HOPR Services Ltd., Bleicherweg 33, 8002 Zürich, Switzerland (“we”, “us”, or “HOPR”) is dedicated to improving data privacy and reducing reliance on personal data. This Privacy Notice (“Notice”) shows what kind of personal data we process in what manner. However, please take note of the fact that circumstances on how we collect and process Your personal data may change and, thus, we may update this Notice from time to time in order to reflect current circumstances. An actual version of this Notice is available on our website at: https://hoprnet.org/disclaimer.

We want to process as little personal information as possible when our customers, business partners and others (“You”) use our services. We may inform You about further processing of Your data separately, for example in consent forms, terms and conditions, additional privacy notices, forms and other notices. We use the word «data» here interchangeably with «personal data».

If You provide information to us about any person other than Yourself, Your employees, counterparties, business partners, advisors or Your suppliers, You must ensure that the data is accurate and that they understand how their information will be used, and that they have given their permission for You to disclose it to us and for You to allow us, and our outsourced service providers, to use it.

The responsible person for processing Your data under this Privacy Notice («Controller») unless we tell You otherwise in an individual case is:

HOPR Services Ltd.
Bleicherweg 33
8002 Zürich
e-mail: info@hoprnet.org

Depending on the reason for the processing, we process different data about You. Much of the data set out in this Section is provided to us by You (e.g. forms, communication contracts, website etc.) and You are not obliged to disclose data to us. However, if You wish to enter into contracts with us or use our services, You must provide us with certain data as part of Your contractual obligation under the relevant contract. When using our website, the processing of technical data cannot be avoided and when You wish to gain access to certain systems or buildings, You must also provide us with registration data.
Website
When visiting our website https://rpch.net/ incl. any subsite, we process:

When You access and visit our website, technical data is collected, for example, Your IP- address, type of browser, type of device, access date, time and duration, websites that You access. Note that your raw IP address and User Agent are never saved by Fathom analytics or Vercel and we do not have access to your IP address at any time. Unique visitors are identified via SHA256 hashes, to guarantee Your privacy. Technical data is recorded in logs with records of the use of our systems. We generally keep technical data for 24 hours. Technical data as such does not permit drawing conclusions about Your identity.

We have integrated various social media buttons on our website providing You the opportunity to connect to our social media presence on theses platforms and get further insights in how our products are set up and work. We may only process Your data if You click on these buttons, login to Your own account on these platforms or register or behave otherwise to access it. By clicking on each of these buttons You agree that personal data may be collected and processed which may also happen by these social media providers which may be located abroad (e.g. the USA), on their sole and own discretion and responsibility. The social media platform may store the data collected about You as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its platform. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of targeted advertising and to inform other users of the social media platform about Your activities on our website. Your connection to a social media platform, the data transfers that take place between the network and Your system and Your interactions on this platform are subject exclusively to the privacy notices of the respective platform. For further information on the purpose and scope of data collection and processing by the social media platform, please review the privacy notices of these social media platforms, where You will also receive further information about Your rights and about setting options for protecting Your privacy.

We have also integrated a GitHub button which links You directly to this platform. GitHub servers may collect and save information/data regarding the pages You view, the referring site, Your IP address and information/data about Your device, session information, the date and time of each request, and telemetry data (i.e., information about how a specific feature or service is performing) regarding Your use of other features, Your interaction with GitHub and functionality of GitHub's service. They use this information/data to provide, administer, analyze, manage, and operate their service. We do not collect, store, or process the information and/or data collected by GitHub. For more information about the information/data GitHub collects and how it uses this information/data, please visit GitHub’s privacy policies

When You get in contact with us via the online contact form, the Order Form, by e-mail, phone, chat, letter or by any other means of communication, we collect the data exchanged between You and us, including Your contact details and the metadata of the communication.

When You wish to interact with us in order to receive our services, we process Your data that You provide to us voluntarily when getting in touch with us via our communication channels (incl. website), from parties You work for, from third parties such as contractual partners, and maybe also from public sources. We process Your data if You are a customer or other business contact or work for one, or because we wish to address You for own purposes or for the purposes of a contractual partner as part of marketing or advertising measures. To conclude a contract with us You are required to fulfil our Service Order Form including various personal data we need to process Your service order and perform subsequent contract with You which may include Your name, Your project, address / country of domicile, user name and address You use to register, contact person name, e-mail address of a contact person, (billing) address, payment data (method, currency, bank etc., services we provide You with and terms related thereto as well as Know Your Customer (KYC) data, Know Your Business (KYB) data and further data relating to fraud prevention and the combating of money laundering and terrorist financing, export restrictions, sanctions and embargoes. Performing the contract we may process data such as the calls of requests, and your unique clientID. We generally keep this data for 10 years from the last exchange between us but at least from the end of the contract. This period may be longer if required for evidentiary purposes, to comply with legal or contractual requirements, or for technical reasons. For contacts used only for marketing and advertising, the period is usually much shorter, usually no more than 2 years from the last contact.

Other data may be processed in relation with administrative or judicial proceedings for security reasons, events or campaigns and monitoring of our physical and IT-infrastructure and systems or other situations where we have a reason to protect our legitimate interest. The retention period for this data depends on the processing purpose and is limited to what is necessary.

We process Your data for the purposes explained below. These purposes and their objectives represent the interests of us and potentially of third parties.

Where required, we rely on a legal basis for processing Your Data. Where we asked for Your consent, we process Your data based on such consent. You may withdraw Your consent at any time with effect for the future by providing us written notice (e-mail sufficient) to: info@hoprnet.org. Withdrawal of Your consent does not affect the lawfulness of the processing that we have carried out prior to Your withdrawal, nor does it affect the processing of Your data based on other processing grounds. Otherwise, we may process Your data in the context of (i) a contractual obligation, (ii) a legal obligation, (iii) a vital interest of the data subject or of another natural person, (iv) to perform a public task, or (v) a legitimate interest, which includes compliance with applicable law and the marketing of our products and services, the interest in better understanding our markets and in managing and further developing our company, including its operations, safely and efficiently.

You have various rights in relation with our processing of Your personal data, depending on the applicable data protection law:

If You like to exercise the above-mentioned rights, please contact us at info@hoprnet.org. Please note that we need to identify You to prevent misuse, e.g. by means of a copy of Your ID card or passport, unless identification is possible otherwise.

We take appropriate organisational and technical measures to prevent Your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. However, we and Your personal data can still become victims of cyber-attacks, cybercrime, brute force, hacker attacks and further fraudulent and malicious activity including but not limited to viruses, forgeries, malfunctions and interruptions which is out of our control and responsibility.

In order to perform our contracts, fulfil our legal obligations, protect our legitimate interest and the other purposes and legal grounds set out above, we may disclose Your data to third parties, in particular to the following categories of recipients:

As we have explained in Section VIII, we disclose data to other parties, not all of them located in Switzerland. This also applies to our presence on social networks/platform as described below in Section X. Your data may be processed in the European Economic Area (EEA) and in exceptional circumstances also in countries outside the EEA and around the world, which includes countries that do not provide the same level of data protection as Switzerland or the EEA and are not recognized as providing an adequate level of data protection. We only transfer data to these countries when it is necessary for the performance of a contract or for the exercise or defence of legal claims, or if such transfer is based on Your explicit consent or subject to safeguards that assure the protection of Your data, such as the European Commission approved standard contractual clauses.

We use cookies on our website [and may allow certain third parties to do so as well]. Cookies are small files that Your browser automatically creates and that are stored on Your device (laptop, tablet, smartphone, etc.) when You visit our website. However, depending on the purpose of these cookies, we may ask for Your express prior consent before they are used. You can access Your current settings by clicking on the [Link einfügen, wo Cookies settings abrufbar sind] and You can withdraw Your consent under the same link at any time. You can also set Your browser to block or deceive certain types of cookies or alternative technologies, or to delete existing cookies, adding software to Your browser that blocks certain third-party tracking. Please learn more on the help pages of Your or on the websites of the third parties.

We only process Your data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of complying with legal retention requirements and where required to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. Upon expiry of the applicable retention period we will securely destroy Your data in accordance with applicable laws and regulations. Contract data