Legal

Privacy Policy

Last updated: July 2026. Created with heyData. In case of discrepancies, the German version prevails.

1. Introduction

In the following, we provide information about the processing of personal data

on our website www.ella-group.io
on our social media profiles
in the context of application procedures
outside the website (e.g. when data is passed on to recipients).

Personal data is any information relating to an identified or identifiable natural person, e.g. their name or email address.

1.1 Contact details

The controller within the meaning of Art. 5 lit. j of the Swiss Federal Act on Data Protection (FADP) is Ella Media AG, Metallstrasse 9A, Zug, Switzerland, email: office@ella-group.io. We are legally represented by Michael Keusgen.

Our data protection advisor can be reached via heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, email: datenschutz@heydata.eu.

1.2 Disclosure abroad

Where we transfer personal data to service providers or other third parties outside Switzerland, the security of the data during transfer is in most cases guaranteed by decisions of the Swiss Federal Council pursuant to Art. 16 para. 1 FADP. According to these decisions, the legislation in the respective country ensures an adequate level of protection. The Federal Council has determined such adequacy for the states, territories, specific sectors within a state and international bodies listed in Art. 8 para. 1 of the Ordinance on Data Protection (DPO) in conjunction with Annex 1. These can be accessed at https://www.bj.admin.ch/bj/de/home/staat/datenschutz/internationales/anerkennung-staaten.html.

This is the case for the following states:

Germany
Andorra
Argentina
Austria
Belgium
Bulgaria
Canada (Adequate data protection is deemed to be ensured where the Canadian federal act “Loi sur la protection des renseignements personnels et les documents électroniques” of 13 April 2000 applies in the private sector, or where the law of a Canadian province that largely corresponds to that federal act applies. The federal act applies to personal data collected, processed or disclosed in the course of commercial activities, regardless of whether the entities concerned are organisations such as associations, partnerships, individuals or trade unions, or federally regulated businesses such as installations, works, undertakings or business activities falling within the legislative competence of the Canadian Parliament. The provinces of Québec, British Columbia and Alberta have enacted legislation that largely corresponds to the federal act; the provinces of Ontario, New Brunswick, Newfoundland and Labrador and Nova Scotia have enacted legislation that largely corresponds to that act in the area of health data. In all Canadian provinces, the federal act applies to all personal data collected, processed or disclosed by federally regulated businesses, including data relating to employees of those businesses. The federal act also applies to personal data transferred to another province or another country in the course of commercial activities.)
Cyprus
Croatia
Denmark
Spain
Estonia
Finland
France
Gibraltar
Greece
Guernsey
Hungary
Isle of Man
Faroe Islands
Ireland
Iceland
Israel
Italy
Jersey
Latvia
Liechtenstein
Lithuania
Luxembourg
Malta
Monaco
Norway
New Zealand
Netherlands
Poland
Portugal
Czech Republic
Romania
United Kingdom
Slovakia
Slovenia
Sweden
Uruguay

In other cases (e.g. where no adequacy decision exists), the legal basis for the transfer of data is, as a rule and unless we indicate otherwise, standard data protection clauses. These are a set of rules approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and form part of the contract with the respective third party. Pursuant to Art. 16 para. 2 lit. d FADP, they ensure the security of the data transfer. Many providers have given contractual guarantees that go beyond the standard contractual clauses and protect the data beyond them. These include, for example, guarantees regarding the encryption of data or an obligation on the third party to notify data subjects if law enforcement authorities seek access to data.

1.3 Rights of data subjects

Data subjects generally have, among others, the following rights vis-à-vis us with regard to the personal data concerning them:

the right to information as to whether personal data about them is being processed,
the right to receive the personal data they have disclosed to us,
the right to rectification,
the right to object to the processing.

2. Newsletter

We reserve the right to inform customers who have already used our services or purchased goods from us about our offers from time to time by email or by other means, provided they have not objected to this. The processing is carried out for the purpose of direct marketing. Recipients of such communication can object to the use of their email address or other communication data for advertising purposes at any time and at no additional cost, for example via the link at the end of each email or by emailing the address stated above.

We also process the open and click rates of our newsletters to understand which content is relevant to our recipients. This serves to improve our direct marketing.

