Privacy Policy

Last Updated: 09.08.2025

1. Introduction

IMT Analytics AG ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and safeguard your data in compliance with applicable data protection laws, including but not limited to:

• European Union: General Data Protection Regulation (GDPR)
• Switzerland: Federal Act on Data Protection (nFADP)
• United States: Applicable state-level privacy laws, including the California Consumer Privacy Act (CCPA/CPRA).

By using our website and services, you consent to the practices described in this policy.

This Privacy Policy applies to all websites and landing pages operated by IMT Analytics AG, including imtanalytics.com. Any personal data collected through this platform is processed in accordance with the terms outlined below.

 

2. Data Collection and Usage

We collect and process personal data for various purposes, including website visits, customer inquiries, order fulfillment, and marketing activities.

2.1 Website Visits

When you visit our website, our web server automatically collects the following information for security and functionality purposes:

• IP address
• Internet service provider
• Session start and end times
• Call status/success messages
• Browser type
• Operating system

This data is collected based on our legitimate interest under Article 6(1)(f) GDPR to ensure website security and functionality.

2.2 Contacting Us

When you contact us via a contact form or email, we collect the personal data you provide, such as your name and email address, to process your request. This data is not shared with third parties unless required for fulfilling your request.

2.3 Chatbot and Automated Interactions (Lyro by Tidio)

Mandatory Data Collection for Chat Usage
To use our chatbot, users must provide their name and email address. This information is necessary to:

• Offer personalized support and track previous inquiries.
• Ensure security and prevent fraudulent activity.
• Improve chatbot functionality based on user interactions.

The legal basis for this processing is:

• User Consent (Art. 6(1)(a) GDPR & Art. 7 LGPD) – Users actively provide their name and email before initiating a chat.
• Legitimate Interest (Art. 6(1)(f) GDPR & Art. 10 LGPD) – Ensuring service continuity and fraud prevention.

If a user does not wish to provide their name and email, they can contact us directly at customerservice@imtanalytics.com for assistance.

2.4 Shopify and Data Processing

Our website is hosted on Shopify, which may collect and process personal data such as:

• IP address, browser information, and device type
• Purchase history and payment details
• Location and language preferences

Shopify processes this data to facilitate transactions, enhance security, and improve user experience. Shopify complies with GDPR, CCPA, and LGPD. You can review Shopify’s Privacy Policy here.

Data Transfers to the U.S.:

Shopify’s servers are located in the United States, Canada, Ireland, and Singapore. This means personal data may be transferred internationally. We ensure that such transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission and other relevant safeguards.

Security Measures:

• TLS encryption for data Transmission
• Access controls and authentication safeguards
• Regular security audits and monitoring

These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of personal information.

2.5 Marketing & Analytics Tracking (Google Analytics, GetResponse & Zoho Campaigns)

We use Google Analytics and GetResponse to analyze user behavior and improve our website performance, marketing efforts, and customer communication.

Google Analytics

Google Analytics collects data about how visitors interact with our website, including:

• Pages visited and time spent on the website.
• Device type, operating system, and browser type.
• General location (city, country) based on IP address.

Google Analytics operates based on cookies and tracking technologies. Users can manage their preferences via browser settings or by using the Google Analytics Opt-Out Tool.

Email Marketing Platforms (Transition Period)
Currently, we send newsletters via GetResponse and are in the process of migrating to Zoho Campaigns. During this transition, your data may be processed in both platforms.

• GetResponse: Tracks newsletter engagement (opens, clicks, website visits).
• Zoho Campaigns: Processes subscriber data, engagement metrics, and ensures GDPR-compliant data handling.

Legal basis: Consent (Art. 6(1)(a) GDPR).
Users may unsubscribe from our newsletters at any time by clicking the “unsubscribe” link included in each email (regardless of the platform used).

 

3. Cookies and Tracking Technologies

We use cookies to enhance user experience, including:

• Essential Cookies – Required for website functionality (e.g., shopping cart, login).
• Analytical Cookies - Tools like Google Analytics, GetResponse, and Zoho Campaigns to measure site performance and user engagement.
• Marketing Cookies – Used by platforms such as LinkedIn Ads and other retargeting providers to measure the effectiveness of advertising campaigns and deliver tailored ads.

Users can manage cookie preferences in their browser settings or via our Cookie Consent Manager.

 

4. Legal Basis for Data Processing

We process personal data based on:

• Contractual Necessity (Art. 6(1)(b) GDPR) – when required for service fulfillment.
• Consent (Art. 6(1)(a) GDPR, Art. 7 LGPD) – when users voluntarily provide information.
• Legitimate Interest (Art. 6(1)(f) GDPR) – for fraud prevention, website security, and service improvements.

 

5. Data Transfers and Security

Personal data may be transferred outside Switzerland and the EEA. We ensure protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Encryption and access controls

For details, contact customerservice@imtanalytics.com.

 

6. Data Retention Periods

• Chatbot data: 12 months
• Google Analytics data: 14 months
• Newsletter subscription data: Until the user unsubscribes
• Purchase-related data: Order and transaction data will be stored for a period of 10 years to comply with tax and accounting regulations.

 

7. Your Rights

Users have the following rights under GDPR, LGPD, and CCPA:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Correct inaccurate data.
• Right to Erasure – Request data deletion.
• Right to Restriction of Processing – Limit data usage.
• Right to Data Portability – Receive data in a structured format.
• Right to Object – Object to data processing for marketing purposes.
• Right to Withdraw Consent – Withdraw previously given consent at any time.

If you have made a purchase or have an account on our store, you can manage your personal data directly through Shopify by accessing your account settings or by contacting Shopify’s Privacy Team here.

California residents can opt out of data collection via customerservice@imtanalytics.com (subject line: “CCPA Opt-Out Request”).

 

8. Third-Party Service Providers

We collaborate with third-party data processors, including:

• Tidio Chatbot's – Chatbot and customer support (Privacy Policy)
• Shopify's – E-commerce platform and hosting (Privacy Policy)
• Google Analytics' – Website analytics (Privacy Policy)
• GetResponse's – Email marketing platform (transition period) (Privacy Policy)
• Zoho Campaigns – Email marketing platform (migration in progress) (Privacy Policy)

All providers process personal data in compliance with GDPR, nFADP, CCPA/CPRA, LGPD, and other applicable laws.

 

9. External Links

Our website may contain links to external websites. We are not responsible for their privacy policies and recommend reviewing their privacy notices before sharing personal data.

 

10. Contact Information

• IMT Analytics AG
• Gewerbestrasse 8, 9470 Buchs, SG, Switzerland
• Email: customerservice@imtanalytics.com
• Telephone: +41 81 750 67 10

 

11. Policy Updates

This Privacy Policy was last updated on September 8, 2025. We reserve the right to update or modify this policy at any time. Any changes will be published on this page with an updated revision date.

If significant changes occur — for example, upon the completion of our migration from GetResponse to Zoho Campaigns or if we introduce new third-party providers — we will notify users through one of the following methods:

• A banner notification displayed on our website (via Pandectes GDPR/DSGVO Cookie).
• A direct update within our services, when applicable.
• Email notifications, where required by law.