Legal

Privacy Policy

Last updated: 1 January 2025

1. Controller

Premtrace AG, Rue Terrassière 39, 1207 Geneva, Switzerland (“Premtrace”, “we”, “us”) is the data controller for personal data processed through our website and services.

Data Protection Officer contact: privacy@premtrace.ch

2. Legal Framework

This Privacy Policy complies with the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023) and the EU General Data Protection Regulation (GDPR). Switzerland benefits from an EU adequacy decision, meaning Swiss-hosted data satisfies GDPR international transfer requirements.

3. Data We Collect

Service data (B2B clients)

Organization name, billing details, authorized user email addresses, usage logs. Used to provide and improve the Premtrace service.

Screened individuals (public data only)

Premtrace screens only publicly available information. We do not access password-protected accounts, private messages, or any non-public data. Screening is limited to information voluntarily shared in public digital spaces.

Website visitors

IP address (anonymized), page views, referrer, browser type. Collected via privacy-respecting analytics. No cross-site tracking.

4. Data Storage & Hosting

All data is stored exclusively on Swiss and EU-based servers. We do not transfer personal data to non-adequate third countries. Our infrastructure is operated within Switzerland and the European Economic Area.

5. Retention Periods

• Client account data: retained for the duration of the contract plus 5 years (statutory retention).
• Intelligence Digest reports: retained for 12 months from date of generation, unless deleted earlier by the client.
• Website analytics: anonymized aggregate data retained for 24 months.
• Billing records: retained for 10 years per Swiss accounting requirements.

6. Data Subject Rights

Under nFADP and GDPR, you have the right to:

• Access — obtain a copy of your personal data we process.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion where no legitimate retention ground applies.
• Restriction — limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Lodge a complaint — with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your EU supervisory authority.

To exercise any of these rights, contact: privacy@premtrace.ch

7. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These include encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

8. Cookies

Our website uses strictly necessary cookies for session management and anonymized analytics cookies. We do not use advertising or third-party tracking cookies. You may disable cookies in your browser settings; this will not materially affect your use of our marketing website.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated to active clients via email. The “Last updated” date at the top of this page will always reflect the most recent revision.