This policy provides information on the processing of personal data in connection with this website in accordance with the revised Swiss Federal Act on Data Protection (FADP).
Controller
Pascal Kägi
Murhalden 5, 8193 Eglisau, Switzerland
Email: pascal@aapn.ch
What data we process
Account data: email address, company and industry (optional when requesting demo access), chosen language, a company logo that you upload in the profile or in the Navigator, your name if you provide it when requesting demo access (visible in our administration; we use your first name to address you in our emails), and a password stored in encrypted form (as a hash only, never in plain text). In addition, administrative details such as role, the date until which access is valid, the times at which emails were sent, whether you have seen the tour, and internal comments.
Usage data: the process assessments you carry out in the tool and your saved progress, including the free-text comments and justifications you enter.
Survey data: If you take part in our feedback survey as a pilot customer, we store your answers (including free-text entries) together with your email address, company and industry in order to develop the tool further.
Contact requests: If you use the contact form, we store the data you provide (name, email address, company, subject and message) in order to process and answer your request. No emails are sent automatically.
Messages from Help: If you send us a message via Help in the Navigator, we store it in our administration together with your account’s email address, the type you chose (“Report a bug”, “Question” or “Feedback”) and the subject, and also send it by email to our team so that we can reply. We delete it at the latest when your account is deleted.
Server log data: When you access the website, the hosting provider processes technically necessary data (e.g. IP address, time, page requested).
Page views: We count how often the home page and the registration page are accessed per day and by how many different visitors, and store only the daily totals. No IP address, cookie or other identifier is stored for this purpose. The stored daily totals cannot be linked to any person. To prevent individual visitors from inflating the count at will, the IP address is briefly converted in memory into an irreversible check value whose key changes daily; the check value is discarded at the end of the day at the latest.
Origin of registration: If you come to us via a link with campaign parameters, for example from a LinkedIn advertisement, we store these parameters together with your registration. This shows us which campaigns work. We do not set any cookies for this and do not pass any data on to third parties. We store at most four details: source, medium, campaign and content (such as which advertisement); we do not store any other parts of the link. For demo access, we also store when you first completed the assessment of a process group, even if you did not come via a link with campaign parameters. We delete these details together with your account. For the analysis, we count per day and campaign how many demo accesses were registered, how many of them completed the assessment of a first process group and after how many days; these numbers contain no link to any person and are deleted after 24 months. The legal basis is our legitimate interest in knowing how effective our campaigns are.
Email log: For every email we send you, we log the time, the type of message, your email address, the sending route and whether delivery succeeded. Message contents, passwords and access links are not stored. The purpose is operational: only in this way can we verify whether a requested message – such as a new password – was actually sent.
Purposes of processing
Provision and operation of the tool, management of access, anonymised analysis for the further development of the method, and evaluating which of our campaigns work.
Cookies
Only technically necessary cookies for signing in (session) are set. Some interface settings, such as the width of the details panel or where the AI assistant’s figure is placed, are stored by your browser on your device only; they are not sent to us. So that nothing is lost if your session ends, your browser may also keep your assessment progress on your device; it is sent to us only if you restore it after signing in again. You can remove both by deleting this website’s data in your browser. We analyse usage in aggregated form, as numbers: page views, browser security reports, accounts, assessments, purchases, deletions and rejected access attempts per day, the topic categories, languages and views of the questions put to the AI assistant and the feedback levels given on them, how often an answer failed or was cut short, as well as registrations and first completed assessments per campaign. These numbers never relate to an individual person. For this analysis, the only details we store with your account are those listed above under “Origin of registration”. There is no tracking via cookies or third-party services and no profiling; we do not show advertising and do not pass any data on to advertising services.
Hosting
The website is hosted by Infomaniak Network SA (Switzerland). The data is stored in Switzerland.
Appointment booking (Koalendar)
We use the Koalendar service (Koalendar, Inc.) to arrange appointments. If you book a meeting via our appointment page, the data you provide (in particular name, email address and the requested date and time) is transmitted to Koalendar and processed there to carry out the booking. On our public pages, your browser loads a script from Koalendar so that you can book a call from those pages. The legal basis is our legitimate interest in efficient appointment scheduling; use is voluntary. Further information can be found in Koalendar’s privacy policy at koalendar.com.
Demo access (registration and funnels)
You can request demo access on our “Get demo access” page or via a funnel. On our page, you provide your name and email address, and optionally your company and industry; we collect these details ourselves. For funnels (and campaigns), we use the Perspective service (Perspective Software GmbH, Germany). If you fill in a funnel, the data you provide (in particular name and email address, and company and industry if you provide them) is collected by Perspective and transmitted to us; Perspective also processes technical usage data of the funnel (e.g. visits and origin). A company you provide appears in the result of your demo access. In both cases, after submission we automatically create a time-limited demo account (14 days) and send you the access link by email. During the 14 days, you will receive up to three emails about this demo access from our AI agent “Nia” (the access email, a note at the halfway point, a closing message). You can object to this at any time by briefly replying to one of these emails; after that, we will not send you any more. How long the data of a demo access remains stored after it expires is set out below under “Your assessments after your access expires”. The legal basis is the processing of your request for demo access; use is voluntary. Perspective processes the data in Germany, a country with an adequate level of data protection from a Swiss perspective. Further information can be found in Perspective’s privacy policy at perspective.co.
Invitations: If you sign up via an invitation, we process the same details as for registration (name, email address, company) together with the category you chose and the invitation you used. Sign-ups whose sign-in link is not opened are deleted after seven days. Event organisers receive no information about you. Anyone who signs up via an invitation receives up to three emails during their access: the email with the sign-in link and up to two messages from our AI agent Nia, at the halfway point and at the end. For this, we use the name, email address, duration and assessment status of the access. Anyone who would like no further messages can simply reply briefly to one of these emails.
