Privacy policy

This privacy policy explains how CSE TEAM GMBH (“CSE Swiss”, “we”) processes personal data. It covers this website, contact with us, and our business relationships with customers, prospects, and suppliers.

Controller: CSE TEAM GMBH, Grafenauweg 8, 6300 Zug, Switzerland (UID CHE-417.951.443).

Data protection contact: info [at] cse.swiss

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example when we offer our services to people in the European Economic Area, we also comply with it.

You can use this website without telling us who you are. It does not use cookies, analytics, tracking pixels, or advertising technologies. It does not embed content from other websites, and its fonts are served from our own website.

The website is hosted on Microsoft Azure. To deliver the pages and protect the service against attacks, Microsoft necessarily processes technical data such as your IP address, the date and time of the request, the page requested, and your browser’s user agent. We do not use this data to identify you or to build profiles.

Our email address is assembled by a small script to protect it from spam robots. The script runs only in your browser and does not send any data.

On the Teltonika pages, your browser loads the current stock levels from our stock system, which also runs on Microsoft Azure. This request contains no personal data beyond the technical data described above.

Legal basis under the GDPR: our legitimate interest in providing a secure, working website (Art. 6(1)(f) GDPR).

When you email or call us, we process the information you give us, such as your name, company, contact details, and the content of your message, to answer your request and, if you wish, to prepare an offer.

Legal basis under the GDPR: steps prior to entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

When we work with you or your organisation, we process the contact and contract data of your employees and representatives to deliver our services, manage the business relationship, send invoices, and meet our legal obligations.

Depending on the service, we also process personal data contained in the systems we operate or test for you, such as user accounts, log files, or data found during a security assessment. In these cases we act on your behalf, under the terms agreed in our contract.

Managed Network Security: we work on your infrastructure and with your identity and access solutions. Backups are operated on your infrastructure; we do not store backup data ourselves.

Cybersecurity Services: we store the data of these services on servers located in Switzerland.

Out-of-Band Management: the service uses the Remote Management System (RMS) of Teltonika, which runs on Amazon Web Services, and an authentication layer that we operate on Microsoft Azure.

Legal basis under the GDPR: performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), and our legitimate interest in managing business relationships (Art. 6(1)(f) GDPR).

We may send customers and business contacts occasional information about our services. Anyone else receives such emails only with their consent. You can object or unsubscribe at any time by replying to the email or by writing to info [at] cse.swiss.

We do not sell personal data. We share it only where this is needed for the purposes described above, with:

• our team members in Switzerland and at our international delivery hub, who deliver our services
• IT and hosting providers that process data on our behalf, in particular Microsoft (Azure) and, for Out-of-Band Management, Teltonika and Amazon Web Services
• professional advisers, auditors, and certification bodies, who are bound to confidentiality
• authorities, where we are legally required to do so or need to protect our rights

Our service providers may only use personal data as instructed by us and must protect it appropriately.

Some of the recipients above process personal data outside Switzerland:

• Our international delivery hub is located in Romania, a member state of the European Union. Switzerland recognises the countries of the EU and the EEA as providing an adequate level of data protection.
• Our cloud providers, Microsoft and Amazon Web Services (which hosts Teltonika’s RMS platform), operate data centres in several countries. Depending on the service, data may be processed in the EU/EEA or in the United States.

Where personal data is transferred to a country without an adequate level of data protection, such as the United States, we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified under it, on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner, or on an exception provided by law.

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. Business records such as contracts and invoices are kept for ten years, as required by Swiss law. Enquiries that do not lead to a business relationship are deleted once they are no longer needed.

We are certified to ISO 27001 and protect personal data with technical and organisational measures appropriate to the risk. Access is limited to people who need it for their work, and they are bound to confidentiality.

If a data breach is likely to put your rights at risk, we will inform the competent authority and, where required, you.

Within the limits of the applicable law, you have the right to:

• get information about the personal data we hold about you
• have incorrect data corrected
• have your data deleted, or its processing restricted
• object to processing based on our legitimate interests, and to direct marketing at any time
• receive the data you provided to us in a common electronic format
• withdraw your consent at any time, with effect for the future

To exercise your rights, write to info [at] cse.swiss. We may ask you to confirm your identity.

You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. If you live in the European Economic Area, you can also contact the data protection authority in your country.

We may update this policy when our services or the law change. The current version is always published on this page.