Privacy Policy
This policy explains what personal data Pasan SA collects through pasan.ch and rent-a-lab.solar, why, on what legal basis, and the rights you have. We process personal data in line with the Swiss Federal Act on Data Protection (nFADP/nLPD) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Data controller
The controller is Pasan SA, Rue Jaquet-Droz 8, 2000 Neuchâtel, Switzerland (part of the Avalon ST group). Commercial register CHE-107.962.395 · VAT CHE-107.962.395 TVA. Contact: info@pasan.ch.
For privacy matters, contact privacy@pasan.ch.
2. What we collect
Account & contact data: email address, company name, and where you provide them phone number, country and professional role.
Usage & booking data: bookings, requests and the content you create in our tools (e.g. uncertainty budgets, uploaded measurement files).
Technical data: IP address, device/browser information and security signals generated when you sign in or when bot-protection runs.
Communications: emails and messages you exchange with us.
3. Why we use it and legal basis
- To create and run your account and provide the tools and bookings, performance of a contract.
- To send one-time sign-in codes and magic links, and service messages, performance of a contract.
- To secure the services, prevent fraud and abuse (including bot detection), legitimate interests / legal obligation.
- To improve and develop our products, including using anonymised and aggregated data, legitimate interests.
- To respond to enquiries and, where you ask, send information, legitimate interests or consent.
- To comply with legal, accounting and tax obligations, legal obligation.
6. International transfers
Some providers may process data outside Switzerland/the EEA (for example in the United States). Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses with the Swiss addendum, or transfers to countries recognised as providing adequate protection.
7. How long we keep it
We keep account data while your account is active and as needed afterwards to meet legal, accounting and security obligations, then delete or anonymise it. Sign-in codes expire within minutes; security logs are kept for a limited period. Anonymised and aggregated data, which no longer identifies you, may be kept indefinitely.
8. Your rights
Subject to law, you may request access to your personal data, correction, deletion, restriction or objection to certain processing, and portability, and you may withdraw consent where processing is based on it. Exercise these by emailing privacy@pasan.ch.
You can also lodge a complaint with a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or in the EU your local data-protection authority.
9. Security
We use appropriate technical and organisational measures, including passwordless authentication, hashed one-time codes, encrypted transport (HTTPS), access controls and bot protection. No method is perfectly secure, but we work to protect your data.
10. Changes
We may update this policy; the “last updated” date shows the current version, and we will flag material changes when you next sign in.