Privacy Policy

General Information

Data protection and data security are important to Digital Vault SA, a company registered in the Commercial Register of the Canton of Valais under company number CHE-140.544.376 (hereinafter referred to as "Digital Vault" or "we"). We process your personal data responsibly, in accordance with applicable Swiss and European Union laws and in compliance with this Privacy Policy.

The following notice informs you in detail about the personal data we collect, the purposes for which it is used, with whom it is shared, and what control and information rights you have when visiting our website and/or using our web/mobile application and/or using any of our services.

Content

In this Privacy Notice, we inform you about how we collect and process personal data when you:

• Visit our website at www.vaultx.ch (hereinafter referred to as the "Website")
• Access our social media pages
• Contact us
• Use our web/mobile application (hereinafter referred to as "VaultX")
• Use our services as a customer
• Inquire about VaultX and/or our services as a prospect

Data Controller

We are responsible for the data processing described in this Privacy Notice.

If you have any questions or wish to exercise your data protection rights, please contact us at:

Email: contact@vaultx.ch
Mail: Digital Vault SA, Data Protection Officer, Avenue Rosemont 2, 1208 Geneva

Personal Data Processed During Communication and Service Provision

We collect information you provide to us in these situations:

1. When you contact us
2. When you visit our Website or use VaultX or other services
3. When you register as a user/customer of VaultX and/or other services
4. When you apply for a job with us

This includes:

• General personal data (name, contact information)
• Information about your position/role within your organization
• Business relationship data (offers, contracts, transactions, accounts, assets, claims)
• Information about other persons involved in the business relationship

We also process personal data received from:

• Third parties
• Public registers
• Authorities and regulators
• Business partners
• Other public sources

Website and Application Usage

Informational Use

You can visit our Website anonymously. Our servers automatically record:

• IP address
• Access date/time
• Browser information (name, version, OS, preferred language)

VaultX Usage

When registering for VaultX, we collect:

• Personal details (name, contact information)
• Data you enter/generate/store in VaultX
• Authentication data (we use 2FA and MFA)
• SAML 2.0 for SSO (business customers)

Web Analytics

We use Google Analytics with:

• Cookie-based tracking
• IP anonymization (for transfers outside Switzerland/EU/EEA)

External Resources

Our Website includes:

• External content (videos, images)
• Communication features (chat plugins)
• Technical resources (may collect your IP)

Cookies

We use cookies to:

• Enable website functionality
• Analyze usage
• Improve user experience

You can manage cookie preferences via:

• Browser settings
• Our cookie preference tool

Social Media

Our company pages collect:

• Visitor statistics
• Demographic information (Data is aggregated/anonymized)

Newsletter

When subscribing, we collect:

• Name
• Email address

We analyze:

• Open rates
• Click-through rates

(Unsubscribe link included in all newsletters)

Data Processing Purposes

We process personal data to:

1. Respond to inquiries
2. Process registrations
3. Handle job applications
4. Provide Website/VaultX/services
5. Analyze and optimize usage
6. Improve social media presence
7. Conduct marketing activities
8. Manage event registrations
9. Share product updates
10. Enforce legal claims

Legal bases include:

• Contractual obligations
• Legal requirements
• Legitimate interests
• Your consent (revocable)

Data Storage and Transfers

Locations

Primarily stored/processed in:

• Switzerland
• EU

May be transferred worldwide with appropriate safeguards

Third-Country Transfers

When transferring to non-adequate countries:

• We use EU Standard Contractual Clauses
• Implement additional safeguards
• Only transfer when legally permitted

Data Security

We implement:

• Access controls
• Security procedures
• Regular risk assessments

Note: Blockchain-stored data cannot be deleted

Data Sharing

Hosting Provider

Our external host processes:

• IP addresses
• Contact data
• Usage data (Only for service provision)

Other Disclosures

We may share data when:

• Legally required
• Court-ordered
• Necessary for contract fulfillment

Retention Periods

We retain data:

• Only as long as necessary
• May extend for legal/compliance reasons

Your Rights

You have the right to:

1. Access your data
2. Receive data portability
3. Request corrections
4. Request deletion
5. Object to processing

(Subject to legal limitations)

Policy Updates

We may update this policy as needed.
Last updated: June 16, 2025