Privacy policy

This privacy policy stipulates how abstract ltd, Picassoplatz 4, 4052 Basel, Switzerland (hereinafter "abstract" or "we") processes personal data of visitors and customers ("you") who provide personal data on our websites and/or mobile applications (together, the "websites"), including abstract.build, abstractbim.com, iterthink.com, pragmaticbim.ch, and yourcompanyos.io, whether these personal data are provided by the data subject or by a third party, and whether personal data are transmitted to abstract via the websites or via other means.

You can contact us as follows:

abstract ltd, Picassoplatz 4, 4052 Basel

E-mail: info@abstract.build

You can contact our data privacy officer as follows:

E-mail: privacy@abstract.build

abstract's business scope is the provision of software-as-a-service platforms for building professionals in the worldwide AEC industry. On our websites we offer information about our business, products and services, contact and newsletter forms, news and how-to content, and selected online purchases (for example software licences).

We adhere to data protection law. All personal data collected on or through our websites, which are protected either by the Swiss Federal Act on Data Protection (hereinafter "FADP") or the European General Data Protection Regulation (hereinafter "GDPR"), will be used exclusively for fulfilling our services to you; unless, in particular pursuant to this privacy policy, you have consented to further use of your personal data or the applicable law permits such further use. Our employees are obliged to treat personal data confidentially.

As we process most personal data electronically, we have taken appropriate IT organisational and technical measures (e.g., IT security) to ensure that your personal data is protected. We also regularly educate our employees in data protection and information security.

We may collect your master data (name, address, e-mail, etc.), personal data about services obtained, payment transaction data, online preferences, and your feedback.

We use your personal data to communicate with you and third parties; for evaluating, concluding and performing our transactions with you; for billing purposes; or for market research and marketing, such as contacting you by e-mail. We might also add industry information and interests to your master data in our database.

When you contact us, subscribe to our newsletter, register interest in a workshop, request an invoice, or complete a purchase, we process the personal data you provide. Fields marked as required are necessary to provide the requested service. Other fields are voluntary. You can inform us at any time that you no longer wish us to process personal data you provided voluntarily (cf. section Your Rights).

We may collect personal data about your financial standing in order to protect ourselves against payment defaults.

Furthermore, we collect surfing and usage data when you access our websites. This data includes, for example, information about which browser and browser version you are using, when you accessed our website, which operating system you use, from which website (link) you accessed our website, which pages you visit, and how you use them. These personal data are stored together with the IP address of the device you are using. They serve to correctly display and optimise our websites, to protect them against attacks or other infringements, and to understand how our content is used. We only evaluate such data in aggregated form where possible, unless personal data are required to clarify infringements.

We only process personal data until the purpose for which it was collected is fulfilled, or as required by law.

If you have opened an account with us for one of our SaaS products, we will store the master data you provided for as long as your account is active. You can request deletion of your account at any time (cf. section Your Rights). We will delete your master data unless we are required otherwise by applicable law.

If you contact us, subscribe to our newsletter, or place an order without opening an account, we delete or anonymise your data when it is no longer needed for the purpose collected, unless applicable law requires longer retention.

To refuse further business contact with a data subject due to misuse, payment default, or other legitimate reasons, we may store personal data for five years, or ten years in case of recurrence.

Within the purpose agreed herein, we may have personal data processed by our group entities or third parties. Such third parties include marketing and market research companies, companies that operate our information technology (hosting and outsourcing partners), email delivery providers, payment processors, debt collection companies, attorneys, and government bodies. If we commission group companies or third parties with the processing of personal data, the third party will be carefully selected and must take appropriate security measures to guarantee the confidentiality and security of your personal data.

We or the third parties may process personal data abroad, i.e. in European or non-European countries. We represent that the third parties will only use personal data according to the law and exclusively in the interest of abstract. These necessary contractual guarantees provided by the third parties are based on the standards of the European Commission (also recognised in Switzerland). You have the right to inspect the guarantees in these contracts (or parts thereof).

We have engaged the following third parties as sub-processors for our websites (as applicable):

infomaniak ag, 150, chemin des Bombardiers, 1227 Carouge, Switzerland (hosting);

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Analytics and other Google services);

Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA (Meta Pixel and social integrations, where enabled);

Nuntly (transactional email for contact forms, newsletter, and related messages);

Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland (online payments, where offered);

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland;

YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (embedded video content, where displayed).

