No tracking cookies
The website sets no cookie and loads nothing from third parties. The client portal sets only the cookies needed to sign you in. No cookie banner is needed.
Legal
Privacy policy
What we collect, why, for how long, and what you can ask us to do. The website sets no tracking cookie; the client portal uses only the cookies it needs to sign you in.
Hosted in Switzerland
The website is hosted by Infomaniak, in Switzerland.
Study files deleted after 30 days
We delete the files you send for a free study 30 days after you upload them.
Who is responsible
The controller is Technical Storage, as identified in the legal notice.
For any question about your personal data, write to us at the address on the contact page.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Free study form: name, business email, company, the data you wish to analyse (Disk, Tape, CPU, Space), size of your installation, and your message | To answer your request, qualify it and prepare the study | Steps before a contract at your request; our legitimate interest in answering business enquiries |
| Files you send for a study (RMF or CMF reports, DCOLLECT extracts, tape catalogue reports) | To run the study and present the results | Your request. You can anonymise the files before you send them |
| Emails and calls you exchange with us | To answer you and follow up | Our legitimate interest in answering you; steps before a contract |
| Server logs: IP address, date and time, page requested, browser, referring page | To deliver the website, keep it secure and fix faults | Our legitimate interest in running a secure website |
| Client portal account: name, business email, the client spaces you belong to, a hash of your password (never the password itself) | To give you access to releases, test files and the Dropbox of your company | Our agreement with your company; our legitimate interest in securing access |
| Sign-in and security data: IP address, browser and system type, time of sign-in and of failed attempts, actions in the portal (sign-ins, downloads, files sent, changes made by Technical Storage) | To protect accounts against misuse, block repeated failed attempts and investigate incidents | Our legitimate interest in running a secure service |
| Files and notes sent through the Dropbox of the client portal | To run the work your company asked for | Our agreement with your company |
| Audience measurement with Matomo: pages viewed, referring page, links followed, approximate country, browser and device type. Your IP address is shortened before it is stored | To understand which pages are useful and fix broken links | Our legitimate interest in improving the website; no cookie and no personal profile. You can opt out at the bottom of this page |
We do not use the data you send for advertising, and we do not sell it. We make no automated decision about you.
Cookies and trackers
The public website sets no cookie and uses no tracker that identifies you. The client portal sets only cookies that are strictly necessary to sign you in and protect your account, and never uses them to follow you: __Secure-ts_portal (your session, deleted when you sign out or when the session ends), __Secure-ts_csrf (protection of forms, 2 hours), __Secure-ts_login (links the sign-in e-mail to your browser, 15 minutes) and ts_flash (one-time messages such as “Profile saved”, a few seconds). To measure audience, we use Matomo, open-source software that runs on a server in Switzerland and is reached only through our own website: it sets no cookie, shortens your IP address before storing it and does not follow you across websites. It measures nothing if your browser sends Do Not Track or Global Privacy Control, or if you opt out below. Fonts and scripts are served from our own server.
How long we keep it
| Data | Retention |
|---|---|
| Files sent for a free study (RMF or CMF reports, DCOLLECT extracts, tape catalogue reports) | Deleted 30 days after you upload them |
| Free study requests and emails | To be completed |
| Files sent through the Dropbox of the client portal | Deleted automatically 30 days after upload at most (Technical Storage may set a shorter period) |
| Client portal account | While your company is a client and the account is active, then deleted on request or at the end of the agreement |
| Portal sessions | 12 hours without activity, 14 days at most |
| Failed and successful sign-in attempts | 24 hours |
| Portal activity log (including IP addresses) | 12 months |
| E-mails sent by the portal (sign-in links, invitations, notices) | Content deleted as soon as the e-mail is sent; delivery record kept 90 days |
| Customer relationship data, once you become a customer | For the duration of the agreement, then as the law requires |
| Server logs | To be completed |
| Audience measurement (Matomo) | Detailed visits deleted after 13 months; aggregated figures kept |
Who receives your data
- The Technical Storage experts who answer you and run your study.
- Infomaniak Network SA, Geneva, Switzerland, which hosts the website and its logs, as our processor.
- Our email provider, to deliver messages.
- Our web agency, which runs the audience measurement server in Switzerland (Infomaniak), as our processor.
We share personal data with no one else, except where the law requires it.
Where it is processed
On our servers and at our hosting provider, in Switzerland. Switzerland and the European Union recognise each other’s level of data protection as adequate. If data is ever processed elsewhere, for example by a team member working abroad, we put the safeguards the law requires in place.
How we protect it
The website is served over HTTPS only. Only the experts who need the files you send for a study can open them, and we delete them 30 days after you upload them.
Your rights
You may ask us at any time to:
- tell you what data we hold about you, and give you a copy (access, portability);
- correct data that is wrong (rectification);
- delete your data (erasure), or restrict how we use it;
- stop using your data on the basis of our legitimate interest (objection);
- withdraw a consent you gave, if we ever rely on one.
Write to us and we will answer within 30 days. We may ask you to prove your identity first.
Complaints
You may complain to a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch. If you live in the European Union, you can also contact the authority of your country; the European Data Protection Board lists them at edpb.europa.eu.
Changes to this policy
We update this policy when our practices change, and show the date of the latest update at the top of this page.
Audience measurement
Without JavaScript, nothing is measured.
Last updated: