Privacy Policy

Responsible Party

koivu GmbH

Kesselhaldenstrasse 57A
9016 St. Gallen
Switzerland

Data Processing Principles

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Data is processed lawfully, in good faith, and proportionately.

Data We Collect

Website Visits

We automatically collect technical data (IP address, browser type, operating system, access time, pages visited) necessary for website operation. This data is deleted after 7 days.

Contact

When you contact us via email or contact form, we store your name, email address, and message content to process your inquiry. Data is deleted after the inquiry is resolved.

Business Relationships

For contractual relationships, we process contact information (name, email, phone), company data, contract details, and communication records. Data is retained for 10 years in accordance with legal requirements.

Purpose of Data Processing

Data is processed solely for:

• Website operation and security
• Responding to inquiries
• Contract fulfillment and service delivery
• Legal compliance

Data Sharing

Personal data is only shared with third parties:

• With your explicit consent
• When required for contract fulfillment
• When legally obligated

Our technical infrastructure providers are located in Switzerland or the EU and comply with applicable data protection regulations.

Cookies

We use only technically necessary cookies for website functionality. These cookies store no personal data and are automatically deleted when you close your browser. We do not use tracking cookies, marketing cookies, or analytics tools.

Data Security

We implement appropriate technical and organizational measures including:

• SSL/TLS encryption
• Access restrictions
• Regular security updates
• Staff training

Your Rights

You have the right to:

• Access: Request information about your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Objection: Object to data processing

Supervisory Authority

You have the right to lodge a complaint with:

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1
3003 Bern
Switzerland

B2B Service Specifics

As a provider of external validation services for financial institutions, we do not process end-customer data of our clients. We operate as a regular business customer using our own corporate accounts. All monitoring data (transaction logs, screenshots, timestamps) contains no personal data of third parties.

Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available on our website.