01 Scope of this policy
This policy applies to this website and to personal data that MONVIQ processes when you contact us, work with us, or apply to join our field network. It explains what data is processed, why, on what legal basis, and how long it is kept.
MONVIQ is established in Switzerland and processes personal data primarily under the revised Swiss Federal Act on Data Protection (revDSG). Where processing falls within the territorial scope of the GDPR - for example when we address clients or partners in the EU or EEA - the corresponding GDPR provisions apply in addition.
02 Controller and contact
- Controller
- MONVIQ
- Address
- Am Tych 2A, 4665 Oftringen, Switzerland
- marija.krcmarevic@monviq.ch
- Responsible person
- Marija Krčmarević, Founder & Managing Partner
Requests concerning personal data can be sent to the address above, marked for the attention of the responsible person. We answer them free of charge and within the statutory period.
03 Principles we follow
Personal data is processed in line with the principles set out in the revDSG and the GDPR:
- Lawfulness, good faith and proportionality in every processing operation.
- Purpose limitation - data is used only for the purpose stated when it was collected.
- Data minimisation - we ask for what a task requires, and nothing beyond it.
- Accuracy - data is kept correct and corrected without delay when it is not.
- Storage limitation - data is deleted or anonymised once its purpose is fulfilled.
- Integrity and confidentiality - appropriate technical and organisational security measures.
04 Categories of personal data
Depending on how you interact with MONVIQ, we may process:
- Contact data - name, company, role, email address, telephone number, postal address.
- Communication content - the content of enquiries, emails and messages you send us, and our replies.
- Contract and billing data - agreements, orders, invoices and payment records in client relationships.
- Technical data - IP address, browser and device type, operating system, referring page, date and time of access.
- Usage data - pseudonymised information about how pages are used, where cookies requiring consent have been accepted.
05 Purposes and legal bases
The table below summarises why we process personal data and on what basis. Where a GDPR provision is named, it applies in addition to the revDSG whenever the GDPR is applicable.
| Purpose | Data | Legal basis |
|---|---|---|
| Operating, delivering and securing the website | Technical data, server logs | Overriding legitimate interest (revDSG Art. 31) · Art. 6(1)(f) GDPR |
| Answering enquiries and preparing offers | Contact data, communication content | Pre-contractual measures and legitimate interest · Art. 6(1)(b) and (f) GDPR |
| Performing and administering client contracts | Contact, contract and billing data | Performance of a contract · Art. 6(1)(b) GDPR |
| Measuring and improving how the website is used | Pseudonymised usage data | Consent · Art. 6(1)(a) GDPR |
| Meeting accounting, tax and other legal obligations | Contract and billing data | Legal obligation · Art. 6(1)(c) GDPR |
06 Server log files
Each time a page is requested, the hosting infrastructure automatically records technical data: IP address, date and time, the page requested, the referring page, browser and operating system. This data is required to deliver pages, keep the service stable and detect misuse.
Log data is not merged with other sources and is not used to identify individual visitors.
07 Enquiries by form and email
If you contact us through the contact form or by email, the data you provide - name, email address, telephone number where given, and the content of your message - is processed in order to answer you and, where relevant, to prepare an offer.
We keep this correspondence for as long as the enquiry is being handled and for as long as statutory retention obligations require. Email is not an inherently secure channel; for confidential information, please ask us for an alternative before sending it.
08 Cookies and analytics
This website uses cookies that are strictly necessary for it to work. Cookies that are not necessary - for example analytics or marketing cookies - are only set once you have given consent, and that consent can be withdrawn at any time. Which cookies are used, and for how long, is set out in the Cookie Policy.
09 Recipients and processors
Personal data is disclosed to third parties only where this is necessary, where you have consented, or where the law requires it. Categories of recipients are:
- IT, hosting and infrastructure providers who operate this website on our behalf.
- Email, communication and collaboration providers used in our day-to-day work.
- Accountants, auditors and legal advisers bound by professional confidentiality.
- Authorities and courts, where a legal obligation requires disclosure.
Providers acting on our instructions are engaged as processors under a written agreement that binds them to the same level of protection.
10 Data transfers abroad
Personal data is processed in Switzerland and in the European Economic Area wherever possible. Where a provider processes data in another country, we ensure an adequate level of protection - through a country recognised as adequate, through standard contractual clauses, or through another legally recognised safeguard.
11 Retention
We keep personal data only for as long as the purpose for which it was collected requires, or for as long as a statutory retention period applies. In Switzerland, business and accounting records are generally kept for ten years.
Once the purpose is fulfilled and no retention obligation remains, data is deleted or anonymised.
12 Data security
MONVIQ applies appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful disclosure. These include encrypted transport (TLS) for this website, access on a need-to-know basis, and confidentiality obligations for everyone working with us.
No transmission over the internet can be guaranteed to be entirely secure. We keep our measures current, but a residual risk cannot be excluded.
13 Your rights
Subject to the conditions and exceptions of the applicable law, you have the right to:
- Ask whether we process personal data about you, and obtain access to it.
- Have inaccurate data corrected.
- Have data deleted, where no ground for keeping it remains.
- Ask for processing to be restricted.
- Object to processing based on a legitimate interest.
- Receive data you provided in a common electronic format, or have it transferred.
- Withdraw consent at any time, with effect for the future.
- Not be subject to a decision based solely on automated processing that has a significant effect on you.
To exercise a right, write to marija.krcmarevic@monviq.ch or to the postal address above. We may ask for proof of identity before answering, so that data is not disclosed to the wrong person.
You also have the right to lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), and in the EU or EEA the supervisory authority of your country of residence.
14 Changes to this policy
This policy is adapted whenever our processing or the legal framework changes. The version published on this page is the one that applies; the date at the top of the document shows when it was last revised.