smartNsales Enterprise
Log in ← Back
← Back to homepage Log in

Privacy Policy

Controller: smartNsales AG, Habsburgerstrasse 32, 6003 Luzern, Switzerland
Applies to: smartnsales-enterprise.com

Last Updated: May 2026

Contents

  1. Data Controller
  2. Scope of This Policy
  3. Data We Collect
  4. Purpose & Legal Basis
  5. Data Retention
  6. Third-Party Sharing
  7. International Transfers
  8. Your Rights
  9. Cookies & Tracking
  10. Children's Privacy
  11. Security
  12. Changes to This Policy
  13. Governing Law
  14. Contact & Complaints

This Privacy Policy applies to personal data collected through the smartNsales Enterprise marketing website (smartnsales-enterprise.com), including the demo request form. For data processed within the smartNsales Enterprise platform itself (customer data, operator data), please refer to the Data Processing Agreement (DPA) available upon request.

1. Data Controller

1.1. Identity

The data controller responsible for your personal data collected on this website is:

smartNsales AG
Habsburgerstrasse 32
6003 Luzern
Switzerland

Email: info@smartnsales-enterprise.com
Privacy contact: privacy@smartnsales-enterprise.com

1.2. Applicable Law

smartNsales AG is a company incorporated under Swiss law and is subject to the Swiss Federal Act on Data Protection (nFADP / revDSG), which entered into force on 1 September 2023. Where we process personal data of individuals in the European Economic Area (EEA), we also comply with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).


2. Scope of This Policy

2.1. What This Policy Covers

This Privacy Policy explains how smartNsales AG collects, uses, stores, and shares personal data when you:

  • visit or browse our marketing website at smartnsales-enterprise.com;
  • submit a demo request or contact form on this website;
  • communicate with us by email or other means in connection with this website.

2.2. What This Policy Does Not Cover

This policy does not govern the processing of personal data that enterprise clients upload or input into the smartNsales Enterprise SaaS platform. That processing is governed by the client's own privacy policies and a separate Data Processing Agreement (DPA) entered into between smartNsales AG and the client.


3. Data We Collect

3.1. Demo Request Form

When you submit a demo request on our website, we collect the following personal data:

  • First name and surname
  • Business email address
  • Company name
  • Telephone number (optional)
  • Free-text message describing your inquiry (optional)

Submission of this form requires your explicit agreement to this Privacy Policy. Mandatory fields are marked with an asterisk (*).

3.2. Server Logs and Technical Data

Like all web servers, our hosting infrastructure automatically records standard technical information when your browser makes requests to our server. This may include:

  • IP address (may be truncated or anonymised depending on server configuration)
  • Browser type and version
  • Operating system
  • Referring URL (the page you visited before arriving on our site)
  • Pages visited and timestamps
  • HTTP status codes

Server log data is retained for operational and security purposes. Where it constitutes personal data, it is processed under our legitimate interest in maintaining website security, detecting abuse, and diagnosing technical problems.

3.3. Cookies and Local Storage

We use essential cookies and browser local storage to remember your language preference and your cookie consent choice. We currently do not run any analytics or tracking scripts on this website. For full details, see our Cookie Policy.

3.4. Data You Provide Voluntarily by Email

If you contact us directly by email (e.g. at info@smartnsales-enterprise.com), we will process the personal data contained in your correspondence. We use this data solely to respond to your inquiry and keep a record of our communications.

3.5. Data We Do Not Collect

We do not collect or intentionally process:

  • special categories of personal data (health data, biometric data, political opinions, etc.);
  • financial or payment data through this website;
  • personal data of children under 18 (see Section 10).

4. Purpose & Legal Basis

The table below sets out the purposes for which we process your personal data and the corresponding legal basis under the GDPR and Swiss nFADP:

Purpose Data Used Legal Basis (GDPR) Legal Basis (nFADP)
Processing and responding to demo requests Name, email, company, telephone, message Art. 6(1)(b) — steps prior to entering a contract; Art. 6(1)(a) — consent Art. 31(2)(a) nFADP — consent; overriding interest
Following up on your inquiry and scheduling a demo Name, email, company Art. 6(1)(f) — legitimate interests (business development) Overriding legitimate interest (Art. 31(1) nFADP)
Maintaining website security and diagnosing technical errors Server log data, IP address Art. 6(1)(f) — legitimate interests (IT security) Overriding legitimate interest (Art. 31(1) nFADP)
Remembering your language preference and cookie consent Local storage (sns_lang, sns_cookie_consent) Art. 6(1)(f) — legitimate interests (website functionality) Technical necessity / legitimate interest
Compliance with legal obligations (e.g. records retention) Name, email, correspondence records Art. 6(1)(c) — legal obligation Art. 31(2)(c) nFADP — legal obligation

4.1. Legitimate Interests

Where we rely on legitimate interests as our legal basis, we have balanced our interests against your interests and rights. You may object to processing based on legitimate interests at any time (see Section 8.6). In particular, we rely on legitimate interests to follow up on inbound demo requests from business professionals who have voluntarily submitted a contact form expressing interest in our services.

