This Privacy Policy explains how PIEMACS (“PIEMACS”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit our website piemacs.ch, interact with our content, submit a form, request a demo, or ask to access technical documentation.

This Privacy Policy is intended for website visitors, business prospects, industrial partners, research partners, investors, suppliers and other professional contacts.

1. Data Controller

The data controller responsible for the processing of personal data through this website is:

PIEMACS
EPFL Innovation PSED
1015 Lausanne
Switzerland
Email: service@piemacs.ch

For any question regarding this Privacy Policy or the processing of your personal data, you may contact us at the email address above.

2. Scope of this Privacy Policy

This Privacy Policy applies to the website piemacs.ch and to personal data collected through:

• website browsing;

• contact forms;

• demo request forms;

• technical report, datasheet or pilot report access forms;

• business communication forms;

• analytics and tracking technologies used on the website;

• direct communications with PIEMACS following an interaction on the website.

This Privacy Policy does not apply to third-party websites that may be linked from our website. We are not responsible for the content or privacy practices of such third-party websites.

3. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data.

3.1 Data you provide directly

When you complete a form, request a demo, ask for access to a technical report, contact us or communicate with us, we may collect:

• first name and last name;

• business email address;

• company name;

• job title or professional role;

• phone number;

• country or region;

• industry sector;

• message content;

• interest in our technology, technical report, pilot project, demo or commercial discussion;

• any other information you voluntarily provide.

Please do not provide sensitive personal data through our website forms unless specifically requested and necessary.

3.2 Technical and browsing data

When you visit our website, certain technical information may be collected automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• pages visited;

• date and time of visit;

• referral source;

• approximate location based on technical data;

• interactions with website content, buttons or forms;

• cookie consent preferences.

3.3 Analytics and tracking data

We may use analytics and tag management tools, including Google Analytics 4, Google Tag Manager and Google Consent Mode V2, to understand how visitors interact with our website and to improve its performance, content and user experience.

Where legally required, analytics, marketing cookies or similar technologies will only be activated after you have given your consent through the cookie banner or consent management interface.

4. Purposes of Processing

We process personal data for the following purposes.

4.1 To operate and secure the website

We use technical data to ensure that the website functions properly, loads correctly, remains secure and is protected against abuse, fraud, spam or unauthorized access.

4.2 To respond to your requests

We use the personal data submitted through forms to respond to your inquiries, provide information about PIEMACS, arrange demos, send requested documentation, follow up on technical or commercial requests and communicate with you.

4.3 To provide access to technical content

If you request access to a technical report, datasheet, pilot report or similar gated content, we may use your professional contact details to verify your request, send you the requested material and follow up in a B2B context.

4.4 To manage business relationships

We may process personal data to manage relationships with prospects, customers, partners, investors, suppliers, research institutions and other professional contacts.

4.5 To improve our website and communication

We use aggregated and analytical information to understand website performance, improve our content, optimize the user experience and measure the effectiveness of our communication.

4.6 To comply with legal obligations

We may process personal data where necessary to comply with applicable laws, regulations, legal claims, accounting requirements or requests from competent authorities.

5. Legal Bases for Processing

Where applicable, we process personal data on one or more of the following legal bases:

• Consent, for example when you accept non-essential cookies or subscribe to communications.

• Performance of pre-contractual or contractual measures, when you request information, a demo, a technical report or enter into business discussions with us.

• Legitimate interests, including operating our website, responding to professional inquiries, improving our services, securing our systems and developing B2B relationships.

• Legal obligation, where processing is necessary to comply with applicable law.

If the GDPR applies to a specific processing activity, these legal bases are interpreted in accordance with Article 6 of the GDPR.

6. Cookies and Similar Technologies

Our website may use cookies, tags, pixels or similar technologies.

Cookies may be used to:

• enable core website functionality;

• remember your cookie preferences;

• measure website traffic and performance;

• understand how visitors interact with our content;

• support analytics through tools such as Google Analytics 4;

• manage tags through Google Tag Manager;

• apply consent choices through Google Consent Mode V2.

You can manage your cookie preferences through the cookie banner or consent management tool available on the website. You can also configure your browser to block or delete cookies.

