Privacy Policy / GDPR
1. Scope and Applicability
This Privacy Policy applies to BilduX, operated by Tecnovy GmbH, Ammerswilerstrasse 19A, 5600 Lenzburg, Switzerland.
It is valid globally for all users and organisations interacting with BilduX, regardless of their location.
2. Data Controller
Tecnovy GmbH is the data controller for all processing activities on BilduX.
Contact: Tecnovy GmbH, Ammerswilerstrasse 19A, 5600 Lenzburg, Switzerland, [email protected].
3. Data Collection
We collect voluntary information such as name, email, profile data, and training preferences when you create an account.
We log usage data including device information, connection timestamps, page interactions, and “last active” status.
Providers and organisations may upload training content, offers, and user-generated materials.
4. Purpose of Processing
Enable account creation, authentication, and personalisation of the platform.
Allow providers and organisations to publish offers, respond to requests, and manage sessions.
Analyse platform usage to improve features, maintain security, and prevent fraud.
5. Legal Basis (GDPR)
Article 6(1)(b) GDPR – Necessary for the performance of a contract (account provisioning, training matchmaking).
Article 6(1)(f) GDPR – Legitimate interests (platform security, usage analytics, service improvement).
Article 6(1)(a) GDPR – Consent (marketing communications, optional analytics, cookies where required).
6. Data Sharing
We may share limited data with service providers (hosting, analytics, customer support) bound by confidentiality obligations.
When organisations and providers interact, relevant details are shared directly between those parties to facilitate offers and sessions.
We do not sell personal data. Transfers outside Switzerland or the EU occur only with appropriate safeguards (e.g., Standard Contractual Clauses).
7. Retention
Account data is stored for the duration of the user relationship.
Upon deletion requests, personal data is erased within 30 days unless legal retention applies.
Aggregated and anonymised usage data may be kept for analytics.
8. Data Subject Rights
Access, rectification, erasure, restriction, objection, and data portability (GDPR Articles 15-22).
Requests can be submitted to [email protected]. We respond within 30 days.
Users may withdraw consent at any time without affecting the lawfulness of prior processing.
9. Security Measures
Encrypted data transmission (HTTPS) and secure storage with access controls.
Role-based permissions, audit logging, and regular security assessments.
Disclosure of incidents to affected users and relevant authorities in accordance with legal obligations.
10. Cookies and Tracking Technologies
BilduX uses essential cookies for authentication and session management.
Analytics or marketing cookies are optional and require consent where required by law.
Preferences can be managed via browser settings or in-platform controls (see Cookie Policy).
11. Updates and Contact
We may update this Privacy Policy to reflect legal or technical changes.
Significant changes will be announced via email or in-app notification.
Questions: [email protected].