We use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for email marketing. The provider is a recipient of personal data within the scope of the processing described. Further information can be found in the provider’s privacy policy at https://legal.hubspot.com/privacy-policy.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3. Data processing on our website www.ella-group.io

3.1 Informational use of the website

When the website is used for informational purposes only, i.e. when site visitors do not separately submit information to us, we collect the personal data that the browser transmits to our server in order to ensure the stability and security of our website. This serves to ensure the IT security of the website.

This data includes, for example:

IP address
date and time of the request
time zone difference to Greenwich Mean Time (GMT)
content of the request (specific page)
access status/HTTP status code
volume of data transmitted in each case
website from which the request originates
browser
operating system and its interface
language and version of the browser software.

This data is also stored in log files.

3.2 Data on third-party devices

Via our website, we process data on third-party devices by means of telecommunications transmission within the scope described in the preceding and following sections.

Visitors can refuse this processing, e.g. by making the corresponding settings in their browser and thereby blocking or deleting cookies.

3.3 Web hosting and provision of the website

Our website is hosted by cPanel. The provider is WebPros International, LLC d/b/a cPanel (cPanel), 2550 North Loop W., Suite 4006, Houston, TX 77092. In doing so, the provider processes the personal data transmitted via the website, some of which is also mentioned in other sections of this privacy policy, e.g. content data, usage data, meta/communication data or contact data. The provider is therefore a recipient of the data. Further information can be found in the provider’s privacy policy at https://cpanel.net/privacy-policy/. The processing is a prerequisite for us to be able to offer a website and present ourselves externally.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3.4 Booking appointments

Site visitors can book appointments with us on our website. For this purpose, we use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for appointment scheduling. The provider is a recipient of personal data within the scope of the processing described. When you book an appointment, you are redirected to the provider’s booking page meeting.hubspot.com.

We process the data generated in this context in order to plan and conduct the appointments and to offer prospective customers a user-friendly way of arranging appointments.

Further information can be found in the provider’s privacy policy at https://legal.hubspot.com/privacy-policy. The provider processes personal data in the EU.

Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3.5 Technically necessary cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser on a site visitor’s device. Cookies help to make the offering more user-friendly, effective and secure. Where data is processed in this context, this is done for the purpose of providing customers and other site visitors with a functioning website. Specifically, we use technically necessary cookies for the following purpose or purposes:

cookies that store language settings and that are set for the playback of media content

3.6 Third-party providers on the website

3.6.1 Google Analytics

We use a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for analytics. The provider is a recipient of personal data within the scope of the processing described. Further information can be found in the provider’s privacy policy at https://business.safety.google/privacy/.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3.6.2 HubSpot

We use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for analytics, marketing automation and lead generation. The provider is a recipient of personal data within the scope of the processing described. Further information can be found in the provider’s privacy policy at https://legal.hubspot.com/privacy-policy.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3.6.3 Google Tag Manager

We use a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for managing website tags. The provider is a recipient of personal data within the scope of the processing described. The service itself does not collect cookies and does not process personal data; rather, it triggers other tags (such as Google Analytics), which in turn may process personal data. Further information can be found in the provider’s privacy policy at https://business.safety.google/privacy/.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

3.6.4 heyData

We use a data protection seal provided by heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany (privacy policy: https://heydata.eu/datenschutzerklaerung) in order to provide website visitors with confirmation of our data protection compliance. The provider is a recipient of personal data within the scope of the processing described.

The provider processes personal data in Germany. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

4. Data processing on social media platforms

We maintain a presence on social media networks in order to present our organisation and our services there. The operators of these networks regularly process their users’ data for advertising purposes. Among other things, they create user profiles from users’ online behaviour, which are used, for example, to display advertising on the networks’ pages and elsewhere on the internet that matches users’ interests. To this end, the operators of the networks store information about usage behaviour in cookies on users’ computers. It also cannot be ruled out that the operators combine this information with other data. Further information, as well as guidance on how users can object to processing by the site operators, can be found in the privacy policies of the respective operators listed below. It is also possible that the operators or their servers are located abroad, so that they process data there. This may give rise to risks for users, e.g. because it becomes more difficult to enforce their rights or because government bodies may access the data.

