zurück

(Version from November 2025)

Protecting your data and handling it responsibly are very important to us. We always treat your data confidentially and process it in compliance with applicable law, in particular the Swiss Data Protection Act and the EU General Data Protection Regulation. In addition, together with our service providers and partners, we protect all data-processing procedures as effectively as possible and in line with the current state of the art.

 

1. Scope


This Privacy Policy (the "Policy") describes how we process your Personal Data when we provide services to you or when you use our services, as well as when you visit our website (the "Website") or the buildagil collaboration platform (the "Platform") or use services as a customer via the Website or Platform.

If you already use our services, this Policy also applies to data about you that we have collected and stored in the past, which we may link and process together with data collected or received in the future.

 

2. Data Controller


B3 digital AG
Philipp Brühwiler
Ilgenstrasse 7
CH-9200 Gossau
E-mail: contact@buildagil.com
Phone: +41 71 552 31 33

 

3. Applicable law and principles


We process all data relating to an identified or identifiable person ("Personal Data") in accordance with the Swiss Data Protection Act ("DPA") and the EU General Data Protection Regulation ("GDPR"). We adhere in particular to the principles of lawfulness, proportionality, purpose limitation, data accuracy and data security.

 

4. Collection and processing of Personal Data


We require certain Personal Data from you in order to provide our services to you. If you do not provide this Personal Data, or only provide it in part, this may mean that we can provide our services only to a limited extent or not at all.

Source of Personal Data

We collect Personal Data directly from you:

 - When you browse our Website, fill in a form, submit an enquiry or otherwise interact with us

 - When you correspond with us electronically

 - When you use our services

 - When you offer or provide services to us

We also collect Personal Data indirectly through your use of the Website or Platform. This includes the use of cookies, pixel technologies and local storage technologies. For non-essential cookies/trackers, we will obtain your prior consent via the relevant banner where required. You may delete or block cookies/trackers in your browser, but this may impair functionality. We also use third-party sources such as professional networks and public registers.

Categories of Personal Data

We process various categories of your Personal Data:

 - Contact and identification data such as last name, first name, function, role, address, e-mail address and telephone number

 - Financial data such as bank details, payment information; and payment history

 - Contract data such as contract type, contract contents, type of products and services, applicable terms and conditions, contract start date, duration, compensation claims, invoicing data and offer limitations

 - Interaction and usage data such as correspondence, chat content, type and scope of use of products and services, information about the end devices used (end device type, device ID, manufacturer, operating system, language, device settings, etc.), information from the assertion of rights and feedback

 - Information regarding the use of the Website and Platform such as Internet pages visited, IP address, cookie information, browser settings, frequency of visits, time and duration of visits, search terms, clicks on content, originating Internet page, information in forms and ratings and comments submitted

Legal basis for the processing of Personal Data

We process your Personal Data on the basis of various legal grounds:

 - Contract: To fulfil our obligations in the context of orders or contracts we have concluded with you

 - Legitimate interests: To provide our services in the best possible way

 - Legal obligations: To comply with certain legal requirements

 - Consent: Your consent given at the time your Personal Data is provided

Purposes of the processing of Personal Data

The purposes of processing your data may include the following:

 - Providing and maintaining our services

 - Improving our services

 - Monitoring the use of our services

 - Providing notification of changes to our services

 - Marketing our services

 - Validating our customers and users

 - Fulfilling contractual obligations

 - Invoicing

 - Providing customer support

Disclosure of Personal Data

We use trusted service providers to process Personal Data and conclude appropriate data processing agreements with them. When transferring Personal Data to recipients in countries without an adequate level of data protection (e.g., the USA), we contractually require the recipient to ensure an appropriate level of data protection (such as through EU Standard Contractual Clauses and/or processing agreements), or we implement suitable technical and organisational measures (including obtaining consent and/or implementing restrictions).

 

Further information on the collection and processing of Personal Data on the Website and the Platform can be found in the Annex.

 

5. Security of Personal Data


We implement extensive and appropriate technical and organisational measures (including firewalls, encryption, access controls, the need-to-know principle, anonymisation and training) to protect Personal Data as effectively as possible. This ensures that only authorised persons have access to this data. Further information on our technical and organisational measures is available at https://www.buildagil.com/en/legal/dpa.

