Privacy

Privacy Policy

Information on the processing of personal data by Torveno.

2. Purpose and scope

This Privacy Policy explains how Torveno processes personal data in connection with the public website, business inquiries, the customer portal, technical setup, the monitoring service, subscription management and billing.

Processing is governed by the Swiss Federal Act on Data Protection. Where other data protection law additionally applies, it is taken into account as well.

3. Public website

When the website is accessed, technically necessary log data may be processed. This may include, in particular, the IP address, time, requested resource, browser and device information, and technical status information.

This data is used in particular for secure and stable operation, error analysis and protection against misuse.

Torveno uses its own self-hosted visitor statistics on the public website to evaluate visitor numbers and page views in aggregated form.

For this purpose, a randomly generated identifier is stored in the browser's local storage (Local Storage). This identifier is transmitted to the Torveno server at app.torveno.com when pages are viewed and is stored there exclusively in hashed form in a separate analytics database.

In particular, the time of the page view and the page path accessed are recorded. The analytics database does not contain names, email addresses or other personal information entered directly by users.

The evaluation is used exclusively to determine visitor numbers and page views for the Torveno website. Analytics data is not used for advertising purposes and is not disclosed to external analytics providers.

The identifier stored in the browser can be removed by deleting the website data or local storage in the browser.

Business inquiries may be submitted via the public inquiry form or by email.

4. Contact and initiation of business relationships

If you contact Torveno via the public inquiry form or by email, the data processed may include in particular your name, business contact details, company, company address, website and form information, the requested package, the requested start date and the content of your message.

When the public inquiry form is used, additional data may be processed, in particular the IP address, browser or user-agent information, the language used and technically necessary status and log data. This data is used in particular for secure transmission, prevention of misuse and error analysis.

Processing takes place to respond to the inquiry, carry out the internal technical pre-check, clarify the requested package, and prepare and perform a contract.

If an order overview is prepared or sent, additional data may be processed, including in particular the public order reference, package and price information, the agreed forms and URLs, dispatch and decision status, times of confirmation or rejection, a voluntary rejection message, and technical evidence and archive data relating to the incorporated contractual documents.

The personal order link enables online review of the order overview. Merely opening the link does not trigger confirmation. A binding confirmation or rejection is processed and documented only when the Customer performs the corresponding express action.

Following confirmation, Torveno may generate an order confirmation with a PDF attachment and send it by email.

5. Customer account and customer portal

Following a confirmed order, data processed for the customer account may include in particular user and account assignments, customer and billing profile data, package and contract status, monitoring configurations, billing data and contractual actions.

The technical Torveno system may additionally process internal monitoring histories, error details, full-test results, technical diagnostic data and screenshots.

This internal technical data is not automatically disclosed in the customer portal. The customer portal displays only the intended understandable Customer information and regular monitoring data.

The customer portal uses technically necessary session data or session cookies so that logged-in users remain authenticated.

6. Monitoring and test data

Torveno generally uses clearly identifiable synthetic test data for automated tests.

Normal genuine customer inquiries received by the Customer should not be copied to Torveno.

Silent form tests may in particular process technical status information, the test time, test duration, internal error details and internal screenshots.

Full tests may additionally process Torveno control copies, automated confirmation emails, test IDs and other test information required for the test profile.

This data is used to perform, document and safeguard monitoring, detect disruptions, perform repeat checks and verify recovery.

If Torveno unintentionally receives real personal data from Customer inquiries, this data is not used for Torveno’s own marketing or profiling purposes.

7. Billing, subscription management and Stripe

For paid subscriptions, Torveno may use Stripe for payment and subscription processing.

Data processed or transmitted to Stripe may include in particular name, email address, billing information, Torveno and Stripe customer or subscription IDs, package information, payment status and invoice status.

Complete card details are generally processed by Stripe and not by Torveno.

Depending on the specific service, Stripe may also process personal data outside Switzerland. Further information is available in Stripe’s privacy information.

8. Technical service providers

Torveno may use technical service providers where necessary for hosting, server operation, email traffic, data backups, payment processing or technical maintenance.

8.1 Torveno application

For operation of the server hosting the Torveno application and the protected customer portal at app.torveno.com Torveno currently uses Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany .

For the VPS currently in use, Contabo France SAS, 2 rue Taunus, 67630 Lauterbourg, France is listed as a subprocessor for data-centre operation.

The Torveno server currently in use is located in France.

8.2 Email infrastructure

Torveno currently uses HOSTFACTORY®, a service provided by OptimaNet Schweiz AG, for its email infrastructure.

9. Processing abroad

Personal data may also be processed abroad within the service-provider relationships described above.

Where additional safeguards are required for a disclosure or transfer, legally permitted protective mechanisms are used.

10. Retention

Torveno retains personal data only for as long as necessary for the respective purpose, performance of the contract, technical documentation, security, enforcement of claims or statutory retention obligations.

After the end of the contract, contractual, invoice, payment and relevant technical evidence data may in particular continue to be stored where this is necessary and proportionate.

11. Data security

Torveno implements appropriate technical and organisational measures to protect the data processed.

These include in particular access restrictions, authentication, encrypted transmission, separate customer accounts, backups and technical logging.

12. Rights of data subjects

Within the scope of applicable data protection law, data subjects may in particular request information about the processing of their personal data.

Where the statutory requirements are met, rights may in particular include rectification, deletion, restriction or provision of data.

Requests should be sent to nik@torveno.com .

13. No advertising profiling

Torveno does not use personal data processed in connection with the monitoring service, customer portal or contract handling to create personal advertising profiles.

14. Changes

Torveno may amend this Privacy Policy if data processing activities, functions, service providers or legal requirements change.

Last updated: 06.09.2026