When users of the networks contact us via our profiles, we process the data provided to us in order to respond to the enquiries.

4.1 Instagram

We maintain a profile on Instagram. The operator is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The privacy policy is available here: https://help.instagram.com/519522125107875.

4.2 YouTube

We maintain a profile on YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The privacy policy is available here: https://policies.google.com/privacy.

4.3 LinkedIn

We maintain a profile on LinkedIn. The operator is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The privacy policy is available here: https://www.linkedin.com/legal/privacy-policy. An option to object to data processing is available via the advertising settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.4 Spotify

We embed a podcast player provided by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden on our website. The provider is a recipient of personal data within the scope of the processing described. To protect your data, the player is deactivated by default (opt-in loading). Only when you actively consent is the player loaded and personal data (such as your IP address) transmitted to the provider. Further information can be found in the provider’s privacy policy at https://www.spotify.com/legal/privacy-policy/. The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

5. Data processing relating to job applicants

When individuals apply to us for open positions (which we have advertised ourselves or which we advertise on third-party websites) or submit unsolicited applications, we process their data for the purposes of the application procedure.

We may also contact interesting candidates directly regarding a position. In this case, we process their master data (e.g. name), contact details (e.g. email address) and other data that may be relevant to the specific position.

Recipients of the data are service providers engaged in the context of the application procedure (e.g. processors in the context of recruiting) and providers of cloud software that we use. Recipients that we can currently identify are listed below in the section “Recipients of data”.

We ask applicants to refrain from including information on political opinions, religious beliefs and similarly sensitive data in their CV and cover letter. Such information is not required for an application. If applicants nevertheless provide such information, we cannot prevent its processing.

If applicants have given us their consent to use their data for future application procedures as well, we also process their data for the purpose of conducting further application procedures.

6. Data processing outside the website

6.1 Purposes of processing

We process personal data for the purposes stated below or elsewhere in this document (e.g. under “Recipients of data”):

provision of contractual services and fulfilment of contractual obligations
making contact (e.g. by email or telephone)
communication
responding to enquiries
IT security measures
direct marketing
requesting and taking into account feedback
security measures in our office

6.2 Recipients of data

Recipients of data are service providers engaged by us (e.g. processors), providers of cloud software that we use, and other external bodies. Recipients that we can currently identify are listed by name below. However, the list is not to be understood as exhaustive.

6.2.1 Google Cloud

We use a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) for cloud storage. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

6.2.2 Google Cloud

We use a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) as a platform-as-a-service, as infrastructure-as-a-service and as serverless computing environments. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.3 Microsoft 365 (auf Servern in der EU)

We use a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for cloud storage, for drafting documents and for workplace collaboration. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, third parties, users, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.4 Microsoft Azure

We use a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) as a platform-as-a-service, as infrastructure-as-a-service and as serverless computing environments. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.5 OneDrive for Business

We use a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for workplace collaboration and for cloud storage. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.6 Zoom

We use a service provided by Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (privacy policy: https://zoom.us/de-de/privacy.html) for video conferencing. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, third parties.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.7 Google Meet

We use a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) for video conferencing. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.8 Slack

We use a service provided by Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin 2, Ireland (privacy policy: https://slack.com/intl/de-de/trust/privacy/privacy-policy) for communication. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.9 Jira

We use a service provided by Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for project management. The provider is a recipient of personal data within the scope of the processing described. Data subjects are prospective customers, employees, third parties, users, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.10 Confluence

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.11 Miro

We use a service provided by RealtimeBoard, Inc., 3651 Lindell Road Suite D1134 Las Vegas, NV 89103, USA (privacy policy: https://miro.com/legal/privacy-policy/) for project management and for workplace collaboration. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, third parties.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.12 Skribble

We use a service provided by Skribble AG, Förrlibuckstrasse 190, CH-8005 Zurich, Switzerland (privacy policy: https://www.skribble.com/de-de/datenschutz/) for electronic signatures. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, prospective customers.

6.2.13 AHVeasy

We use a service provided by IGS GmbH, Geltenwilenstrasse 16, CH-9000 St.Gallen (privacy policy: https://www.ahveasy.ch/datenschutz/) for employee management and for insurance management. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees.

