Privacy policy

Draft for legal review before launch.

This policy explains how Artamis Group GmbH processes personal data when you use artamisgroup.com, contact us or buy from us. It applies under the Swiss Federal Act on Data Protection (FADP/nDSG) and, where you are in the European Economic Area or the UK, under the GDPR and UK GDPR.

Who is responsible

Artamis Group GmbH, Strehlgasse 2, 8001 Zürich, Switzerland (UID CHE-453.745.075). Contact for all privacy questions: contact@artamisgroup.com.

What we collect and why

• Enquiries, proposal requests and downloads. Name, work email, organisation, institution type, role and your message. Used to answer you, send what you asked for and, if you opt in, our monthly briefing. Basis: steps at your request, and our legitimate interest in following up with institutional enquiries; consent for the newsletter.
• Self-assessments. Your answers are kept in your own browser and are not sent to us while you use a tool. If you buy the full report, your answers (in coded form), name, email, organisation and role are sent to us and to Stripe so we can produce and email the report. Basis: performance of the contract.
• Purchases. Name, email, billing country and payment details are collected and processed by Stripe; we do not see or store full card details. We keep order records as required by Swiss accounting law (10 years).
• Call bookings. Name, email, time slot and any notes you add, collected through Calendly.
• Job applications. Your details and CV, used to assess your application and kept for up to 24 months with your consent.
• Website use. With your consent only, HubSpot records pages visited and links them to forms you submit. See the cookie policy.

Who processes data for us

• Netlify (hosting and form handling, United States)
• HubSpot (CRM and email, EU data centre)
• Stripe (payments, invoicing and, where applicable, tax as merchant of record; Ireland and United States)
• Resend (delivery of report and access emails, EU region)
• Calendly (scheduling, United States)
• Microsoft (business email, Microsoft 365)

Some providers are based in, or may access data from, countries outside Switzerland and the EEA, including the United States. We rely on adequacy decisions, including the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, or on standard contractual clauses.

How long we keep data

Enquiry and CRM records: up to three years after our last contact, unless we work together. Client and order records: as long as required by law, normally ten years. Newsletter: until you unsubscribe. Job applications: up to 24 months.

Your rights

You can ask for access to your data, correction, deletion, restriction or a copy in a portable format, and you can object to processing based on our legitimate interests or withdraw consent at any time. Email contact@artamisgroup.com. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA, to the data protection authority where you live.

Changes

We update this policy when our processing changes. Last updated: November 2026.