1. Data Controller
The entity responsible for the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) is: Monitoris AG Buckhauserstrasse 34 8048 Zurich Switzerland Email: hello@monitoris.ai
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with applicable legal requirements and in line with the principles of lawfulness, purpose limitation, data minimisation, and confidentiality. This Privacy Policy explains which data we collect, how we use it, and which rights you are entitled to.
3. Collection of Personal Data
4. Purposes of Data Processing
We process personal data in particular for the following purposes:
- provision and operation of our services
- processing of documents and content within the digital back office
- communication with users
- support and troubleshooting
- improvement and further development of our offerings
- compliance with legal and regulatory obligations
5. Use of Artificial Intelligence
Monitoris uses AI-powered systems to efficiently support administrative processes, in particular for the analysis, structuring, and processing of content and documents. Content provided by users may be processed by AI models where required for the respective function. Depending on the use case, external AI services may also be used via secure interfaces. Processing is carried out strictly for the purpose of providing the respective functionality. Customer data is not used to train AI models unless explicitly stated otherwise or required by law. Further information on the AI technologies used, model types, hosting locations, and principles governing the use of AI can be found in our separate AI Transparency Statement.
6. Legal Bases for Processing
Personal data is processed on one or more of the following legal bases:
- consent of the data subject
- necessity for the performance of a contract
- compliance with legal obligations
- legitimate interests, in particular to ensure the operation, security, and further development of our services
7. Disclosure of Data to Third Parties
Personal data may be disclosed to third parties where this is necessary for the provision of our services, in particular to:
- hosting and infrastructure providers
- IT and support service providers
- providers of analytics or AI services
- public authorities, where legally required
8. Data Transfers Abroad
Depending on the services used, personal data may also be processed outside Switzerland or the European Union. In such cases, we ensure an adequate level of data protection through appropriate safeguards such as standard contractual clauses or comparable guarantees.
9. Data Retention Period
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. Data may be deleted or anonymised in particular in the context of system adjustments, further development, or termination of service use.
10. Data Security
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, or misuse. Despite all security measures, complete security of data transmission over the internet cannot be guaranteed.
11. Rights of Data Subjects
Within the scope of applicable data protection laws, you have in particular the following rights:
- access to personal data being processed
- rectification of inaccurate data
- deletion of personal data
- restriction of processing
- withdrawal of consent
- lodging a complaint with a competent data protection supervisory authority
12. No Use by Children
Our services are not directed at persons under the age of 16. We do not knowingly collect personal data from children.
13. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time. The current version is available on our website.