Privacy Policy

Valid from 7 July 2026

compliag AG (hereinafter “compliag AG”, “we” or “us”) undertakes to process all personal data (hereinafter “personal data”) collected via the website www.compliag.ch in accordance with Swiss data protection law and to implement appropriate security measures. In this privacy policy, we provide you with information, in particular, on what personal data is collected and processed in connection with the use of the website and our business activities, for what purposes it is used, to whom it may be disclosed, and what your rights are in relation to the use of your personal data by compliag AG. Personal data refers to any information relating to an identified or identifiable natural person, e.g. surname, first name, address, email address, date of birth or telephone number. Whether and to what extent such information constitutes personal data within the meaning of the Data Protection Act depends on each individual case. “Processing” means any handling of personal data, such as collection, storage, retention, disclosure or erasure.

By accessing our website and using the services and products we offer, you confirm that you have read this privacy policy carefully and agree to the processing of data as described herein. Any questions regarding this privacy policy may be directed at any time by email to . If you do not agree with this policy, you must refrain from accessing the website and using our services and products.

Who is responsible for your personal data

The entity responsible for the processing of personal data within the meaning of data protection legislation is compliag AG, Kolinplatz 2, 6300 Zug, Switzerland, email:

compliag AG determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at any time by sending an email to .

How we process personal data

All personal data collected by us via the website or by other means is processed in accordance with the Swiss Data Protection Act. We collect and process personal data carefully and for the purposes described in this Privacy Policy.

In accordance with applicable law, we may also use your personal data in ways other than those described in this privacy policy. In such cases, we will provide you with specific privacy notices or communications at the time of collection and, where necessary, seek your consent. We always endeavour, as far as is reasonable, to collect information in anonymised or pseudonymised form so that we cannot identify you.

What personal data do we collect and for what processing purposes?

We collect the following personal data via our website or by other means:

Personal data transmitted automatically through the use of the portal

compliag AG collects and stores information that your browser automatically transmits to us in ‘server log files’ when you visit our website. Data collection is based on your willingness and interest in visiting our website and our legitimate interests in operating the website. This may include the following data:

Browser type and version;
Operating systems used;
Referrer URL (the website visited previously);
Host name of the accessing computer;
Date and time of the server request;
Internet Protocol address (IP address);
Amount of data transferred;
Other similar data and information used for security purposes in the event of attacks on our IT systems.

This personal data is not combined with other personal data and is stored separately from any other personal data submitted by the user. We delete it after three months at the latest.

compliag AG uses the automatically collected personal data for the secure operation and administration of the website or for other lawful purposes that may arise from the circumstances. This may include the following purposes:

To enable the display, operation and functionality of the website;
To ensure the stability and security of the system;
To improve and protect our services;
For statistical purposes in the event of attacks on the network infrastructure on which the website is hosted.

Personal data collected and generated through communication with us

We collect personal data that you provide to us via the website or otherwise by sending a message to our contact address, by email, via the online contact form, by post, by telephone or via any other means of communication. This may include the following personal data:

Company name, title, first name, surname, address, email address, telephone number, your employer, your position, and further information about you;
your message, communication or enquiry.

The provision of this personal data is always voluntary, based on your consent or within the context of a potential future contractual relationship with us. Please note that without the provision of the necessary personal data, we will not be able to advise you, or at least not to the desired and required standard.

We will use the personal data you provide to process and respond to your enquiry, or to process it for the legitimate purposes arising from the circumstances. This may include the following purposes:

To answer your questions or requests regarding our products and services as effectively as possible, to ask you questions, and to provide you with additional information relating to our products and services, tailored to your enquiry or interests;
To communicate with you and provide you with the best possible information you may require from us before, during or after the termination of a contract;
To arrange a consultation with you, as requested;
To comply with legal or other regulatory requirements and internal policies;
To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings;
For other lawful purposes, where such processing arises from the circumstances or was specified at the time of collection.

Personal data collected in connection with a paid service

We collect and generate personal data when you use our paid products and services. This may include the following personal data:

Company name, title, first name, surname, address, email address, telephone number, bank details, and further information about you.
Your message, communication or enquiry.

We will process the personal data you provide for the proper fulfilment and administration of a contractual relationship, or for legitimate purposes arising from the circumstances. This may include the following purposes:

Establishing, managing and processing contractual relationships;
To fulfil the service you have requested;
To process payment for our services, e.g. for the provision of our services;
For statistical and analytical purposes to develop new and/or improve existing products and services;
To comply with statutory or other regulatory requirements and internal regulations;
To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings;
For other lawful purposes, where such processing arises from the circumstances or was specified at the time of collection.

