en

Impressum

DATA PROTECTION

Contact

ExpertVision AI AG,  Chamerstrasse 176, CH-6300 Zug
CHE-281.249.834
http://expertvision.ai

Privacy Policy

The protection of your privacy and the confidentiality of your personal data are of particular concern to us. We therefore explain to you below which of your data we process, for which purpose and what rights you have in this context.

We comply with the applicable data protection laws, in particular the Swiss Data Protection Act (FADP) and the associated Data Protection Ordinance (FODP). Where applicable, we also comply with the requirements of the European General Data Protection Regulation (GDPR).

We are generally data protection subcontractors of our customers. Therefore, the corresponding data protection declaration of the respective customer applies to those data subjects. The storage location of our software solution is in the European Union.

1.  Data controller and contact

The data controller responsible for the processing of the personal data according to this privacy policy is: ExpertVision AI Ltd, Chamerstrasse 176, 6300 Zug.

If you have any questions or concerns in connection with this privacy policy, the following person can be contacted: ExpertVision AI Ltd, Chamerstrasse 176, 6300 Zug, Alejandro Garcia, .

Our data protection officer in accordance with Art. 37 GDPR is: ExpertVision AI Ltd, Chamerstrasse 176, 6300 Zug, Alejandro Garcia, .

2.  Categories of personal data, nature and purpose of processing

We primarily process personal data that we receive from our customers, other business partners and other people involved in the context of our business relationship with them, and we process the data in order to carry out our business activities.

We process the following categories of personal data:

·       From customers in terms of communication: contact details of contact person (name, surname, e-mail address, role, company name, location); payment, transaction, and billing information; communications and interactions you have with us.

·       From customers in terms of providing our services as a data processor to our customers (as data controllers): video footage of the surveillance systems of our customers picturing individuals (who can also be minors) who are in the store or on the premises, such as their customers, (face, size, clothing, assumed gender, approximate age, mobile phone code, credit or debit card data including pin code, license plate number, car type, car color) and their employees (face, size, clothing, assumed gender, approximate age); details of offenders, if the offender is caught or recognized (name, surname, address, phone number); details of witnesses, if provided by the individual (name, surname, address, e-mail address, phone number); user details of private devices accessing our system, such as employees or security personnel (IP address, cookie identifiers, device ID’s, login data, location data).

·       From business partners: name, surname, e-mail address, role, company name, location, payment, transaction, and billing information, communications and interactions you have with us.

·       As part of operating our website: IP addresses, user behavior with necessary cookies.

·       When analyzing and marketing via our website: IP addresses, user behavior with advanced cookies (if the corresponding consent has been given).

We process personal data as follows: storage and use for processing customer and business relationships.

The purpose of the processing is:

·       For customer data in terms of communication: the provision of our services and customer care.

·       For customer data in terms of providing our services as a data processor to our customers (as data controllers): the provision of our services for customers and (if expressly agreed) software enhancement.

·       For other business partners: the processing of the business relationships.

·       For operating the website: presentation of our website.

·       For analysis and marketing of the website: Ensuring a comprehensive and appropriate customer offering.

Insofar as the GDPR is applicable, the legal basis for the processing is as follows:

For customer data and business partner data when providing our services: Art. 6 para. 1 lit. b GDPR.

For customer data when enhancing our software: Art. 6 para. 4 GDPR in conjunction with the original legal basis, which is provided by the customer (data controller).

When operating the website: Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest is to ensure the website’s functionality.

For website analysis and marketing: Art. 6 para. 1 lit. a GDPR.

Insofar as you have given us consent to process your personal data for specific purposes, we will process your personal data within the scope of and based on this consent, unless we have another legal basis and require one.

Personal data is stored until the statutory retention periods have expired (generally 10 years for accounting and other records) and then deleted. Without a statutory retention requirement, personal data is deleted as soon as we no longer need it to achieve the purpose.

3.  Transfer of personal data

Your personal data will only be transferred to external recipients for the purposes stated above. In particular, your data will be transferred to the following categories of recipients:

Customer data in terms of communication:

·       Transfer of your data to our IT service provider and other external service providers who support us in the processing of our business activities, such as external developers or labelers.