AI assistant in the Navigator
When you are signed in to the Navigator, an AI assistant is available for questions about using the tool and about the methodology. Your input is transmitted to Anthropic PBC (USA) and processed there in order to answer it. Together with your question, we also transmit the view in which you opened the assistant (for example “Heatmap”) or, in the assessment round, the process, the current question and, if there is one, your current answer to it. Anthropic does not use content transmitted via its programming interface (API) to train its models. We store neither your questions nor the answers. To develop the tool further, we record only daily counts: an anonymous topic category per request (for example “operation” or “rating”), the view in which the question was asked, the language, and whether an answer failed or was cut short – without the wording and without any link to you as a person – and, if you give it, your feedback on the conversation. The legal basis is the provision of the function you use; use of the assistant is voluntary. Please do not enter any sensitive personal data in the assistant. Further information can be found in Anthropic’s privacy policy at anthropic.com.
After a conversation, you can give feedback voluntarily: a rating on a three-level scale and, if you wish, a free comment. This feedback is something different from your questions – you write it for us, and we read it word for word. We store the rating, your comment, the date, the language, the number of your questions in the conversation and the topic category. The conversation history is neither transmitted nor stored, not even for classification. We store no identifier of your account with the feedback and do not assign it to any account. It can therefore neither be provided to you nor deleted individually – it is deleted automatically after twelve months. Please do not enter any personal data or sensitive data in the comment.
Payment processing (Stripe)
We use Stripe for payments (Stripe Payments Europe Ltd., Dublin, Ireland, or Stripe, Inc., USA). When you complete a purchase, you are redirected to a Stripe payment page.
Your card details are processed exclusively by Stripe and are not disclosed to us. We see neither the card number nor the security code nor the expiry date – these details never reach our servers. The same applies to the details you enter for TWINT, Apple Pay or Google Pay.
On our behalf, Stripe processes your name, billing address and email address as well as the payment amount in order to carry out the payment and confirm its receipt to us. We receive from Stripe the confirmation that a payment has been received, the amount and the email address you entered there – the latter solely as a reference in case we cannot match a payment.
Our own payment log contains no customer data. It records the time, event type, transaction number, amount in centimes and the payment status – no names, no addresses, no means of payment.
For payment by invoice, we additionally transmit the billing address you provide to Stripe so that the invoice can be created and delivered.
Information on data protection at Stripe: stripe.com/privacy
Disclosure to third parties
As the company logo, the Navigator shows the image you upload in the profile or in the Navigator; without an image, it shows the first letter of your company name. No data is transmitted to third parties for this. Your data is not passed on to third parties beyond the services named in this policy.
Retention and deletion
Account data is stored for as long as the account exists. On request or when the account is deleted, the associated data is removed. If you request a link via “Forgot password” or “Request a sign-in link” – to set a new password or, for demo and category access, to sign in – we store with your account when it was created, until when it is valid and whether it has been used, together with a checksum of the link, not the link itself. The link is valid for 60 minutes; the entry is deleted one day after it expires.
Operational logs such as the email log remain in place even after an account has been deleted, as evidence of which message was sent to whom and when. They contain the email address but no content, and are deleted after twelve months at the latest. To protect against misuse, we log failed sign-in attempts with email address, IP address and time, as well as registration attempts and requests via “Forgot password” and “Request a sign-in link” with IP address and time; these entries are deleted in the same way as the other operational logs.
Backups
We back up the data, including the operational logs, at least once a day on our server and keep each backup there for no more than 32 days. Once a week, we additionally store an encrypted copy of these backups with Infomaniak (kDrive, Switzerland) and keep the twelve most recent ones. Deleted data may therefore still be contained in a backup for up to 17 weeks after deletion; if a weekly copy fails, this period is extended by the weeks missed. We only restore data from a backup if the entire data set has to be restored; afterwards, we delete the previously deleted data again. Only deletions made during the last seven days at most before a complete loss of our server may be missed in this process.
Your assessments after your access expires
When access expires, we keep the process assessments recorded in the Navigator for a further twelve months. If the access is extended during this period, they are available again unchanged. Once the period has ended, they are deleted – the assessment file and the associated saved progress.
A company’s shared assessment follows the company’s access: we delete it twelve months after that access ends; if the company has no package of its own, the access of the member whose access runs longest counts. If we dissolve a company, we delete its shared assessment 30 days later; the members’ accounts and their own assessments are not affected.
A shorter period applies to demo access and to time-limited access to a single process category if it is set up on or after 1 October 2026: 30 days after expiry, we delete the entire account together with all assessments and saved progress stored for it. If it was set up before that date, the twelve-month period applies; when it ends, we delete the account together with the assessments.
Except for demo and category access, we notify you by email before expiry – 30 and 7 days beforehand – and one last time 30 days before the assessments are deleted. These messages also explain how you can export your results beforehand.
We keep a log of deletions that records that and when data was deleted, with a short identifier of the account, but without the email address and without assessment content.
Access and deletion on request
You can request information about the data stored for your account at any time, as well as its deletion before the period stated has expired. To do so, contact pascal@aapn.ch. We provide the data as a file or delete it, and record in a log when this happened – this serves as evidence for both you and us. Operational logs kept for evidence purposes are not affected; they contain no assessment content and are deleted according to their own periods.
Your rights
Within the scope of applicable law, you have in particular the right to access, rectify and erase your data. To exercise these rights, contact the address given above.
Changes
This privacy policy may be amended. The version published on this page applies in each case.
Last updated: 26 October 2026