Note: This is merely a translation of the German version, which serves as the legal basis.

 

Preamble

The protection of your personal data is an important concern to us. This Privacy Policy informs you about the type, scope, and purpose of the processing of your personal data when using the beUnity Platform.

We operate a data protection management system and work closely with external specialists to ensure compliance with the applicable legal requirements at all times. In doing so, we observe the provisions of the EU General Data Protection Regulation (GDPR), the revised Swiss Data Protection Act (revDSG), and other relevant national data protection laws.

This Privacy Policy is valid as of July 18, 2025. We reserve the right to make changes – the most current version can be found at any time at: https://beunity.io/en/legal-notices/

 

General Information

Scope

This Privacy Policy applies to the use of the beUnity SaaS platform at beunity.app (hereinafter “Platform” or “App”). All associated digital offerings are collectively referred to as “Services.”

 

Controller and Contact Person

Responsible for data processing within the meaning of the GDPR and the revDSG is:

beUnity AG
Gattikonerstrasse 121
8136 Gattikon, Switzerland
E-Mail: datenschutz@beunity.io

Further information can be found in the imprint.

 

Definitions

Where terms such as “personal data,” “processing,” “controller,” “processor,” or “data subject” are used in this Privacy Policy, their meanings correspond to the definitions in Article 4 GDPR.

These terms are gender-neutral and apply to all data subjects regardless of gender or identity.

 

Data Processing on the Platform

General

We process your personal data exclusively for the purposes stated in this Privacy Policy. Data will only be stored as long as necessary for these purposes or as long as legal retention obligations exist.

 

Accessing the Platform

When you visit our Platform, we automatically collect technical access data (e.g., IP address, browser type, time). We use this data to ensure stability and security.

Legal basis: Art. 6(1)(b) and (f) GDPR / revDSG.

 

Registration and Membership

During registration, we process mandatory data (name, email) and optionally further information (e.g., profile picture). This data serves to provide your personalized access and display your profile within the Platform.

Legal basis: Art. 6(1)(a) and (b) GDPR / revDSG.

 

Use of the Platform

During the use of the Platform, we process personal data that you actively provide or that arise from your activities. These include in particular:

• Creation of content: When you publish contributions (e.g., news, surveys, events), we store the content you create along with your profile name and, if applicable, your profile picture.
• Interaction with content: When participating in surveys, liking, commenting, or saving content, we process corresponding activity data for display and traceability within the Platform.
• Communication via chat: Messages you send in direct or group chats are stored in encrypted form and displayed only to the respective recipients.
• Usage behavior: To improve user experience, we analyze anonymized usage data (e.g., interaction frequency, feature usage). This analysis is based on our legitimate interest in continuously improving the Platform. 

Data processing is carried out exclusively within the scope of Platform use and according to the contractually agreed purposes.

Legal bases: Art. 6(1)(b) (contract performance) and (f) (legitimate interest) GDPR / revDSG.

 

Use of the Mobile App

When installing the app (iOS and Android), an app token ID is created. This is linked to your account to enable, for example, push notifications.

Legal basis: Art. 6(1)(b) GDPR / revDSG.

 

Contact

When contacting us via e-mail or “Give feedback,” we process your information to respond to your inquiry.

Legal basis: Art. 6(1)(a) and (b) GDPR / revDSG.

 

Notifications & E-mail Summaries

When you sign up for e-mail notifications, we use your e-mail address to send you information and updates from your community. You can unsubscribe from these notifications at any time. Sending is carried out via a specialized email delivery service provider acting as a processor on our behalf. Further information about the service providers used can be found in Annex C to the DPA at: https://beunity.io/en/legal-notices/

Legal basis: Art. 6(1)(a) GDPR / revDSG (consent).

 

Own Cookies & Technologies

Cookies for Security and Functionality

For login, session control, and user recognition, we use cookies and comparable technologies. You can manage their use through your browser settings.

Legal basis: Art. 6(1)(f) GDPR / revDSG (legitimate interest in a secure and stable operation of the Platform).

 

Cookies for Usage Analysis

To optimize the Platform, we use anonymized analytics cookies and operate a self-hosted instance of Matomo (web analytics tool). The data is processed in fully anonymized form.

Legal basis: Art. 6(1)(f) GDPR / revDSG (legitimate interest in improving our services).

 

Cookies for Marketing/Advertising Purposes

We do not use any cookies for marketing or advertising purposes on our Platform. There is no user-based advertising, no profiling, and no retargeting.

 

Disclosure to Third Parties

Your data will only be disclosed where required by law, with your consent, or for contract performance to service providers. We ensure data protection compliance and data security in all such cases.

 

Examples of service providers used:

• Exoscale (CH): Hosting and encrypted storage
• AWS (EU): Storage of public images
• SendGrid (USA): E-mail delivery

 

A current and complete list of our subprocessors can be found in Annex C to the DPA at: https://beunity.io/en/legal-notices/

 

 

Rights of the Data Subject

Overview of Your Rights

You have the following rights under the EU General Data Protection Regulation (GDPR) and the revised Swiss Data Protection Act (revDSG):

• Access to the data stored about you
• Rectification of inaccurate or incomplete data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Objection to certain processing activities
• Withdrawal of previously given consent
• Right to lodge a complaint with a competent data protection authority

 

Legal Foundations

Detailed information on these rights can be found in the respective legal texts:

• Chapter III of the EU General Data Protection Regulation (GDPR) on EUR-Lex
• Revised Swiss Data Protection Act (revDSG)

 

Right to Complain / Legal Remedies

You have the right to lodge a complaint with a data protection supervisory authority –

• in the EU pursuant to Art. 77 GDPR,
• in Switzerland pursuant to Art. 15 revDSG.

To exercise your rights, you may contact: datenschutz@beunity.io at any time.

 

Data Security

We take appropriate technical and organizational measures (TOM) to protect your personal data from loss, misuse, unauthorized access, or disclosure – in accordance with the current state of the art and legal requirements (GDPR, revDSG).

 

These measures include, in particular:

• Encryption of all data transmissions using TLS (Transport Layer Security)
• Access restrictions through role and permission concepts
• Firewalls, security updates, and regular system checks
• Logging and monitoring of security-relevant events

 

Protective measures are continuously reviewed and adjusted as necessary to ensure an adequate level of protection.