1. Data Controller
The entity responsible for the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) is: Monitoris AG Buckhauserstrasse 34 8048 Zurich Switzerland Email: hello@monitoris.ai
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with applicable legal requirements and in line with the principles of lawfulness, purpose limitation, data minimisation, and confidentiality. This Privacy Policy explains which data we collect, how we use it, and which rights you are entitled to.
3. Collection of Personal Data
4. Purposes of Data Processing
We process personal data in particular for the following purposes:
- provision and operation of our services
- processing of documents and content within the digital back office
- communication with users
- support and troubleshooting
- improvement and further development of our offerings
- compliance with legal and regulatory obligations
5. Use of Artificial Intelligence
Monitoris uses AI-powered systems to efficiently support administrative processes, in particular for the analysis, structuring, and processing of content and documents. Content provided by users may be processed by AI models where required for the respective function. Depending on the use case, external AI services may also be used via secure interfaces. Processing is carried out strictly for the purpose of providing the respective functionality. Customer data is not used to train AI models unless explicitly stated otherwise or required by law. Further information on the AI technologies used, model types, hosting locations, and principles governing the use of AI can be found in our separate AI Transparency Statement.
6. Legal Bases for Processing
Personal data is processed on one or more of the following legal bases:
- consent of the data subject
- necessity for the performance of a contract
- compliance with legal obligations
- legitimate interests, in particular to ensure the operation, security, and further development of our services
7. Disclosure of Data to Third Parties
Personal data may be disclosed to third parties where this is necessary for the provision of our services, in particular to:
- hosting and infrastructure providers
- IT and support service providers
- providers of analytics or AI services
- public authorities, where legally required
We do not sell personal data. All service providers are contractually obliged to treat personal data confidentially and to process it solely in accordance with our instructions.
8. Data Transfers Abroad
Depending on the services used, personal data may also be processed outside Switzerland or the European Union. In such cases, we ensure an adequate level of data protection through appropriate safeguards such as standard contractual clauses or comparable guarantees.
9. Data Retention Period
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. Data may be deleted or anonymised in particular in the context of system adjustments, further development, or termination of service use.
10. Data Security
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, or misuse. Despite all security measures, complete security of data transmission over the internet cannot be guaranteed.
11. Rights of Data Subjects
Within the scope of applicable data protection laws, you have in particular the following rights:
- access to personal data being processed
- rectification of inaccurate data
- deletion of personal data
- restriction of processing
- withdrawal of consent
- lodging a complaint with a competent data protection supervisory authority
Requests can be submitted at any time to hello@monitoris.ai.
12. No Use by Children
Our services are not directed at persons under the age of 16. We do not knowingly collect personal data from children.
13. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time. The current version is available on our website.
14. Open Banking / Processing of Bank Data (bLink)
As part of our services, Monitoris AG may – with the user's explicit consent – access certain bank account and payment information via the bLink/Open Banking interfaces. The data is used exclusively to support internal back-office and financial processes. This includes, in particular:
- checking whether invoices issued via Monitoris have been paid
- updating invoice and payment status
- avoiding unnecessary payment reminders for invoices that have already been paid
- the processing and reconciliation of incoming and outgoing payments
- the initiation of payments (PSS) for company expenses and supplier invoices on behalf of the respective company
- as well as the improvement of administrative and accounting processes
Monitoris processes bank data exclusively within the scope of the access granted by the user and only for the agreed purposes. Data will not be disclosed to unauthorized third parties. The user can revoke or terminate the connection to their bank or the granted consent at any time. After revocation or termination of the connection, Monitoris will cease access to the bank data and – unless statutory retention obligations apply – delete or anonymize the corresponding connection and access data. Processing is carried out in compliance with applicable data protection laws and the security and compliance requirements of the bLink platform.