Personal data processed in connection with internal organisational, management and administrative tasks

We process your personal data in order to carry out our internal administrative and management tasks efficiently and in accordance with the rules. This may include the following personal data:

Your personal business details: surname, first name, employer, position, business address, business email address, business telephone number, and other personal data about you;
Communication and correspondence, including briefings;

We require this personal data for the proper establishment and performance of a contractual relationship or for the fulfilment of legal obligations and rights. Without this personal data, we are generally unable to fulfil our contractual and legal obligations or to enforce our rights.

We use the personal data collected from you to fulfil our contractual obligations and services, as well as our legal obligations, which may include the following purposes:

For document management, storage, sharing of documents, filing and retention;
For communication purposes (e.g. by email, letter, telephone or video meetings);
To conduct video meetings, video conferences and webinars;
To host our websites and our emails;
To fulfil our contractual obligations;
To comply with legal or other regulatory requirements and internal regulations;
For other lawful purposes, where such processing arises from the circumstances or was specified at the time of collection.

These purposes form the legal basis for our legitimate interests in proper and effective organisation and administration to ensure and fulfil contractual and legal obligations.

For our websites, we use the hosting provider Infomaniak Network AG, Rue Eugène-Marziano 23, 12270 Geneva, Switzerland, https://www.infomaniak.com/de/agb/regelung-allgemeine-schutz-daten.

For payment processing, preparing quotations and recording customer history, we use systems operated on our own servers.

For document management, storage, sharing and archiving (e.g. of videos and images), we use systems operated on our own servers.

We use systems operated on our own servers to conduct video meetings, video conferences and webinars.

We use systems operated on our own servers for the exchange of data, the storage and sending of emails.

Personal data collected in connection with a job application

We collect and generate personal data which you actively and voluntarily provide to us, either by sending us your application documents or in the run-up to the possible conclusion of an employment contract with us. This may include the following personal data:

Personal data that you provide to us as part of the application process, such as title, surname, first name, address, email address, telephone number, date of birth, marital status, photograph, language, CV, qualifications, employment references, school qualifications, education, further training, experience, your skills and abilities, and other information about you;

Personal data that we have collected during our interview and assessment process;

Publicly available professional personal data about you published on business and employment-related social networks (“e.g. LinkedIn or XING”).

We process this personal data for the following purposes:

To process your application;
To assess your qualifications and personal experience;
To provide you with information regarding your application and to support your application as effectively as possible;
To contact third-party references provided by you in order to assess your past performance, provided you consent to this.

Once the recruitment process has been completed, your application data will be deleted within three months if you were not successful in the recruitment process, unless we have your express consent to retain the application data for a longer period.

On what legal basis do we process personal data about you?

The processing of this personal data is generally based on the following legal grounds:

your consent, provided it can be withdrawn at any time (e.g. when you sign up for our newsletter and other marketing communications)
to fulfil a contract with you or with a view to entering into a contract with you (e.g. when you purchase a product)
to comply with a legal obligation (e.g. for tax purposes or for the purposes of judicial investigations or proceedings); or
to safeguard our legitimate interests (e.g. the protection and security of our services, systems and assets; compliance with legal, regulatory and contractual obligations; the assertion, exercise or defence of legal claims; maintaining and efficiently organising our business operations; improving and developing our services; and selling and marketing our services)

If the processing is based on your consent or our legitimate interests, you may withdraw your consent at any time or object to such processing by contacting us directly at . Please note, however, that withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

To whom do we disclose your personal data

compliag AG takes the necessary measures to ensure that only our authorised staff and agents who possess the necessary knowledge have access to your personal data, in order to fulfil the purposes for which your personal data was collected.

We may disclose your personal data to the following categories of recipients in accordance with the purposes and legal bases for processing described above:

Other companies within the group;
Service providers who process personal data on our behalf and in accordance with our instructions;
Customers, partners, suppliers, insurers and other business partners;
Media agencies, the general public, including visitors to the company’s websites and social media platforms;
Industry organisations, associations and other bodies;
Purchasers or prospective purchasers of business units, companies or other parts of the Group;
Courts, arbitration tribunals, law enforcement agencies, regulatory authorities, lawyers and other parties in potential or actual legal proceedings, where this is necessary to comply with the law, to seek advice, or to establish, exercise or defence of rights or legal claims, or where we deem it appropriate.

We select our partners and data processors carefully and only where there is sufficient assurance that they have appropriate technical and organisational measures in place in accordance with legal requirements. Furthermore, we ensure that our data processors process your personal data only in the manner in which we are permitted to do so. Furthermore, our data processors may only process personal data on our documented instructions. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfil the purpose for which your personal data was collected, unless otherwise required by law.