6.2.14 Abacus

We use a service provided by Abacus Business Solutions GmbH, Mies-van-der-Rohe-Strasse 6, 80807 München (privacy policy: https://www.abacus-solutions.de/datenschutz/) for accounting and for employee management. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, prospective customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.15 SwissLife

We use a service provided by Swiss Life Lebensversicherung SE, General-Guisan-Quai 40, Postfach, CH-8022 Zurich (privacy policy: https://www.swisslife.ch/de/ueber-uns/footer/privacy.html) for insurance management. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.16 HubSpot

We use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/de/privacy-policy) for analytics, for lead generation and for marketing automation. The provider is a recipient of personal data within the scope of the processing described. Data subjects are prospective customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.17 HubSpot

We use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/de/privacy-policy) for customer relationship management. The provider is a recipient of personal data within the scope of the processing described. Data subjects are customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.18 DocuSign

We use a service provided by DocuSign Germany GmbH, Neue Rothofstrasse 13-19, 60313 Frankfurt (privacy policy: https://www.docusign.de/unternehmen/datenschutz) for electronic signatures. The provider is a recipient of personal data within the scope of the processing described. Data subjects are customers, prospective customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.19 MongoDB Cloud

We use a service provided by MongoDB, Inc., 1633 Broadway, 38th Floor, New York, NY 10019, USA (privacy policy: https://www.mongodb.com/legal/privacy-policy) as a database-as-a-service. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.20 Google Cloud

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.21 DocuSign

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.22 Google Analytics

We use a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (privacy policy: https://business.safety.google/privacy/) for analytics. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.23 Twilio

We use a service provided by Twilio Ireland Limited, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland (privacy policy: https://www.twilio.com/legal/privacy) for telephone calls and for sending emails. The provider is a recipient of personal data within the scope of the processing described. Data subjects are prospective customers, users, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.24 Azure OpenAI Service

We use a service provided by Microsoft Ireland Operations, Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for artificial-intelligence functions. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.25 Mailjet

We use a service provided by Mailjet GmbH, Friedrichstraße 68, 10117 Berlin (privacy policy: https://www.mailjet.de/privacy-policy/) for sending emails. The provider is a recipient of personal data within the scope of the processing described. Data subjects are customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.26 OpenAI API

We use a service provided by OpenAI Ireland Limited, at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (privacy policy: https://openai.com/policies/privacy-policy) for artificial-intelligence functions and for API development. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.27 Anthropic Claude

We use a service provided by Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA (privacy policy: https://www.anthropic.com/legal/privacy) for application development and for artificial-intelligence functions. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.28 HubSpot

We use a service provided by HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/de/privacy-policy) for workflow automation. The provider is a recipient of personal data within the scope of the processing described. Data subjects are customers, third parties.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.29 Claude.ai

We use a service provided by Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA (privacy policy: https://www.anthropic.com/legal/privacy) for artificial-intelligence functions. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.30 Abaninja

We use a service provided by Swiss21.org AG, Weissbadstrasse 8b, 9050 Appenzell (privacy policy: https://swiss21.org/datenschutzerklarung/) for cloud storage and for accounting. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, customers.

The provider processes personal data in Switzerland. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.31 Abacus

We use a service provided by Abacus Business Solutions GmbH, Mies-van-der-Rohe-Strasse 6, 80807 München (privacy policy: https://www.abacus-solutions.de/datenschutz/) for accounting. The provider is a recipient of personal data within the scope of the processing described. Data subjects are employees, customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.32 Google Cloud

We use a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) as serverless computing environments, as a platform-as-a-service and as infrastructure-as-a-service. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users, customers, third parties, employees.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.33 Auth0

We use a service provided by Okta, Inc., 100 First Street, San Francisco, California 94105, USA (privacy policy: https://www.okta.com/privacy-policy/) for managing authentication. The provider is a recipient of personal data within the scope of the processing described. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.34 MongoDB Cloud

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

6.2.35 Azure OpenAI Service

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16 paragraph 2 can be found in the section “Disclosure abroad”.

7. Changes to this privacy policy

We reserve the right to amend this privacy policy with effect for the future. The current version is available here at all times.

8. Questions and comments

For questions or comments regarding this privacy policy, please feel free to contact us using the contact details provided above.