 

6. Retention and deletion of Personal Data


We process and retain Personal Data only for as long as necessary for the purposes mentioned or as required by law. After that, the data is deleted or anonymised.

 

7. Rights


Depending on the applicable law, you have the following rights, which you may exercise with us:

 - To request information about the Personal Data we process about you

 - To request the correction of your Personal Data stored by us

 - To request the restriction of the processing of your Personal Data

 - To request the transfer of your Personal Data stored by us

 - To request the deletion of your Personal Data stored by us

 - To withdraw your consent to the processing of your Personal Data

 - To object to the processing of your Personal Data

 - To lodge a complaint with a supervisory authority

 

You may contact us by e-mail to exercise your rights. The exercise of any of the above rights may result in us having to discontinue the provision of our services to you. For example, this may happen if, due to the restriction or deletion of Personal Data, a service can no longer be provided.

 

8. Supplementary provisions


If individual provisions of this Privacy Policy are invalid or void, the remainder of the Privacy Policy shall not be affected. The resulting gap shall be filled in good faith with a provision that most closely reflects the original purpose. In the event of discrepancies between the language versions, the German version shall prevail.

 

9. Amendments to this information


We reserve the right to amend this Privacy Policy at any time, in particular in the event of new processing activities, legal developments or technologies. The version published on the Website at any given time shall apply.


 

Annex 1 – Collection and Processing of Personal Data on the Website


Visiting the Website/Platform
 

 - Data: IP address, date/time, connection data, operating system, browser, referrer URL

 - Purposes: Provision, stability, security and optimisation of the Website, statistics

 - Legal basis: Legitimate interest

 - Service provider:

    - Hosting: Cmsbox GmbH, Switzerland (https://www.cmsbox.ch/ueber-uns/datenschutz)

    - Hosting: Kreativ Media GmbH, Switzerland (https://www.kreativmedia.ch/en/about/gtc-data-protection/privacy-policy/)

- Necessity: Required

Contact and communication (e-mail, chat, contact form, appointment booking)

 - Data: Contact data, communication/content data, IP address

 - Purposes: Processing enquiries, customer service, follow-up, quality assurance

 - Legal basis: Pre-contractual/contractual measures and legitimate interest

 - Service provider:

    - Chat: Crisp IM SARL, France (https://crisp.chat/privacy)

    - E-mail: Microsoft Ireland Operations Ltd, Ireland (https://www.microsoft.com/privacy/privacystatement)

    - Contact form: TYPEFORM SL, Spain (https://www.typeform.com)

    - Appointment booking: Calendly, Inc., USA (https://calendly.com/legal/privacy-notice)

 - Necessity: Optional

 - Note: Links in chats and forms may lead to external websites or apps that are not operated by us and over whose content, privacy policies and practices, we have no control.

Social media content

 - Data: IP address, connection data, operating system, browser, other data in case of interaction

 - Purposes: Provision/display of external content

 - Legal basis: Legitimate interest

 - Service provider:

    - Posts: LinkedIn Corp., USA (https://www.linkedin.com/legal/privacy-policy)

    - Videos: YouTube LLC, USA (https://www.google.de/intl/policies/privacy)

 - Necessity: Required

 - Note: Links in social media content may lead to external websites or apps that are not operated by us and over whose content, privacy policies and practices we have no control.

Marketing and analysis activities

 - Data: IP address, date/time, operating system, browser, referrer URL, user behaviour, demographic characteristics

 - Purposes: Statistics, user analysis, error analysis, marketing activities, conversion measurement

 - Legal basis: Consent

 - Service provider:

   - Microsoft Clarity: Microsoft Corporation, USA (https://www.microsoft.com/privacy/privacystatement)

   - Google Analytics 4 (GA4): Google Ireland Limited, Ireland (https://www.google.de/intl/policies/privacy)

 - Necessity: Optional


 

Annex 2 - Collection and processing of Personal Data on the Platform


Information on the collection and processing of Personal Data on the Platform can be found at https://www.buildagil.com/en/legal/dpa.