Privacy Policy
How ConcrIT collects, uses, and protects your personal data.
Last updated: October 2026
- ✓Your data is hosted exclusively in Switzerland (Infomaniak & AWS Zurich).
- ✓No data is sold, rented, or shared with third parties for commercial purposes.
- ✓No advertising cookies and no third-party analytics tools (Google Analytics or equivalent). To improve the platform, we measure the use of our public pages with software installed on our own server in Switzerland: this data never leaves our infrastructure.
- ✓No banking data is collected or stored - payments are validated manually.
- ✓You can exercise your rights (access, deletion, portability) at any time by contacting us by email.
Data Controller
The data controller for personal data collected via concrit.ch is:
team@concrit.ch
Canton of Vaud, Switzerland
Data Collected
ConcrIT collects the data necessary for the provision and development of the service, grouped into three main categories. ConcrIT reserves the right to collect any additional data made necessary by the evolution of the service, in accordance with this policy.
Data necessary for the creation, management, and security of the user account, including identification data, professional contact details, and account preferences.
Data necessary for invoicing and subscription management, including billing details, payment history, and tax data where applicable. No banking data is collected or stored on our servers.
All data created, imported, or generated by the user in the course of using the service, including calculation projects, structural models, design parameters, and associated results. This data remains the property of the user.
Statistics on how the public pages of the website are used (pages viewed, referrer, device and browser type, country) and a few key actions. For a sample of visits, they also include an anonymous recording of the visit. This data contains no cookies, no IP address, and nothing typed into a form. See the section "Audience Measurement and Platform Improvement".
Purposes and Legal Basis for Processing
Each processing activity is based on an identified legal basis in accordance with the revFADP (SR 235.1) and GDPR (EU 2016/679):
Account management, provision of the calculation service, invoicing and billing. Legal basis: art. 31 para. 2 let. a revFADP / art. 6 §1 b) GDPR.
Platform security, abuse prevention, technical support, audience measurement and platform improvement. Legal basis: art. 31 para. 1 revFADP / art. 6 §1 f) GDPR.
Retention of accounting documents and invoices (art. 958 ff. CO and VATL). Legal basis: art. 31 para. 2 let. c revFADP / art. 6 §1 c) GDPR.
Marketing communications or newsletters, where applicable. You may withdraw your consent at any time without affecting the lawfulness of prior processing. Legal basis: art. 31 para. 2 let. b revFADP / art. 6 §1 a) GDPR.
Sub-processors and Recipients
ConcrIT does not sell or rent your data to third parties. The following technical service providers access data strictly within the scope of their mission, and are bound by a Data Processing Agreement (DPA). ConcrIT reserves the right to modify its sub-processors at any time, provided that an equivalent level of protection is maintained:
Infomaniak Network SA
Route de Meyrin 267, 1217 Meyrin (Geneva), Switzerland - infomaniak.com
Hosting of the website, the application and our audience measurement tool - servers located in Switzerland.
Supabase Inc. / Amazon Web Services (AWS)
Region eu-central-2, Zurich, Switzerland
Storage of user data and projects - hosted exclusively in Switzerland.
Retention Periods
Data is retained for the period strictly necessary for each purpose:
Retained for the duration of the active subscription. Following termination or account deletion, data is deleted within a reasonable timeframe, unless a legal retention obligation applies.
Retained for 10 years in accordance with statutory accounting obligations (art. 962 CO) and VAT prescription periods (VATL).
Any logging data collected for security or abuse detection purposes is retained for the strictly necessary period and for no longer than 12 months.
Statistics and visit recordings are retained for no longer than 12 months, then deleted.
Your Rights
You can exercise your data protection rights by contacting us by email at team@concrit.ch. We will respond within 30 days.
Audience Measurement and Platform Improvement
We measure traffic on our public pages to improve the platform, with free software hosted in Switzerland, only if you accept. For more details, write to us at team@concrit.ch.
Cookies and Trackers
ConcrIT only uses the cookies necessary for the application to work (session, CSRF protection, language). No advertising or third-party tracking cookies are set. For more details, write to us at team@concrit.ch.
Data Security
ConcrIT implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or accidental disclosure, including: encryption of data in transit (TLS 1.2+) and at rest, access control through authentication, regular backups, and access logging. These measures do not constitute an obligation of result.
The user is solely responsible for the data they import, create, or store within the platform, and warrants that such data does not infringe any third-party rights. ConcrIT reserves the right to use aggregated and anonymized data for service improvement purposes, in a form that does not allow identification of any individual user.
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, ConcrIT will use its best efforts to notify you as soon as possible, in accordance with art. 24 revFADP and art. 33-34 GDPR.
Policy Amendments
ConcrIT reserves the right to modify this policy at any time, without prior notice, in particular to adapt to changes in legislation or processing practices. The current version is the one published on the website at the time of consultation. In the event of a major change, ConcrIT will use its best efforts to inform active users.
Contact & Complaints
For any questions regarding this policy or to exercise your rights: team@concrit.ch