1. Data Controller
Data Controller: VNC – Virtual Network Consult AG, Poststrasse 24, 6302 Zug, Switzerland. Contact: info@vnc.biz. We are committed to protecting your personal data and respecting your privacy rights in accordance with the Swiss nFADP (Federal Act on Data Protection) and the GDPR (General Data Protection Regulation).
2. Types of Personal Data Collected
We collect the following categories of personal data:
- Contact information: name, email address, postal address, telephone number
- Account information: username, password (encrypted), account preferences
- Usage data: IP address, browser type, pages visited, time spent, referral source
- Device information: device type, operating system, unique identifiers
- Communication data: correspondence, inquiries, support requests
- Payment information: billing address, payment method (processed securely by third parties)
3. Legal Basis for Processing
We process personal data based on:
- Your consent (explicit or implicit)
- Contract fulfilment (provision of services)
- Legal obligations (compliance with laws)
- Legitimate interests (security, fraud prevention, service improvement)
- Legal claims (establishment, exercise, or defense of legal claims)
4. Use of Personal Data
We use personal data for the following purposes:
- Account management and authentication
- Service delivery and support
- Communication and customer service
- Marketing and promotional activities (with your consent)
- Analytics and usage monitoring
- Security and fraud prevention
- Compliance with legal obligations
- Improvement of services and user experience
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. Typically: account data is retained during your active membership and for 3 years thereafter; marketing data is retained until you unsubscribe. Accounting records (invoices, payment records) are retained for 10 years as required by Swiss commercial law.
6. Data Sharing and Transfers
We do not sell personal data. We may share data with:
- Service providers (payment processors, hosting providers, analytics services)
- Legal authorities (when required by law)
- Business partners (with your consent)
- Successors (in case of merger, acquisition, or bankruptcy)
International transfers are made only when adequate safeguards are in place, in accordance with the GDPR and Swiss law.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
- Lodge a complaint with supervisory authorities
To exercise these rights, contact info@vnc.biz.
8. Security Measures
We implement industry-standard security measures to protect your personal data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and role-based permissions
- Regular security audits and assessments
- Incident response procedures
- Employee training and confidentiality agreements
However, no security system is impenetrable. We cannot guarantee absolute security.
9. AI and Automated Decision-Making
Where we use artificial intelligence, we do so transparently and under human oversight.
- AI-generated or AI-assisted content on this website is disclosed and human-reviewed before publication, in line with the EU AI Act (Article 50).
- VNClagoon AI runs locally on your own infrastructure where applicable, so your prompts, documents, and results do not leave your perimeter.
- Automated outputs in our products (such as the Partner Business Acceleration Fast-Lane plans and the Partner Health Score) are machine-drafted and reviewed by our partner management before they reach you.
- Where an automated decision produces legal or similarly significant effects, you have the right to obtain human intervention, express your point of view, and contest the decision (GDPR Article 22).
10. Analytics and Third-Party Services
This website uses cookieless, first-party analytics to understand aggregate usage and improve the site. We do not set advertising or tracking cookies. Where the website links to or uses third-party services (for example a booking tool or a contact form provider), those services are subject to their own privacy policies.
11. VNClagoon SaaS
11.1 Scope. This chapter applies when an organisation subscribes to VNClagoon SaaS at vnclagoon.com/saas or registers for the launch notification. It supplements the preceding sections.
11.2 Two roles. For account, billing, support and notification data, VNC is the controller. For the content and personal data that a customer and its users place in their VNClagoon SaaS tenant ("Customer Data"), VNC acts as processor on the customer's documented instructions under the VNClagoon SaaS Data Processing Agreement (vnclagoon.com/saas/legal/dpa). Questions about Customer Data are addressed to the customer organisation as controller.
11.3 Data we process as controller.
- Account and administration data: organisation name, name and work e-mail of the administrators and billing contact, VAT or UID number, chosen package, seat count, tenant address.
- Billing and payment data: billing address, invoices, payment status. Card and SEPA details are entered directly with Stripe Payments Europe, Ltd., Dublin, and are not stored by VNC.
- Usage and security data for the account: login times, IP addresses, administrative actions, support requests.
- Launch notification: e-mail address, language, time and text of consent.
11.4 Purposes and legal bases. Conclusion and performance of the subscription, invoicing and collection, support, security and abuse prevention, compliance with accounting and tax law, and, for the launch notification, your consent, which you may withdraw at any time via the link in every message or by e-mail to info@vnc.biz.
11.5 Recipients. Data centre operators in the European Union and Switzerland for hosting; Stripe Payments Europe, Ltd. for payment processing; VNC's own personnel bound by confidentiality. The current list of sub-processors for Customer Data is published at vnclagoon.com/saas/legal/sub-processors. No data is sold or shared for advertising.
11.6 Location. Customer Data and account data are stored and processed in the European Union or in Switzerland, never outside. Where a recipient is subject to the laws of a third country, the EU Standard Contractual Clauses with the Swiss addendum apply as stated in the sub-processor list.
11.7 Retention. Customer Data: for the duration of the subscription plus a 10-day export window, then deletion from production systems within 14 days and from backups within a further 30 days, as set out in the Cancellation and Data Export Policy. Account data: duration of the contract plus 12 months. Accounting records: 10 years. Launch notification data: until the launch message has been sent, then 30 days, or until withdrawal of consent, whichever is earlier.
11.8 Your rights. The rights listed in section 7 apply. Requests concerning Customer Data are forwarded to the customer organisation as controller.
12. Contact and Supervisory Authority
For privacy questions or complaints, contact info@vnc.biz. Competent supervisory authority in Switzerland: Federal Data Protection and Information Commissioner (FDPIC). Persons in the EU or EEA may also lodge a complaint with the supervisory authority of their member state.
Last updated: 15 October 2026