Privacy Policy

1. Introduction

Netgen Switzerland AG ("we", "us", or "our"), located at Seestrasse 356, 8038 Zürich, Switzerland, operates the N.Cockpit platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our internal project management platform.

N.Cockpit is an internal business tool used exclusively by Netgen Switzerland AG for managing projects, resources, and operations with our employees, contractors, and clients. We do not sell products or services through this platform.

2. Data Controller

Netgen Switzerland AG
Seestrasse 356
8038 Zürich
Switzerland
Website: netgen.io/ch

For any privacy-related inquiries, please contact us at: privacy@netgen.host

3. Information We Collect

3.1 Personal Information

We may collect personal information that you voluntarily provide when using N.Cockpit, including:

• Name and contact information (email address, phone number)
• Employment information (job title, department, work schedule)
• Professional skills and qualifications
• Time tracking and project allocation data
• Account credentials and authentication data

3.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Log data (IP address, browser type, access times)
• Device information (device type, operating system)
• Usage data (features accessed, actions taken within the platform)

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP):

• Contract Performance: Processing necessary for the performance of employment or contractor agreements
• Legitimate Interests: Processing necessary for our legitimate business interests in managing projects and resources
• Legal Obligations: Processing required to comply with legal obligations (e.g., tax and employment laws)
• Consent: Where required, we obtain your explicit consent before processing specific data

5. How We Use Your Information

We use the collected information for the following purposes:

• Managing employee and contractor work allocations and schedules
• Tracking project progress, time entries, and resource utilization
• Generating internal reports on project profitability and performance
• Facilitating communication between team members and clients
• Ensuring platform security and preventing unauthorized access
• Complying with legal and regulatory requirements

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data with:

• Service Providers: Third-party service providers who assist in operating our platform (e.g., hosting, authentication services)
• Integrated Services: When you connect third-party services (such as JIRA, Tempo, or Bexio) for synchronization purposes
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Active employee/contractor data: Retained during the business relationship
• Time tracking and project data: Retained for 10 years for accounting purposes
• Account data after termination: Deleted or anonymized within 90 days unless legally required

8. Your Rights

Under the GDPR and Swiss data protection law, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@netgen.host.

9. International Data Transfers

Our platform uses Supabase for data hosting and authentication. Data may be processed in data centers located within the European Union. Switzerland has been recognized by the European Commission as providing adequate data protection. For any transfers outside the EU/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls and authentication mechanisms
• Regular security assessments and monitoring
• Secure password hashing and multi-factor authentication options

11. Cookies and Tracking

N.Cockpit uses only essential cookies required for the platform to function, including:

• Authentication session cookies
• Security tokens to prevent cross-site request forgery

We do not use marketing or analytics tracking cookies. We do not track users across other websites.

12. Third-Party Integrations

N.Cockpit may integrate with the following third-party services upon user configuration:

• Atlassian JIRA (project management synchronization)
• Tempo (time tracking synchronization)
• Bexio (accounting integration)
• Google OAuth (authentication)

When using these integrations, the respective third-party privacy policies also apply.

13. Children's Privacy

N.Cockpit is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

15. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
www.edoeb.admin.ch

European Union:
You may contact the supervisory authority in your EU member state of residence.

16. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

Netgen Switzerland AG
Seestrasse 356
8038 Zürich
Switzerland
Email: privacy@netgen.host
Website: netgen.io/ch