Effective Date: August 20, 2025
1. Controller
Parowls Software GmbH
Tiehenhofstrasse 2B, Wädenswil, Switzerland, 8820
Email: contact@parowls.com
Phone/WhatsApp: +41 (0) 43 589 67 61
Responsible Person: Paul Milner
Company Number: CHE-267.553.984 (Commercial Register of the Canton of Zurich)
2. Scope
This Privacy Policy explains how we collect, use, and protect your personal data when you use our websites, software, and services. It applies to all visitors, customers, and business partners.
3. Legal Basis
We process personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), based on:
- Performance of a contract (e.g., software licenses or service agreements).
- Compliance with legal obligations (e.g., Swiss tax or commercial register requirements).
- Legitimate interests (e.g., improving our services, ensuring security).
- Consent, where required (e.g., for marketing or non-essential cookies).
4. Data We Collect
We may collect:
- Contact Details: Name, email, phone, address.
- Account Details: Login credentials, user preferences.
- Technical Data: IP address, browser type, device information, usage statistics, cookies.
- Communication Data: Emails, support requests, feedback.
5. Purpose of Processing
We use your data to:
- Provide and improve our software and services.
- Manage customer accounts and respond to support requests.
- Send promotional information and updates (with your consent).
- Comply with legal and regulatory requirements (e.g., tax reporting to Swiss authorities).
- Ensure the security and performance of our systems.
6. Cookies & Tracking
Our website uses cookies and analytics tools (e.g., Google Analytics) to enhance user experience and analyze usage. Essential cookies are necessary for website functionality; non-essential cookies (e.g., for analytics or marketing) require your explicit consent via our cookie banner. You can manage or disable cookies in your browser settings, though this may affect functionality.
7. Data Sharing
We share data only with:
- Service Providers: Trusted partners for hosting, payment processing, or IT support, bound by data protection agreements.
- Legal Authorities: When required by Swiss or applicable foreign law (e.g., court orders).
- Affiliates: Subsidiaries or affiliates of Parowls Software GmbH, if established per Art. 2 of our Statuten.
8. International Data Transfers
Currently, we do not transfer data outside Switzerland. If international transfers occur in the future, we will implement safeguards such as Standard Contractual Clauses or ensure the recipient country has an adequate level of data protection, as required by nFADP Art. 16 and GDPR Art. 46.
9. Retention
We store personal data only as long as necessary for the purposes outlined or as required by law (e.g., 10 years for accounting records under OR Art. 958f). Data no longer needed is securely deleted.
10. Data Breach Notification
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will:
- Notify the Swiss Federal Data Protection and Information Commissioner (FDPIC) within 72 hours, as per nFADP Art. 24, or the relevant EU authority under GDPR Art. 33, if applicable.
- Inform affected individuals without undue delay, providing details of the breach, potential risks, and mitigation steps, per nFADP Art. 24 and GDPR Art. 34.
Contact us at contact@parowls.com for further information.
11. Your Rights
Under nFADP and GDPR, you have the right to:
- Access and receive a copy of your data.
- Correct inaccurate or incomplete data.
- Request deletion of your data (subject to legal retention obligations).
- Restrict or object to processing (e.g., for marketing).
- Data portability (receive your data in a structured, machine-readable format).
- Withdraw consent at any time, where processing is consent-based.
To exercise your rights, contact us at contact@parowls.com. We will respond within 30 days (or 60 days for complex requests, per GDPR Art. 12). You may also lodge a complaint with the FDPIC (www.edoeb.admin.ch) (www.edoeb.admin.ch) or an EU supervisory authority.
12. Security
We implement technical and organizational measures (e.g., encryption, access controls) to protect your data against unauthorized access, loss, or misuse, as required by nFADP Art. 8 and GDPR Art. 32.
13. Children’s Data
Our services are not directed at individuals under 16. If we inadvertently collect such data, we will delete it upon notification.