Privacy

1. Controller

The controller for the processing of personal data under the Swiss Federal Act on Data Protection (FADP) is aplis AG, Ifangstrasse 11, 8153 Rümlang ZH, Switzerland ("aplis"). Requests concerning data protection shall be addressed to support@aplis.ch.

2. Visiting the websites

When the websites are accessed, technically necessary connection data is processed, in particular IP address, time of access, page requested, and browser and operating system details. This data is used solely for delivering, operating and securing the websites and is not combined with other data. aplis uses no tracking cookies and no analytics or advertising services and creates no usage profiles.

3. Booking and contact

When an introductory call is booked on aplis.ch, the chosen time, name, company, email address and the stated request are processed. The data is stored on the aplis server and transmitted to an internal notification tool. It is used solely to arrange and hold the call and is deleted once it is no longer required for that purpose. The same applies to enquiries by email.

4. Account and business

When an aplis account is opened, the name and email address of the person opening it and the name and address of the business are processed, and, on a voluntary basis, the UID, VAT number and telephone number. This information is required to set up the account, to keep the data of each business separate and to issue invoices.

To take over address and UID, the business can be looked up in the commercial register; for this purpose, the name entered is transmitted to the federal central business name index (Zefix).

Confirmations, invitations and password reset links are sent through an email provider based in Switzerland.

5. Sign-ins and event log

For each sign-in, the browser, operating system and time of last use are stored so that signed-in devices can be displayed in the account and signed out. A session is valid for thirty days.

Activities within a business are recorded in an event log, in particular sign-ins, invitations, removed persons, subscribed and cancelled products, password changes and exports. Failed sign-in attempts are counted to detect abuse.

6. Toolbox tools

aplis VIN-Label stores, for each print job, the business, the name of the person printing, the time, the format, the quantity and the last four characters of the chassis number. The complete chassis number is used only to create the label and is discarded afterwards. The label demo on the product page runs entirely in the browser; the number entered there is not transmitted to aplis.

aplis Preisschild stores, for each sign, the link to the listing, a label, the design including uploaded logo, headline and vehicle number, and the times of creation and modification. The content of the listings is not retrieved. When a QR code is scanned, the request is forwarded via aplis to the listing; only the number of visits per sign and day is stored, without IP address, browser details or cookies.

The tools do not store information about customers, work orders or invoices. The print log remains until it is deleted by an owner of the business.

7. Toolbox chat assistant

The toolbox contains a chat assistant that answers questions about the tools, the subscription and the account. The answers are generated by a language model operated in data centres in Switzerland by a provider based in Switzerland, acting as a processor for aplis.

With each request, the language model receives the conversation so far and the toolbox page in use, as well as the person's name and role, the name, number and town of the business, the products subscribed and the number of persons and open invitations in the business. For questions about printed labels, the latest entries of the print log are transmitted in addition.

The provider processes the transmitted content only for the duration of the response. It does not store requests or responses permanently and uses them neither to train language models nor for any other purpose.

aplis does not store the conversation; it is held only in the browser and deleted when the tab is closed. If a request is forwarded to aplis through the chat, aplis receives it by email with name, email address, the business and its subscriptions and, if selected, the conversation. If an answer is marked as not helpful, aplis receives the conversation together with the comment by email in order to improve the answers. Section 3 applies to these emails.

Passwords, payment details and personal data of the business's customers must not be entered in the chat.

8. Newsletter

For the newsletter, the email address, the way of subscribing (shop, account opening or account) and the times of subscription, confirmation and unsubscription are stored. An address subscribed without an account receives the newsletter only after confirmation via a link sent by email. Each newsletter contains an unsubscribe link; after unsubscribing, the address remains stored together with the time of unsubscription so that it is not contacted again.

9. Payment

Subscriptions are billed through the payment provider Stripe (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA). For this purpose, Stripe receives the name and address of the business, the email address, the UID if provided, and the payment details. Card data is collected exclusively by Stripe and does not reach aplis servers. The address is also used to calculate VAT. Depending on the activity, Stripe processes this data as a processor or under its own responsibility and its own terms.

10. Sign-in with aplis ID

When signing in to TV Horst with an aplis account, the toolbox transmits to TV Horst the name, the email address and its verification status, the role in the business and the name and number of the business. TV Horst transmits the number of screens set up to the toolbox and receives the subscription status from it. Both applications are operated by aplis; this is processing within the same controller.

11. TV Horst

aplis is the controller for account, payment and technical data. For content that a business uploads to TV Horst and displays on its screens, the business is the controller; aplis processes such content solely on its behalf. The business ensures that it is entitled to use the content. On request, aplis concludes a data processing agreement.

The data processed comprises account data (name, email address, organisation details), content data (uploaded media, playlists, templates and screen configurations) and technical screen data (connection status, time of the last report and content played with time). Owners can opt in to email notifications about screens that have gone offline. The organisation's event log is deleted automatically after 90 days.

Uploaded media and their backups are stored with Cloudflare, Inc., USA, with storage location in the European Union. Transactional emails from TV Horst are sent through Cloudflare's email service. Weather data is retrieved from Open-Meteo via aplis servers without transmitting any user or device data. If a business embeds a YouTube video, the screen loads it directly from Google; Google receives the device's IP address and may set cookies.

The screen stores the most recently played content locally so that playback continues during an interruption of the internet connection.

12. Disclosure and transfers abroad

aplis does not disclose personal data for advertising or analytics purposes. Disclosure takes place only to the service providers named in this policy, to the extent necessary for operation, or on the basis of a legal obligation. The applications and databases of aplis are operated in the European Union; daily database backups are kept for fourteen days. Some service providers are based in the USA. Where personal data is disclosed to a state without adequate data protection, aplis relies on appropriate safeguards, in particular standard contractual clauses, or on the Swiss-U.S. Data Privacy Framework.

13. Retention and deletion

Account data is retained for as long as the account exists and thereafter for as long as the statutory retention periods for business records require. Cancelling a subscription does not in itself lead to deletion; account and content remain. If an owner deletes the business, accounts, content and uploaded files are deleted unless retention obligations apply.

14. Rights of data subjects

Data subjects have, in accordance with the applicable data protection law, in particular the right to information, rectification, erasure, surrender or transfer of their personal data, restriction of processing and objection. Requests shall be addressed to support@aplis.ch. A report may also be filed with the Federal Data Protection and Information Commissioner (FDPIC).

15. Changes

aplis may amend this privacy policy at any time. The version published on this page applies.