·       Transmission of your payment data to our payment service provider.

Customer data in terms of providing our services as a data processor to our customers (as data controllers):

·       Transfer of your data to our IT service provider and other external service providers who support us in the processing of our business activities, such as external developers or labelers.

Data of business partners:

·       Transmission of your data to our IT service provider and other external service providers who support us in the processing of our business activities.

Data concerning website:

·       Transfer of your data to IT service providers and other external service providers who support us in the processing of our business activities.

The recipients may only process the personal data passed on to them for the purposes stated above.

Your personal data will generally be processed and transmitted in Switzerland, the European Union or a country with an adequate level of data protection in accordance with Art. 16 para. 1 FADP and Art. 45 GDPR.

If a transfer to another third country takes place, we ensure that a guarantee is in place in accordance with Art. 16 para. 2 FADP or Art. 46 ff. GDPR. If the GDPR is applicable, we will provide a copy of the guarantee on request.

In this context, we would like to point out that we use the customary services of Microsoft Inc. (USA), Google Cloud EMEA Ltd. (Ireland), HubSpot Inc. (USA), Deel Inc. (USA), Altabel Group (Lithuania) and other software solution providers to carry out our business activities. These providers sometimes store the data in global data centers. In certain cases, processing from third countries that do not offer an adequate level of data protection cannot be ruled out. In this case, we ensure that the measure is in line with the applicable data protection law in accordance with Art. 16 Para. 2 FADP and Art. 46 ff. GDPR).

4.  Processing in the context of our website

We typically use cookies and similar techniques on our website that can be used to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored by the web browser you are using on your computer or mobile device when you visit our website. If you visit this website again, we can recognize you even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your visit to the website (session cookies), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) (permanent cookies). You can set your browser to reject cookies, to only store them for one session or to delete them prematurely. Most browsers are set to accept cookies by default. If you block cookies, certain functionalities of the website(s) may no longer work.

In our marketing e-mails, we sometimes also include visible and invisible image elements, to the extent permitted, which allow us to determine whether and when you have opened the e-mail, so that we can measure and better understand how you use our offers and how we can tailor them to you. You can block this in your e-mail program; most are set up to do this by default. By using our websites and consenting to receive marketing e-mails, you consent to the use of these technologies. If you do not want this, you must set your browser or e-mail program accordingly, provided that this cannot be customized via the settings.

We sometimes use Google Analytics on our websites. This is a service provided by Google Ireland (based in Ireland), which relies on Google LLC (based in the United States) as a processor (both “Google”), www.google.com), which we use to measure and evaluate the use of the website (not personal). Permanent cookies are used for this purpose, which are set by the service provider. We have configured the service so that the IP addresses of visitors to Google in Europe are shortened before being forwarded to the USA and thus cannot be traced back. We have switched off the “Data sharing” and “Signals” settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google may use this data to draw conclusions about the identity of visitors for its own purposes, create personal profiles and link this data to the Google accounts of these individuals. If you have registered with the service provider yourself, the service provider also knows you. In this case, the service provider is responsible for processing your personal data in accordance with its data protection provisions. The service provider only informs us how our respective website is used (no information about you personally).

We use so-called plug-ins from social networks such as Facebook, X, Youtube, Pinterest or Instagram on our websites. This is visible to you in each case (typically via corresponding icons). We have configured these elements so that they are disabled by default. If you enable them (by clicking on them), the operators of the respective social networks can register that you are on our website and where and can use this information for their own purposes. The processing of your personal data is then the responsibility of that operator in accordance with their data protection provisions. We do not receive any information about you from them.

5.  Rights of the data subjects

Data subjects have the rights applicable to them under the applicable data protection law (in particular the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to object, the right to data portability, the right to lodge a complaint with a supervisory authority). To exercise your rights, you can contact the person(s) named at the beginning of this privacy policy at any time.

6.   Changes to the privacy policy

We may amend this privacy policy at any time without notice. The current version published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will notify you of any update by e-mail or other appropriate means.

Version 1.0 / Date 02/10/2025