We use Google Analytics 4 to measure and evaluate use of our websites. Analytics data is collected only after you consent via our cookie banner. Data may be processed on servers outside Switzerland, including in the USA.

Our websites may include content from third party providers, such as videos from platforms like YouTube or social media buttons from platforms such as Facebook or LinkedIn. This content enables visitors to view third-party content on our websites or share our content on social networks.

When you browse our websites and such content is displayed, a connection to the servers of the third party provider may be established. Personal data about your visit, in particular your IP address, may be transmitted to that provider. If you are signed in to that provider's account at the time of your visit (for example with a Facebook or Google account), that provider may detect that you visited our website.

Please note that information regarding the purpose and scope of data processing by such third parties, as well as your rights and setting options, is provided by those third parties.

We use cookies, local storage, and tracking pixels on our websites.

When you first visit, a cookie consent banner lets you accept or reject non-essential analytics and marketing technologies. Your choice is stored in your browser (local storage) so the banner is not shown again. Essential operation of the websites does not require this consent.

If you accept, we load Google Analytics 4 (Google LLC) to measure page views and general use of our websites. Google may set cookies and process usage data, including your IP address in shortened form. We use Google Consent Mode so that analytics and advertising storage remain denied until you accept.

If we enable Meta Pixel (Meta Platforms, Inc.) on a website, it is also loaded only after you accept. Meta Pixel may set cookies and process usage data for measurement and advertising purposes.

If you reject, we do not load Google Analytics or Meta Pixel. You can change your choice at any time by clearing site data or local storage for the website in your browser settings and reloading the page.

Session cookies may be used where technically necessary during a visit. You can delete cookies and site data in your browser at any time and block additional cookies in your browser settings. Doing so may affect some functionality.

Pixel tags (tracking pixels, web beacons) are small graphics loaded when you open a web page or HTML e-mail. They can record access times and transmit browser or device information (for example screen resolution or IP address).

The legal justification upon which we base our processing of personal data is stipulated in article 13(2)(a) FADP (processing directly related to the conclusion or settlement of a contract; corresponding to article 6(1)(b) GDPR) and article 13(1) FADP (consent of the data subject or obligation to process by law), corresponding to article 6(1)(a) GDPR.

We reserve the right to store the first name and surname, postal address, and e-mail address of a data subject pursuant to article 13(1) FADP (corresponding to article 6(1)(f) GDPR) if, based on misuse, non-payment or similar legitimate reasons, we refuse to conclude any future contracts with data subjects.

Furthermore, group entities may also process personal data pursuant to article 13(1) FADP (corresponding to article 6(1)(f) GDPR).

Upon request, we will inform the data subject about and - if so - which personal data we process about him or her (right of confirmation, right of access).

At your request:

we will cease processing personal data, in part or in full (right to withdraw your consent to the processing of personal data for one or more specific purposes; right to erasure (right "to be forgotten")). Your request to be forgotten will also be communicated to third parties to whom we have previously forwarded your personal data.

we will correct the relevant personal data (right to rectification);

we will restrict the processing of the relevant personal data (right to restriction of processing; in this case we will only store or use your personal data to protect our own legal claims or third party rights);

you will receive the relevant personal data in a structured, commonly used and machine-readable format (right to data portability).

To request any of the rights described in this section, for example if you no longer wish to receive our e-mail newsletters, please use the appropriate function on our website or contact our data protection officer as described in section Contact.

If we do not comply with your request, we will inform you of the reasons for our non-compliance. For example, we may legally refuse to delete your personal data if we still need it to fulfil the purpose for which it was originally provided, if the processing is based on mandatory law, or if we have a predominant interest of our own.

If we assert a predominant interest in the processing of personal data, you have nevertheless the right to object to the processing, provided that your individual situation differs from that of other data subjects (right to object).

If you disagree with our response to your request, you have the right to file a complaint with a competent supervisory authority, for example in your country of residence or at the registered seat of abstract (right to appeal).

If any provision of this policy is held to be invalid, illegal or unenforceable, the validity, legality and enforceability of the remaining provisions will in no way be affected or impaired as long as the intent of the parties can be preserved.

Due to the further development of our websites and offers or due to changed legal or official requirements, it may become necessary to change this privacy policy. Material changes will be indicated by updating the date above.

This privacy policy and any agreements concluded based on, or in connection with, this privacy policy are governed by Swiss law, unless the applicable law of another country applies mandatorily. The place of jurisdiction is the registered seat of abstract, unless a different place of jurisdiction applies mandatorily.