Your Data
1. Scope
This Your Data Policy explains how BilduX (operated by Tecnovy GmbH, Switzerland) manages personal and organisational data on the platform.
It supplements the Privacy Policy by focusing on retention, deletion, and data sharing practices.
2. Data Collection and Categories
We collect and process the following data:
- User accounts: name, email, login data.
- Organisation data: company name, addresses, request descriptions.
- Provider data: company details, logos, training listings, frameworks.
- Activity data: search queries, course/session views, clicks (stored for 12 months).
- Messages: content exchanged between organisations and providers (stored for 12 months).
- Technical data: IP address, device/browser information, cookies.
3. Data Retention
Account data: retained as long as the account is active.
Deleted accounts: data retained for 6 months before final erasure, unless legal obligations require longer storage.
Logs and activity data: stored for 12 months for security and analysis purposes.
Legal obligations: data related to invoices or contracts may be retained longer to comply with statutory requirements.
4. Data Deletion
Users, organisations, and providers may delete their accounts at any time.
When an account is deleted:
- User accounts → profile and preferences are erased after 6 months.
- Organisation accounts → requests are cancelled, active connections are notified.
- Provider accounts → trainings and sessions are removed, provider page is deactivated.
Inactive courses or sessions may be unpublished or removed by BilduX.
For further details on account deletion, see User Agreement.
5. Data Sharing with Third Parties
We may share data with trusted third parties for operational purposes:
- Hosting provider: located in Switzerland.
- Analytics provider: Google Analytics (may transfer data outside EU/CH under SCC safeguards).
- Email/newsletter provider: for newsletters and promotional communication.
- No data is shared for payment purposes, as BilduX does not process payments.
6. International Data Transfers
Data is primarily stored in Switzerland and the EU.
Where data is transferred outside the EU/CH (e.g., Google Analytics), safeguards such as Standard Contractual Clauses are applied.
7. User Rights (GDPR/DSGVO)
As a user, you have the right to:
- Access your data.
- Rectify incorrect data.
- Request deletion (“right to be forgotten”).
- Restrict processing.
- Data portability.
- Object to processing.
- File a complaint with a supervisory authority.
Requests may be sent to: [email protected].
8. Security of Your Data
We apply appropriate technical and organisational measures (encryption, access control, monitoring) to protect your data.
However, no system is entirely immune to risks (see Security Policy).
9. Updates to this Policy
This policy may be updated to reflect changes in technology, legal obligations, or platform features.
Users will be informed of significant changes.