Privacy Notice

1. Who are we and what is this about?

We are Avallain AG, Gstalden 490, Lustmühle 9062 AR, Switzerland, and we are responsible for this website. This is our privacy notice ("PN"), in which we provide you, as the data subject, with the information required to enable you to exercise your rights and to ensure transparent data processing.

This PN is the basis on which we process all personal data we receive in connection with your use of and interaction with this website or any other online presence we manage, including our social media presence and our applications ("Apps") (collectively, the "website").

This website may contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to one of these websites, please note that they have their own PN and we cannot be held liable or responsible for them.

This PN is as of September 1st, 2023. We reserve the right to adapt it at any time. The PN as published here is the applicable one.

2. What personal data do we process from you, for what purpose, and with whom do we share it?

2.1. When you visit our website

When you visit our website, our servers temporarily store every access in a log file. The following technical data is recorded without your intervention, as is generally the case with every connection to a web server, and stored by us until automatic deletion after 3 months at the latest:

The collection and processing of this data is done for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis, and to enable the optimisation of our Internet offering, as well as for internal statistical purposes. This is based on our legitimate interests.

2.2. When you open an account with us

To use our services, you need an account. For this we need personal data from you; otherwise, we cannot open the account and cannot provide you with our services.

The creation (and subsequent use) of an account is voluntary (based on your consent). For this purpose, we need your first name, surname, e-mail address, country of residence, and if enabled for you, your role (student, teacher, or teacher admin). We then subsequently process when you were logged in and for how long, your account settings and preferences, your interaction with the website, use of the services as well as for the creation and management of your account, including contacting you in this regard.

If you have an account, then you are free to enter additional information about yourself, for example, your profile picture which you can also delete again.

This account data will be processed by us until your account is deleted and then archived for as long as we are legally or contractually obligated to do so. Components of the account data that we are not obliged to archive will be anonymised or deleted for statistical analysis purposes.

2.3. When you invite students

As an administrator or teacher of an institution, you are able to invite members of your institution to create an account and use our services. To do this, you enter the last names, first names and email addresses of the members of your institution on our website. Based on your input, we generate and send a personalised e-mail invitation to these members, asking them to create an account on our website on behalf of your institution.

You, as the inviting administrator or teacher of an institution, are solely responsible for this submission, for ensuring that the information is correct and that we are not violating any law or otherwise acting unlawfully in inviting these members to create an account on our website by e-mail on your behalf as described.

2.4. If you use our services with your account

Usage of our services is consent-based. It is recorded on a user- and institution-specific basis so that you and your institution can track your progress and that of your students.

As a teacher, teacher admin of your institution or as the administrator of your organisation, you see the usage and progress reports of the invited members. As a member and simple user of the services, you see your own usage and progress reports.

This usage data will be processed by us until your account is deleted and then archived for as long as we are legally or contractually obligated to do so. Usage data that we are not obligated to archive is anonymised or deleted. When retained, anonymised data is used for statistical analysis purposes.

For enabling our User Guides and allowing users to raise ideas and suggestions, we are supported by our partners, who are subject to data protection regulations, who we have carefully selected, and who are contractually obligated to comply with data protection, especially with regard to data security.

These is (with link to their respective PN):

2.5. If you communicate via a contact form

This website allows you to contact the institution if an email address is configured to be displayed in the footer. Such functionality and the related processing of personal data is entirely the responsibility of the institution. We do not have access to personal data if you choose to use the contact form. Please refer to the privacy notice or related statements of the responsible institution.

2.6. If you communicate via Magnet direct messaging centre

If you choose to communicate via Magnet direct messaging centre among the groups and users within the platform provided by your institution, you consent to us processing your account and profile data as well as the content of the conversation for the purpose of ensuring technical stability and functionality – including troubleshooting and security – of our Magnet direct messaging functionality. We keep such data for as long as we are legally required.

As an administrator of your institution, you may choose Magnet direct chat support to contact us. If you do so, we additionally process your data to communicate with you and then archive the data in accordance with legal requirements.

For communication via Magnet direct messaging centre, we are supported by our partner, who in turn is subject to data protection regulations, who we have carefully selected, and who is contractually obligated to comply with data protection, in particular with regard to data security.

This is (with link to their respective PN):

2.7. If you communicate via Magnet direct chat support

As an administrator of your institution, you may choose Magnet direct chat support to contact us. If you do so, we additionally process your data to communicate with you and then archive the data in accordance with legal requirements.

For communication via Magnet direct chat support, we are supported by our partner, who in turn is subject to data protection regulations, who we have carefully selected, and who is contractually obligated to comply with data protection, in particular with regard to data security.

These is (with link to their respective PN):

2.8. When you download and use our Magnet App

If you choose to download and use our app on your mobile or desktop device, then you consent to the following:

3. Which third-party technologies have we embedded?

We use various technologies from (other) third parties on our website e.g. cloud infrastructure, analytics, segmentation, marketing, social media integration, security, media display, CRM integration, etc. These explain, in their respective PNs, which data they process for which purposes, for how long, with whom they share it, what rights you have, and how you can exercise them. If applicable, you may opt-out of such processing, for which we provide the relevant links below in such cases. You can also make appropriate settings in your Internet browser that prevent, for example, cookies from being stored on your device or tracking technologies from being used. You can make and manage these settings in your Internet browser under privacy, security or data protection settings, depending on the provider.

These third party providers are (with links to their respective PN and opt-out options, if applicable):

4. Do we disclose your personal data abroad?

We work with various partners in Switzerland and abroad (see above). In principle, these are located in countries with an appropriate level of data protection. If disclosure to individual countries requires additional safeguarding, we ensure this by agreeing standard data protection clauses approved by the authorities with such partners or by relying on the self-certification of such partners under the relevant frameworks.

5. What are your rights towards us?

You have the right:

You can withdraw your consent to the processing of your personal data for the specified purposes at any time with effect for the future.

You also have the right to file a complaint with the competent authority (in Switzerland: the Federal Data Protection and Information Commissioner).

6. How can you exercise your rights?

If you have any questions about this PN or wish to exercise your rights, please contact us in writing either by mail (Avallain AG, Gstalden 490, Lustmühle 9062 AR, Switzerland,) or via email as follows: privacy@avallain.com