Privacy policy
This policy explains which personal data we, axelity ag, process on this website, why we do so and how long we keep it. Personal data is any information relating to an identified or identifiable person.
It applies to the collever website. Use of the collever platform itself is also governed by the agreements with your organization.
It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR), since we also serve customers in the EU and EEA, in particular in Germany, Austria and Liechtenstein.
1. When you visit this website
When you open this website, our server automatically stores technical details in log files:
- IP address
- date and time of the visit
- the page you opened
- browser and operating system
- the page you came from
We need these details to run the website securely and to find errors. We do not combine them with other data. We usually keep logs for no more than twelve months. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
2. No cookies, no analytics
We do not set any cookies on this website ourselves and use no analytics, tracking or advertising services. The connection is encrypted with TLS. For the free tools, see section 4.
3. Requesting a demo or a test account
When you request a demo or a test account through the form, we process your name, your company, your email address and, if you provide them, your phone number and your message. We use these details to answer your request, arrange the demo or set up your test account.
First we send you an email with a confirmation link. Until you confirm, we do not store your request on our server: it exists only, encrypted, inside the link. Only when you confirm does it reach our team. If you don't confirm within 24 hours, the link expires.
To prevent misuse, we keep your IP address and your email address for at most one hour to count requests.
We keep confirmed requests for as long as we need them to handle the request, for follow-up questions and for any business relationship that results. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
4. Free tools
Our free tools run on addresses of their own: the signature and PDF/A check on validator., long-term validation on ltv. and conversion to PDF/A on konvertieren. When you upload a file there, we process it only to carry out the check or conversion you asked for. We do not analyse the content for any other purpose and do not pass it on.
This is how long your files stay with us:
- Signature and PDF/A check: the document only for the duration of the check, the validation report for download at most two hours.
- Long-term validation: uploaded files until they are processed, the results until you download them, at most 30 minutes.
- Conversion to PDF/A: the file only for the conversion, deleted right afterwards.
For long-term validation, the tool asks the issuers of the certificates in your document for their revocation status (OCSP and CRL). Only details from the certificates are sent, not your document.
Unlike this website, the tools set technically necessary cookies: one for the session, so you don't have to confirm you are human for every file (valid for at most an hour), and one for your language and time zone. They are used neither for analytics nor for advertising.
To prevent misuse, the tools also use Cloudflare Turnstile (section 5) and count requests per IP address for a short time. The legal basis is our legitimate interest in offering the tools and protecting them from misuse (Art. 6(1)(f) GDPR).
5. Abuse protection with Cloudflare Turnstile
So that only people can send the form, we use Turnstile by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile only loads when you reach the form. Cloudflare then receives your IP address and details about your browser and device and assesses whether a person is using the form. This data may be transferred to the USA. Cloudflare is certified under the EU-US and the Swiss-US Data Privacy Framework.
The legal basis is our legitimate interest in protecting the form from automated requests (Art. 6(1)(f) GDPR). More in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
6. Emails
We send the confirmation email and the forwarding to our team through collever Reach, the notification service of our own platform. Reach hands the emails to the mail server we set up for it. If we use an external email service provider for this, it processes the data only on our behalf. Reach keeps the emails with their delivery status and usually deletes them 90 days after sending.
7. Where the data is and who receives it
This website runs in data centres in Switzerland or the EU. We pass your data only to the service providers named above, and only as far as the purpose requires. We do not sell data. A transfer to the USA only takes place as described in section 5.
8. Data security
We protect your data with appropriate technical and organizational measures, such as encrypted connections, encrypted confirmation links and restricted access rights.
9. Your rights
Within the applicable data protection law, you have the right to access, rectification, erasure, restriction of processing, objection and to receive your data (data portability). You can withdraw consent at any time; this does not affect processing up to the withdrawal.
To exercise these rights, write to dataprotection@axelity.com. If your identity is not otherwise clear, we will ask you to prove it.
You can also complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch). People in the EU and EEA can also turn to their national supervisory authority, for example the German Federal Commissioner for Data Protection and Freedom of Information or the Austrian Data Protection Authority.
10. Changes
We may update this privacy policy. The version published on this website applies.