Privacy Policy for Gordian Analytics SA

1. Purpose of this Privacy Policy

Gordian Analytics SA ("we", "us", "our") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, and use your data when you use our website, services, and software. This policy is designed to comply with the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Controller Information

Gordian Analytics SA
Lausanne, Switzerland

Email: [email protected]

We are the data controller responsible for your personal data under this policy.

3. Data We Process

We may process the following categories of personal data:

  • Technical Data: IP address, browser type, access times, referring URLs.
  • Contact Data: Information provided when contacting us through our forms or other channels.
  • Communication Data: Records of communications via email, phone, or other channels.
  • Master Data: Name, contact information, company name, role/function.
  • Contractual Data: Details related to services rendered, agreements, and transactions.

4. Purpose of Processing

We process your data to:

  • Communicate with you and respond to inquiries.
  • Provide, manage, and improve our services and software.
  • Fulfill contractual obligations.
  • Comply with legal requirements.
  • Conduct internal research and analytics.
  • Protect our rights and prevent fraud.

5. Legal Basis for Processing

We process your data based on:

  • Your consent (Art. 6(1)(a) GDPR);
  • Contractual necessity (Art. 6(1)(b) GDPR);
  • Legal obligations (Art. 6(1)(c) GDPR);
  • Legitimate interests (Art. 6(1)(f) GDPR), such as improving our services and ensuring IT security.

6. Data Sharing

We may share your data with:

  • Service providers (e.g. IT hosting, payment processing);
  • Legal authorities, when required;
  • Business partners, in the context of delivering services.

All third parties are contractually obliged to respect the confidentiality and security of your data.

7. Data Transfers Abroad

Your data may be transferred outside of Switzerland and the EEA. In such cases, we ensure adequate protection through standard contractual clauses or reliance on legal exceptions.

8. Retention of Data

We retain your data as long as required for the purposes for which it was collected, and for legal or operational reasons. Communication and contractual data may be retained up to 10 years.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

10. Your Rights

You have the right to:

  • Access and correct your personal data;
  • Request deletion or restriction of processing;
  • Object to data processing based on legitimate interest;
  • Withdraw consent at any time;
  • Lodge a complaint with a data protection authority.

To exercise these rights, contact us at [email protected].

11. Cookies and Tracking

This marketing site does not use analytics or advertising cookies. We may store a small preference value in your browser's local storage so the cookie notice is not shown again, and our hosting or CDN provider may set essential cookies required to deliver the site. You can clear site data in your browser settings. For more detail, use the on-site cookie notice.

12. Updates to this Policy

We may update this Privacy Policy from time to time. The current version is published on our website and replaces previous versions. Last updated: May 2025