Privacy Policy

1. Introduction

IMT Analytics AG ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and safeguard your data in compliance with applicable data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR)
• Swiss Federal Act on Data Protection (nFADP)
• California Consumer Privacy Act (CCPA)
• Brazilian General Data Protection Law (LGPD)

By using our website and services, you consent to the practices described in this policy.

 

2. Data Collection and Usage

We collect and process personal data for various purposes, including website visits, customer inquiries, order fulfillment, and marketing activities.

2.1 Website Visits

When you visit our website, our web server automatically collects the following information for security and functionality purposes:

• IP address
• Internet service provider
• Session start and end times
• Call status/success messages
• Browser type
• Operating system

This data is collected based on our legitimate interest under Article 6(1)(f) GDPR to ensure website security and functionality.

2.2 Contacting Us

When you contact us via a contact form or email, we collect the personal data you provide, such as your name and email address, to process your request. This data is not shared with third parties unless required for fulfilling your request.

2.3 Chatbot and Automated Interactions (Lyro by Tidio)

Mandatory Data Collection for Chat Usage
To use our chatbot, users must provide their name and email address. This information is necessary to:

• Offer personalized support and track previous inquiries.
• Ensure security and prevent fraudulent activity.
• Improve chatbot functionality based on user interactions.

The legal basis for this processing is:

• User Consent (Art. 6(1)(a) GDPR & Art. 7 LGPD) – Users actively provide their name and email before initiating a chat.
• Legitimate Interest (Art. 6(1)(f) GDPR & Art. 10 LGPD) – Ensuring service continuity and fraud prevention.

If a user does not wish to provide their name and email, they can contact us directly at [email protected] for assistance.

2.4 Shopify and Data Processing

Our website is hosted on Shopify, which may collect and process personal data such as:

• IP address, browser information, and device type
• Purchase history and payment details
• Location and language preferences

Shopify processes this data to facilitate transactions, enhance security, and improve user experience. Shopify complies with GDPR, CCPA, and LGPD. You can review Shopify’s Privacy Policy here.

Data Transfers to the U.S.:

Shopify's servers are located in the United States and other jurisdictions, meaning personal data may be transferred internationally. We ensure that such transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

Security Measures:

Shopify implements advanced security measures such as TLS encryption for data transmission, access controls, and regular security audits to protect personal data against unauthorized access or breaches. For more details, please refer to Shopify's Privacy Policy.

2.6 Marketing & Analytics Tracking (Google Analytics & GetResponse)

We use Google Analytics and GetResponse to analyze user behavior and improve our website performance, marketing efforts, and customer communication.

Google Analytics

Google Analytics collects data about how visitors interact with our website, including:

• Pages visited and time spent on the website.
• Device type, operating system, and browser type.
• General location (city, country) based on IP address.

Google Analytics operates based on cookies and tracking technologies. Users can manage their preferences via browser settings or by using the Google Analytics Opt-Out Tool.

GetResponse

GetResponse tracks user engagement with our newsletters and emails, including:

• Whether emails were opened and links clicked.
• Pages visited on our website after clicking an email link.

This data helps us personalize content and optimize marketing efforts. If you subscribe to our newsletter, you may receive targeted content based on your browsing history.

Users can opt-out of Google Analytics tracking via their browser settings and can unsubscribe from GetResponse emails using the "unsubscribe" link in any email.

 

3. Cookies and Tracking Technologies

We use cookies to enhance user experience, including:

• Essential Cookies (for website functionality)
• Analytical Cookies (Google Analytics, GetResponse tracking)
• Marketing Cookies (LinkedIn Ads, retargeting campaigns)

Users can manage cookie preferences in their browser settings or via our Cookie Consent Manager.

 

4. Legal Basis for Data Processing

We process personal data based on:

• Contractual Necessity (Art. 6(1)(b) GDPR) – when required for service fulfillment.
• Consent (Art. 6(1)(a) GDPR, Art. 7 LGPD) – when users voluntarily provide information.
• Legitimate Interest (Art. 6(1)(f) GDPR) – for fraud prevention, website security, and service improvements.

 

5. Data Transfers and Security

Personal data may be transferred outside Switzerland and the EEA. We ensure protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Encryption and access controls

For details, contact [email protected].

 

6. Data Retention Periods

• Chatbot data: 12 months
• Google Analytics data: 14 months
• Newsletter subscription data: Until the user unsubscribes
• Purchase-related data: Order and transaction data will be stored for a period of 10 years to comply with tax and accounting regulations.

 

7. Your Rights

Users have the following rights under GDPR, LGPD, and CCPA:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Correct inaccurate data.
• Right to Erasure – Request data deletion.
• Right to Restriction of Processing – Limit data usage.
• Right to Data Portability – Receive data in a structured format.
• Right to Object – Object to data processing for marketing purposes.
• Right to Withdraw Consent – Withdraw previously given consent at any time.

If you have made a purchase or have an account on our store, you can manage your personal data directly through Shopify by accessing your account settings or by contacting Shopify’s Privacy Team here.

California residents can opt out of data collection via [email protected] (subject line: “CCPA Opt-Out Request”).

 

8. Third-Party Service Providers

We collaborate with third-party data processors, including:

• Tidio Chatbot's Privacy Policy
• Shopify's Privacy Policy
• Google Analytics' Privacy Policy
• GetResponse's Privacy Policy

 

9. External Links

Our website may contain links to external websites. We are not responsible for their privacy policies and recommend reviewing their privacy notices before sharing personal data.

 

10. Contact Information

• IMT Analytics AG
• Gewerbestrasse 8, 9470 Buchs, SG, Switzerland
• Email: [email protected]
• Telephone: +41 81 750 67 10

 

11. Policy Updates

This Privacy Policy was last updated on January 1, 2024. We reserve the right to update or modify this policy at any time. Any changes will be posted on this page with an updated revision date. If significant changes occur, we will notify users through:

• A banner notification displayed on our website using Pandectes GDPR/DSGVO Cookie.
• A direct update within our services when applicable.