Transfer of personal data abroad and to countries outside the EEA

The personal data we collect is generally processed and stored by us in Switzerland. In addition, we may also transfer, store and process your personal data at locations outside Switzerland, e.g. in countries where our business partners (such as in Germany or Austria), data processors, other agents, public authorities and other bodies are located. Data transfers to countries within the European Economic Area (EEA) are considered secure, as they provide an adequate level of data protection. Where personal data is transferred to countries that do not ensure an adequate level of data protection, we ensure an adequate level of data protection by putting in place appropriate safeguards, such as contractual safeguards, or the transfer of personal data takes place on the basis of your explicit consent, in connection with the conclusion or performance of a contract with you, or in connection with the establishment, exercise or defence of legal claims.

For further information about our appropriate safeguards, please contact us by email at .

How long do we retain your personal data?

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected. For this reason, we will delete or anonymise personal data as soon as it is no longer required to fulfil those purposes, subject, however, to (i) any applicable legal or regulatory requirements to retain personal data for a longer period (e.g. for tax or accounting purposes), or (ii) where we have an overriding interest (e.g. an interest in retaining evidence to establish, exercise and/or defence of actual or potential legal claims, investigations or similar proceedings, including the preservation and presentation of relevant information within the framework of the applicable contractual or statutory warranty and limitation periods).

On this basis, we generally process personal data in accordance with the following rules and obligations:

The personal data automatically transmitted by you through the use of our website (see point 3.1) for the purposes of displaying, operating and ensuring the functionality of the portal will be deleted within three to six months.
The personal data you provide to us in connection with the use of our services and products offered on our portal, or which you otherwise send to us via the email contact address (see section 3.2.), will generally be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for which the data is stored no longer applies (e.g. once your enquiry has been fully processed).
For contract-related personal data (including business documents and communications), we retain personal data for the duration of the contractual relationship and for a further ten years following the termination of the contractual relationship, unless (i) a shorter or longer statutory retention period applies in a specific case, (ii) retention is required for evidential purposes or for another valid reason under applicable law, or (iii) the data must be deleted earlier (e.g. because the data is no longer required or we are obliged to delete the relevant data).

Cookies, Google services

When you access or use the website, we may place so-called cookies – small text files – or similar tools on your computer. We use these cookies to recognise you as a user of the website, to personalise content, to improve the website’s performance and to enhance its user-friendliness.

a) Categories of cookies we use

Depending on their function and purpose, the cookies we use can be divided into the following categories: essential cookies, functional cookies, performance cookies and advertising cookies.

Essential cookies: Cookies may be strictly necessary for the operation of a website (e.g. to store logins or other user input, or for security reasons).
Functional cookies: These cookies serve a variety of purposes relating to the presentation, functionality and performance of a website, and in particular to improve visitors’ experience and enjoyment of the website. They enable a website to store information you have previously provided (e.g. username, location or language selection) and offer visitors improved, more personalised features. Functional cookies are used, for example, to remember details such as your login credentials. These cookies cannot track your activity on other websites.
Performance cookies: These cookies are used to collect information about how a website is used – for example, how visitors arrived at our website, which pages a visitor accesses most frequently, how you navigated our website during your visit, and whether you received any error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of activity on the website and to improve the website’s performance.
Advertising cookies enable us or a third-party provider to display adverts on our website or on third-party websites featuring products that the user may like, so that the adverts the user sees may be more relevant to their preferences or interests (sometimes referred to as ‘targeting cookies’). They may also be used to measure the effectiveness of advertising and promotional campaigns.

These cookies may be placed by us or by a third party on our behalf. Further information about cookies and their use can be found at: http://www.allaboutcookies.org/.

We use cookies on the basis of our legitimate interests in analysing and regularly improving our website, as well as using the statistics gathered to regularly improve our offering and make it more interesting for you. In certain cases, the basis for this is your consent, which is the case, for example, when tracking your browsing behaviour on our websites and/or analysing this data. Further information on the cookies we use can be found in our cookie settings in the “Cookie Consent Management Tool”, through which you can also give or withdraw your consent for specific cookies at any time by enabling or disabling them.

b) Google Business Profiles and Google Maps

We use Google Business Profiles for our company so that we are listed on Google Search and in Google Maps. These business profiles provide interested parties with information about our opening hours, locations and news, as well as our product portfolio. This also gives you the opportunity to write and view reviews about our company or our services.

Google Maps is a mapping service provided by Google. This enables us to display interactive maps directly on our website and allows you to use the map function conveniently.

