We are also authorised to transfer your personal data to companies abroad, provided that this is done for the purpose of data processing in accordance with letter E) above. If this is a country outside Switzerland, the EU or the EEA and no adequate legal data protection is ensured, we contractually oblige the recipient to comply with the applicable data protection regulations. For this purpose, we generally use the standard contractual clauses of the European Commission, which are available here https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj, or the Swiss-U.S. Data Privacy Framework.  

You have the right to assert your data protection rights at any time and, upon request, to obtain information as to whether we are processing the data in question. You also have the right to request that we return the data you have provided to us in a commonly used format (right to data portability). The legal basis for this is Art. 15 para. 3 GDPR. On request, we will also forward the data to a third party of your choice. 

You also have the right to have incorrect data corrected and, within the scope of the GDPR, to have your data completed, as well as the right to have your personal data deleted at any time, provided that this does not conflict with any statutory retention obligation or authorisation that allows us to process the data. In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your data. 

Data processing may be objected to on grounds relating to the particular situation of the data subject. This general right to object applies to all processing purposes described in this Privacy Policy that are processed on the basis of our legitimate interest. If we process your data for the purpose of direct marketing, you have the right to object at any time in accordance with Art. 21 para. 2 GDPR. 

You also have the right to enforce your claims in court or to lodge a complaint with the competent data protection authority regarding the processing of your personal data. The competent data protection authority for Switzerland is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb/en/home.html).

In the case of data processing operations to which you have consented, you can revoke your consent to the processing of personal data at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

You can contact us for the aforementioned purposes via the following e-mail address: info@quantoro.com. We may request proof of your identity in order to process your requests.

We use suitable technical and organisational security measures to protect your personal data stored by us against unintentional, unlawful or unauthorised manipulation, deletion, alteration, disclosure or use, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously adapted and improved in line with technological developments. We accept no liability for the loss of data or its access and use by third parties.

We also take data protection within the Company very seriously. Our employees and the service companies we commission have been sworn to secrecy and to comply with applicable data protection regulations.

As a registered user, access to your user account is only possible after entering your personal password. You should always treat your access data confidentially and log out of your user account when you have finished communicating with us, especially if the end device you are using is not used exclusively by you.

We only store your personal data for as long as is legally required or necessary for the purpose of processing. In the case of analyses, we store your data until the analysis has been completed. We retain contractual data for longer, namely at least as long as the contractual relationship exists and at most as long as limitation periods for possible claims by us run or statutory or contractual retention obligations are prescribed. Retention obligations that oblige us to retain data arise from accounting and tax regulations. According to these regulations, business communications, contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

We reserve the right to update and amend this privacy policy at any time without prior notice. The current version published on our website applies. We therefore recommend that you visit our website regularly to check for any updates. If the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

Quantoro Technologies AG, 01.08.2025