Privacy Policy for aitronos.com

1 Responsible controller

Controller: Aitronos AG, Talweid 16, 8852 Altendorf, Switzerland.

Contact: info@aitronos.com

Data-protection officer: We are not required to appoint a formal data-protection officer. You can reach us at the address above for any data-protection enquiry.

2 Personal data we collect and why

2.1 Information you provide to us

You can reach us by e-mail at info@aitronos.com and we receive whatever you choose to include in your message (typically name, e-mail address and the content of your enquiry). We use it to reply and, where relevant, to prepare or perform a contract (Art. 6 (1) (b) GDPR).

This website also carries forms you can submit directly — our contact form and the request form for a copy of our ISO/IEC 27001 certificate. When you send one, we store what you entered in it (name, e-mail address, company where you give one, and your message) together with the time of submission, in order to answer you and, where relevant, to prepare a contract (Art. 6 (1) (b) GDPR). These submissions are held in Google Cloud Firestore, under the processor terms described in section 4.

We do not store the IP address of a form submission. To limit automated abuse and recognise repeat submissions we keep an irreversible cryptographic hash of it, salted with a secret held only in our server configuration and never stored alongside the data. The address itself is discarded and cannot be recovered from the record. This is done on the basis of our legitimate interest in protecting the service (Art. 6 (1) (f) GDPR / Art. 31 FADP).

2.2 Outbound link for scheduling

Some pages link out to a Google Calendar booking page for scheduling a conversation. It is not embedded in our website — there is no widget and no script from it on any page here, so nothing is shared until you click through. Doing so takes you to a booking page operated by Google as an independent controller, and anything you enter there is governed by Google's own privacy policy. We receive only the booking details you choose to submit.

2.3 Data collected automatically

Like most websites, technical data is recorded when you visit aitronos.com. This includes the IP address, browser type and version, operating system, date and time of access, pages viewed and the referring URL. The site is hosted on Google Cloud Run in the European Union, and this data is processed by Google as our processor on our behalf to deliver the site, ensure its security and prevent abuse, on the basis of our legitimate interest (Art. 6 (1) (f) GDPR / Art. 31 FADP).

2.4 Cookies, analytics and advertising

We do not set any cookies on this website and we do not use analytics, tracking, advertising or marketing tools — no Google Analytics, no Google Tag Manager, no advertising networks, no social-media pixels, no live chat, no session-replay tools. There is no third-party script or embed of any kind on this site, and the typefaces are served from our own servers rather than a font service.

The site keeps a few small preferences in your browser's local storage — your light or dark appearance choice among them — which stay on your device, are never sent to us, and are all strictly necessary for the interface you asked for. Because no consent-requiring technologies are loaded, no consent mechanism is required. Our Cookie Policy lists every item in full.

2.5 External links

Our website links to services we run elsewhere or use — the Aitronos product at chat.aitronos.com, our Trust Center at trust.aitronos.com, our published rate card at pricing.aitronos.com, the Google Calendar booking page above, and the Swiss commercial register linked from our Impressum. None of them is embedded here. Clicking such a link takes you to a site we do not control and may allow that platform to collect personal data about you. We are not responsible for the privacy practices of those sites and recommend that you review their respective privacy policies.

Separately, the connector map on some pages loads brand logos as images from our own API at api.aitronos.com. Your browser requests these directly, so that server receives the same technical data described in section 2.3. It is operated by us under this policy, sets no cookies, and involves no third party.

2.6 Children's privacy

Our services are intended for business users and are not directed at children. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will delete it.

3 Legal basis for processing

• Contract performance / pre-contractual measures (Art. 6 (1) (b) GDPR): when you e-mail us to request a demo or information.
• Legitimate interests (Art. 6 (1) (f) GDPR / Art. 31 FADP): to operate, secure and protect the website. We balance our interest against your rights.
• Legal obligations (Art. 6 (1) (c) GDPR): to meet retention duties or respond to lawful requests by authorities.
• Consent (Art. 6 (1) (a) GDPR): only where you give it explicitly.

4 Data sharing and international transfers

We share personal data only when necessary, when permitted by law, or with your consent. Recipients are limited to:

• Google, acting as a processor, to host and secure the website (Google Cloud Run, European Union) and to store form submissions (Google Cloud Firestore).
• Our e-mail provider, to receive and respond to messages sent to info@aitronos.com.
• Authorities or other third parties where required by law or to protect our rights.

If a provider is located in a country without an adequacy decision (e.g. the United States), we rely on appropriate safeguards such as Standard Contractual Clauses. We do not share data with analytics or advertising vendors because we do not use such tools.

5 Data retention

We retain personal data only as long as necessary for the purpose for which it was collected or as required by law:

• E-mail correspondence is kept for up to 12 months after the last exchange, unless longer retention is required by law.
• Form submissions (contact and certificate requests) are kept for up to 24 months after the last exchange about the enquiry, unless a contractual or legal obligation requires longer. You can ask us to delete yours sooner at any time — see section 6.
• Server / access logs are kept by our hosting provider for a short period (typically up to 30 days) for security purposes and then deleted or anonymised.

No data is retained for analytics or advertising purposes, as no such processing takes place.

6 Your rights

Under the FADP and the GDPR you have the following rights:

• Access — request information about the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where the legal conditions are met.
• Restriction / objection — object to processing or ask that it be restricted.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any of these rights, write to info@aitronos.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent supervisory authority.

7 How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or loss, including TLS encryption in transit, access controls and regular review of our setup. No transmission over the internet can be guaranteed to be 100% secure.

8 Changes to this policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available at aitronos.com/privacy. We will indicate material changes by updating the "Last updated" date above.