egtos ("the Platform," "we," "us," or "our") is committed to protecting the privacy of all Users, including partner companies, independent consultants, and consulting firm employees. This Privacy Policy explains what personal and business data we collect, how we process and protect that data, and your rights under applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and UK GDPR where applicable.
Effective Date: August 9, 2025
By using the Platform, you consent to the collection, processing, and storage of your information as described in this Policy.
1. Introduction
egtos is committed to protecting the privacy of all Users, including partner companies, independent consultants, and consulting firm employees. This Privacy Policy explains what personal and business data we collect, how we process and protect that data, and your rights under applicable privacy laws.
2. Data We Collect
We may collect the following categories of data:
Information You Provide:
Registration Data: Name, company name, job title, contact details, login credentials. Profile Data: Skills, professional experience, availability, hourly/daily rates, project history. Business Data: Company profile, services offered, human capacity listings. Payment Information: Billing address, bank account details, payment card information (processed securely via third-party payment providers). Communications: Messages sent via the Platform, project discussions, and feedback.
Information We Collect Automatically:
IP address, browser type, device information. Platform usage activity (logins, profile views, project engagements). Cookies and tracking data (see Section 7).
Information from Third Parties:
Professional background verification from publicly available sources. Company and consultant references from other Users.
3. Purpose of Data Processing
We process your data for:
Platform Functionality:
Enabling networking, capacity trading, and project team formation.
User Verification:
Confirming the identity and credentials of Users.
Transaction Processing:
Facilitating payments, billing, and financial reporting.
Security & Compliance:
Fraud prevention, legal compliance, and risk management.
Service Improvement:
Analytics, feature enhancements, and user experience optimization.
Communications:
Sending updates, service notices, and relevant business opportunities.
4. Legal Basis for Processing (GDPR)
We process data under the following legal bases:
Performance of Contract:
To fulfill our obligations under the Terms & Conditions.
Legitimate Interests:
To maintain a secure and efficient platform.
Consent:
For optional marketing communications and certain cookies.
Legal Obligation:
Where required by law, tax authorities, or regulatory bodies.
5. Data Sharing
We may share your data with:
Other Users:
Only to the extent necessary for networking, project engagement, and collaboration.
Service Providers:
Payment processors, cloud hosting providers, analytics tools, and security services under strict confidentiality agreements.
Regulatory Authorities:
Where legally required.
Business Transfers:
In the event of a merger, acquisition, or sale of assets.
We will never sell your personal data to third parties for marketing purposes.
6. Data Retention
We retain personal and business data:
Active Accounts:
For as long as you maintain an active account.
After Account Closure:
For 3 years after account closure to comply with tax, legal, and accounting obligations.
Communications and Records:
Communications and project records may be retained longer if necessary for dispute resolution.
7. Cookies & Tracking Technologies
We use cookies to:
Authentication:
Authenticate Users.
Preferences:
Remember User preferences.
Analytics:
Track platform usage for analytics.
User Experience:
Improve user experience.
You can manage or disable cookies through your browser settings, though some features may be unavailable without them.
8. Data Security
We implement technical and organizational measures to protect data, including:
Encryption:
SSL encryption for all data in transit.
Infrastructure:
Secure cloud infrastructure with role-based access control.
Auditing:
Regular security audits and vulnerability testing.
Payment Security:
Encrypted storage for sensitive payment data via PCI-DSS compliant processors.
9. International Data Transfers
Where data is transferred outside your country, we ensure adequate safeguards are in place, including EU Standard Contractual Clauses or equivalent legal mechanisms.
10. Your Rights (GDPR & UK GDPR)
You have the right to:
Access:
Access your personal data.
Rectification:
Rectify inaccuracies.
Deletion:
Request deletion ('right to be forgotten').
Restriction:
Restrict or object to processing.
Portability:
Data portability.
Withdraw Consent:
Withdraw consent for optional processing at any time.
Requests can be sent to contact@egtos.ch. We will respond within 30 days as required by law.
11. Confidentiality in Projects
Any confidential business or project information exchanged between Users is governed by the Confidentiality clause in the Terms & Conditions. We do not monitor project communications except where legally required or for dispute resolution.
12. Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
13. Changes to this Privacy Policy
We may update this Policy from time to time. The latest version will always be available on the Platform with the effective date updated. Continued use of the Platform constitutes acceptance of changes.
14. Contact & Data Protection Officer
For questions, concerns, or data requests, contact: egtos GmbH at contact@egtos.ch
– August 9, 2025