Privacy Policy

1. Controller

The controller is Apex Software Solutions GmbH, Luzernstrasse, 6333 Hünenberg See, Switzerland, UID CHE-252.955.545. Privacy-related requests can be sent to info@apexss.ch.

2. Principles of processing

We process personal data only to the extent required to operate our website, communicate with prospects and customers, provide our services, protect our systems and comply with legal obligations. In doing so, we observe applicable principles such as lawfulness, proportionality, purpose limitation and data security.

3. Categories of data processed

• Website and server data: IP address, date and time of access, browser, operating system, pages visited, referrer and technical log data.
• Contact and communication data: name, email address, subject, message and any other information you provide voluntarily.
• Business data: information about companies, contacts, quotations, contracts, projects, invoices and support cases where this arises within a business relationship.
• Technical preferences: the website language selected and information required to deliver the website securely.

4. Purposes of processing

We process personal data in particular to provide and secure the website, respond to enquiries, communicate with customers and prospects, carry out pre-contractual steps and contracts, provide support, analyse errors, prevent misuse, perform accounting, enforce legal claims and comply with statutory obligations.

5. Legal bases

Where the EU General Data Protection Regulation (GDPR) applies, processing is based, depending on the circumstances, on performance of a contract or pre-contractual measures, legal obligations, legitimate interests, consent, or the establishment, exercise or defence of legal claims. Under Swiss data protection law, we process data in accordance with the applicable statutory requirements.

6. Cookies and local settings

This website currently does not include built-in analytics or advertising trackers. The functional cookie apex_lang stores the selected language for up to twelve months. The cookie apex_cookie_consent stores your choice regarding optional external content for up to 180 days. Further details are available in our Cookie Policy. Additional technically necessary server information may be generated by the hosting environment.

7. Contact form and email

If you contact us through the contact form or by email, we process the information you provide in order to handle your request and any follow-up communication. The contact form sends your request to us by email; after successful submission, a confirmation may also be sent to the email address provided. Please do not send sensitive information that is not required to handle your request.

8. Google Fonts

Google Fonts is treated as an optional external service and is loaded only after you allow external media in the cookie settings. After you consent, your browser may connect to Google servers. In particular, your IP address, browser information and technical access data may be transmitted to Google. Depending on the region, the provider is a company within the Google group.

9. Google Maps

A Google Maps map can be loaded in the contact section. The map is disabled by default and is loaded only after you consent to external media. Your browser may then connect to Google. Technical access data, including your IP address, may be transmitted and, depending on your settings and the Google service, cookies or similar technologies may be used. You can change your consent at any time through the cookie settings.

10. External websites and product links

Our website contains links to external services, including product websites such as Re-Direction, risks.app and QRFaktura. Once you open an external link, you leave our website. The operator identified on the destination website is generally responsible for the processing of personal data there, and its privacy information applies.

11. Service providers and recipients

Personal data may be disclosed to service providers and other recipients where necessary for hosting, email, IT operations, security, support, accounting, legal advice or compliance with statutory duties. Such recipients process data subject to the contractual and legal requirements applicable to them.

12. International data transfers

Individual service providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries. Where a country is not recognised as providing an adequate level of data protection, transfers are based, where required, on appropriate safeguards such as standard contractual clauses or on applicable statutory exceptions.

13. Retention

We retain personal data only for as long as required for the relevant purpose, statutory retention obligations apply, legal claims may be asserted or legitimate business interests require retention. Data is then deleted or anonymised where possible and permitted.

14. Data security

We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse and unlawful alteration. Despite such measures, absolute security cannot be guaranteed for data transmissions or IT systems.

15. Rights of data subjects

To the extent provided by law, data subjects may in particular request access, correction, deletion, restriction of processing, data portability or object to processing, and may withdraw consent previously given. We may request suitable proof of identity when handling such a request. Statutory retention obligations and overriding legitimate interests remain reserved.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our website, the services used or legal requirements change. The version published on this website at the relevant time applies.