Privacy
Policy.

1. Introduction

The protection of your personal data is a key concern for us. This Privacy Policy informs you about how Osy Solutions GmbH, Furttalstrasse 61, 8046 Zurich, Switzerland, collects, stores, and processes personal data – particularly in connection with the use of our website www.osy.ch, as well as in relation to contact inquiries, applications, and digital interactions.

2. Responsible Entity

Osy Solutions GmbH
Furttalstrasse 61
8046 Zurich
Switzerland
info@osy.ch

3. Scope of Application

This Privacy Policy applies to all processing activities related to:

• visiting our website
• using the contact or application form
• booking appointments via HubSpot
• subscribing to the newsletter
• using cookies and analytics tools
• and in the context of our services with customers, partners, and applicants

4. Collected Data and Purposes

a) Website Visit & Technical Usage

Data: IP address, timestamp, browser type, language settings, operating system, usage behavior.
Purpose: Ensuring functionality, system security, website optimization.
Legal Basis: Legitimate interest pursuant to Art. 6 para. 2 lit. b nDSG.

b) Google Analytics

We use Google Analytics for statistical analysis. The collected data does not allow direct identification.
Provider: Google Ireland Ltd.
Data Transfer: Partially to the USA (standard contractual clauses).
Privacy Policy: Google Privacy Policy.

You can change your consent at any time via the cookie settings.

c) Cookies

We use cookies to improve user experience and for analytics.

• Essential Cookies: necessary for operation.
• Analytics & Marketing Cookies: only with your consent. Details can be found in our Cookie Policy.

d) Appointment Booking via HubSpot

Data: Name, email, optional company and message.
Purpose: Organization and preparation of discussions.
Provider: HubSpot Inc.
Data Locations: EU and USA (standard contractual clauses).
Privacy Policy: HubSpot Privacy Policy.

e) Newsletter Subscription

Data: Email address.
Purpose: Sending information and insights about Osy.
Procedure: Double opt-in.
Unsubscription: Possible at any time via the link in the newsletter.

f) Contact Forms & Applications

Data: Name, email, message; for applications additionally resume, cover letter, optional details.
Purpose: Communication, review of applications.
Retention Period for Applications: max. 6 months (if not hired).

5. Data Security

We implement appropriate technical and organizational measures, including:

• SSL encryption
• Access controls
• Hosting in ISO-certified infrastructure
• Collaboration with a specialized IT security partner

6. Processing by Certified Partner

To provide our services, we work with a specialized IT service provider that operates exclusively data centers in Switzerland. Data processing complies with the following recognized security and compliance standards:

• ISO 27001 (Information Security)
• ISO 22301 (Business Continuity Management)
• ISO 50001
• PCI DSS
• SOC 2 Type II
• FINMA-compliant implementation per Circular RS 18/3

Data storage is thus entirely within Switzerland. No data transfer to third countries takes place.

Such data processing by the aforementioned IT service provider shall occur exclusively if this has been agreed upon with the client or explicitly coordinated.

7. Disclosure to Third Parties

Data is only disclosed if:

• legally required
• necessary for contract fulfillment
• legitimate interests exist
• you have expressly consented

External service providers are contractually obligated to maintain confidentiality.

8. Your Rights

Pursuant to Art. 25 ff. nDSG, you have the right to:

• Access
• Rectification
• Deletion
• Objection
• Data portability

To exercise your rights, contact info@osy.ch.

9. Retention Period

Personal data is stored only as long as required for the purpose or as legally mandated (e.g., tax retention obligations).

10. Changes

This policy may be updated due to legal or technical changes. The version published on www.osy.ch always applies.

Last updated: May 26, 2025.