A separate Cookie Policy may provide more detailed information about the specific cookies used, their duration and their providers.

7. Hosting and Technical Infrastructure

The website is intended to be hosted with Infomaniak, a Swiss hosting provider. Hosting and technical infrastructure may therefore involve the processing of personal data on servers located in Switzerland.

Technical data may be processed for the purpose of website operation, performance, security, backup, maintenance and troubleshooting.

8. Third-Party Service Providers

We may share personal data with trusted service providers who help us operate the website and provide our services.

These may include:

• website hosting providers;

• IT and security providers;

• analytics providers;

• CRM or communication tools;

• form management tools;

• email service providers;

• professional advisers, where necessary.

We require our service providers to process personal data only on our instructions and to apply appropriate confidentiality, technical and organizational security measures.

9. Google Services

Our website may use Google services, including Google Analytics 4, Google Tag Manager and Google Consent Mode V2.

These services may collect technical and usage data, such as device information, browser information, IP address, page interactions and consent status. Google may process data on servers located outside Switzerland or the European Economic Area.

Where required, we use consent-based activation and available privacy settings to limit unnecessary data collection. You can also prevent tracking by refusing analytics cookies through the cookie banner or by using browser-based privacy tools.

For more information, please consult Google’s own privacy documentation.

10. International Data Transfers

Where possible, we aim to use service providers located in Switzerland or in jurisdictions offering an adequate level of data protection.

However, some third-party providers, such as Google or other cloud-based tools, may process personal data in countries outside Switzerland or the European Economic Area.

Where personal data is transferred internationally, we rely on appropriate safeguards where required, such as adequacy decisions, standard contractual clauses or other legally recognized transfer mechanisms.

11. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

In general:

• contact and demo request data is kept for as long as necessary to respond to the request and manage the business relationship;

• technical report access data may be kept for follow-up and B2B relationship management;

• analytics data is kept according to the retention settings of the analytics tools used;

• technical logs may be kept for security and troubleshooting purposes;

• legal, accounting or contractual data may be kept for the period required by applicable law.

When personal data is no longer necessary, we delete it or anonymize it, unless we are legally required or permitted to retain it.

12. Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include:

• secure hosting infrastructure;

• access controls;

• encrypted connections where applicable;

• regular updates and maintenance;

• security monitoring;

• limitation of access to authorized persons only.

No website or electronic transmission is completely secure. However, we take reasonable measures to protect the personal data processed through our website.

13. Your Rights

Depending on the applicable law, you may have the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• withdraw your consent at any time, where processing is based on consent;

• request data portability, where applicable;

• lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us at:

service@piemacs.ch

We may need to verify your identity before responding to your request.

14. Swiss Data Protection Authority

If you are located in Switzerland and believe that your personal data has been processed unlawfully, you may contact the Swiss Federal Data Protection and Information Commissioner:

Federal Data Protection and Information Commissioner FDPIC
Feldeggweg 1
3003 Bern
Switzerland
Website: https://www.edoeb.admin.ch

If the GDPR applies to your situation, you may also have the right to contact the competent supervisory authority in your EU/EEA country of residence, workplace or place of alleged infringement.

15. Automated Decision-Making

We do not use personal data collected through the website for automated decision-making that produces legal effects or similarly significant effects on you.

16. Marketing Communications

If you subscribe to updates, request technical content or engage with us in a professional context, we may send you relevant B2B communications about PIEMACS, our technology, pilot projects, reports or events.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails, where available, or by contacting us at:

service@piemacs.ch

We may still send you non-marketing communications where necessary, for example to respond to your request or manage an existing business relationship.

17. Children’s Privacy

Our website is intended for professional and business audiences. It is not directed at children, and we do not knowingly collect personal data from children.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, tools, legal requirements or data processing practices.

The latest version will always be available on this page. The “Last updated” date at the top of this Privacy Policy indicates when it was last revised.

19. Contact

For any question regarding this Privacy Policy or the way we process personal data, please contact:

PIEMACS
EPFL Innovation PSED
1015 Lausanne
Switzerland
Email: service@piemacs.ch