When you use Google Maps, information about your use of our website, including your IP address, may be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Google Maps to third parties where required by law or where such third parties process this data on Google’s behalf.

Google will not associate your IP address with any other personal data held by Google. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that data and user profiles from visitors to the website could be processed by Google for other purposes over which we have no control.

Further information on the purpose and scope of data collection and its processing by Google, as well as further details regarding your rights in this regard and settings to protect your privacy, can be found at: www.google.de/intl/de/policies/privacy.

The legal basis for the processing stems from your consent, based on the voluntary information you provide to generate a route planner, and our legitimate interests in displaying our location and ensuring that the location specified on our website is easy to find.

c) Management of cookies

If you do not wish to accept these cookies, you can also change your browser settings so that certain cookies are deleted from your computer or device, or are not stored there, without your consent. Each browser manages cookie settings differently. This is usually described in the ‘Help’ menu of each browser. You can find this information for the most common browsers via the following links:

Internet Explorer: support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: support.mozilla.com/en-US/kb/Cookies
Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=de
Safari: support.apple.com/de-ch/HT201265.

Please note, however, that if you disable cookies in your browser settings, you may no longer be able to use all the features of the websites.

Email communications and newsletters for promotional purposes

If you subscribe to our newsletter, we will use your email address to send you information about our services and other commercial communications (e.g. announcements of events, competitions, promotions and surveys) that may be of interest to you. For security reasons, we use the so-called double opt-in procedure for newsletter subscriptions. Once you have signed up, we will send a confirmation email to the email address provided during registration, containing a link which you must click to definitively confirm that you wish to receive the newsletter.

You can unsubscribe from these newsletter emails at any time by clicking on the link labelled ‘Unsubscribe from this list’ at the bottom of each email, or by contacting us directly by email at .

No automated decisions, including profiling, with legal effect

We do not make any decisions about you that are based solely on automated processing – including profiling – and which have legal effects on you or similarly significantly affect you.

Data security and email communication

We take appropriate technical and organisational measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised use, disclosure or access.

Unfortunately, the transmission of personal data via the internet or by email is not entirely secure. Although we take appropriate security measures to protect your personal data, we cannot guarantee the security of any personal data you transmit to our websites or via email; any such transmission is at your own risk. For this reason, we would like to draw your attention to the fact that email messages containing sensitive personal data should not be sent unencrypted, as you would otherwise be exposing yourself to the risk of a lack of security and compromised confidentiality on the internet. Furthermore, you are free to send us your personal data by other means at any time.

Links to third-party websites

Please note that if you click on a link to a third-party website (e.g. Google, social media or other websites), you will be redirected to a website over which we have no control, and our privacy policy will no longer apply. Your browsing and interaction on another website are subject to the terms of use and the privacy policies and notices of these third-party websites. Furthermore, we cannot guarantee the accuracy or up-to-date nature of these links.

We recommend that you read the terms of use and the privacy policies and notices of other websites carefully before submitting personal data via this website. We are not responsible or liable for the content of the information or the data processing carried out by such third-party websites.

Children

Our website is not intended for children, and we do not knowingly collect personal data from children under the age of 16, unless we have the express consent of their parents. If we are notified or otherwise become aware that personal data relating to a child under the age of 16 has been collected inappropriately, we will take all reasonable steps to delete that personal data.

What are your rights

You may request information from compliag AG, upon providing proof of your identity, as to whether personal data relating to you is being processed. Furthermore, you have the right to request the rectification, erasure or restriction of personal data relating to yourself, as well as to object to the processing of your personal data. Where processing is based on your consent or our legitimate interests, you may withdraw your consent at any time or object to such processing by contacting us directly by email at . In certain cases, you have the right to receive personal data generated whilst using online services in a structured, commonly used and machine-readable format, so that it can be further used and transferred to any third-party provider.

Requests in this regard should be addressed to compliag AG via the following email address: . compliag AG reserves the right to restrict your rights within the framework of applicable law and, for example, not to disclose comprehensive information or to delete personal data. Please note that even following a request to delete your personal data, we may be required to retain all or part of it in accordance with statutory and contractual retention obligations. The deletion of your personal data may result in you no longer being able to use our services.

If we reject your request or you are not satisfied with our handling of it, you are also entitled to lodge a complaint with the relevant supervisory authority and to seek a legal remedy from the competent authority. The competent authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern (http://www.edoeb.admin.ch).

Changes to our Privacy Policy

This privacy policy may be amended from time to time without prior notice. Unless otherwise stated, all amendments to this privacy policy take effect when they are published on the website. The version currently published on our website shall apply.