4.2. Consent

Where we rely on consent (for example, your agreement to this Privacy Policy when submitting the demo form), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal. To withdraw consent, contact us at privacy@smartnsales-enterprise.com.


5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, comply with our legal obligations, and resolve disputes. Our standard retention periods are:

Data Category Retention Period Rationale
Demo request data (name, email, company, message) 24 months from date of submission, or until you request deletion Sales cycle follow-up and CRM records
Email correspondence 5 years from the date of last communication Legal records / limitation periods under Swiss CO Art. 127
Server log files 90 days (rolling), unless retained for active incident investigation Security monitoring and abuse detection
Cookie consent records (local storage) 12 months, renewed on re-consent Demonstrating compliance with consent obligations

At the end of each retention period, data is securely deleted or anonymised. You may request earlier deletion at any time (see Section 8.3).


6. Third-Party Sharing

6.1. No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2. Hosting & Infrastructure

Our website and form submission data are hosted on infrastructure located in Switzerland. Our hosting provider processes data on our behalf as a data processor and is contractually bound to process data only on our instructions and to implement appropriate technical and organisational security measures.

6.3. Internal Access

Access to personal data submitted through this website is restricted to smartNsales AG staff who need it to respond to your inquiry (e.g. sales and business development team members). All staff are bound by confidentiality obligations.

6.4. Legal Disclosures

We may disclose personal data to courts, law enforcement authorities, regulators, or other public authorities where required by law, court order, or to protect the rights and safety of smartNsales AG or third parties. We will notify you of any such request where legally permitted to do so.

6.5. Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of smartNsales AG's assets, personal data held by us may be transferred to the successor entity, subject to the same or equivalent privacy protections as those described in this policy. We will notify you in advance of any such transfer where required by law.

Currently, we do not share the personal data collected on this website with any third-party analytics, advertising, or marketing platforms. This may change in the future, and any such changes will be reflected in an updated version of this policy with fresh consent collected as appropriate.


7. International Data Transfers

7.1. Processing in Switzerland

All personal data collected through this website is currently processed and stored in Switzerland. Switzerland has been recognised by the European Commission as providing an adequate level of data protection (adequacy decision 2000/518/EC as updated).

7.2. Future Transfers

Should we in the future engage processors or sub-processors located outside Switzerland or the EEA, we will ensure that appropriate safeguards are in place, including:

  • EU Standard Contractual Clauses (SCCs) for EEA-to-third-country transfers;
  • Swiss adequacy decisions or FDPIC-approved safeguards for Swiss-to-third-country transfers;
  • EU–US or Swiss–US Data Privacy Framework certification where applicable.

This policy will be updated accordingly.


8. Your Data Subject Rights

Depending on your location and the applicable law (GDPR and/or Swiss nFADP), you have the following rights in relation to your personal data:

8.1. Right of Access (Art. 15 GDPR / Art. 25 nFADP)

You have the right to obtain confirmation of whether we process your personal data, and if so, to receive a copy of that data along with information about how it is processed.

8.2. Right to Rectification (Art. 16 GDPR / Art. 32 nFADP)

You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.

8.3. Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR / Art. 32 nFADP)

You may request the deletion of your personal data where:

  • the data is no longer necessary for the purpose for which it was collected;
  • you withdraw consent and there is no other legal basis for processing;
  • you object to processing and there are no overriding legitimate grounds;
  • the data has been unlawfully processed; or
  • deletion is required by applicable law.

We will honour deletion requests subject to any legal retention obligations we must comply with (e.g. statutory record-keeping requirements).

8.4. Right to Restriction of Processing (Art. 18 GDPR)

You may request that we restrict processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested.

8.5. Right to Data Portability (Art. 20 GDPR / Art. 28 nFADP)

Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

8.6. Right to Object (Art. 21 GDPR / Art. 30 nFADP)

You have the right to object at any time to processing of your personal data based on our legitimate interests. Upon receipt of an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

8.7. Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8.8. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us by email at:

privacy@smartnsales-enterprise.com

We will respond to your request within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you. We will not charge a fee for responding to a legitimate request unless it is manifestly unfounded or excessive.

We may ask you to verify your identity before processing a rights request in order to protect your data from unauthorised access.

If you are located in the EEA, you also have the right to lodge a complaint with the supervisory authority of your EU member state. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC) at Feldeggweg 1, 3003 Bern, Switzerland.


9. Cookies & Tracking Technologies

9.1. Essential Cookies Only

We currently use only essential cookies and local storage on this website. We do not use analytics, advertising, or third-party tracking cookies.

The essential storage items we use are:

  • sns_cookie_consent — stores your cookie consent preferences (localStorage, 12 months)
  • sns_lang — remembers your selected display language (localStorage, 12 months)

9.2. Third-Party CDN

Our website loads the Lucide Icons library from the unpkg.com CDN (unpkg.com/lucide@latest). This is a JavaScript file only; it does not set cookies or collect personal data. The CDN provider may log your IP address in server access logs as part of standard CDN operation.

9.3. Full Cookie Policy

For a complete description of cookies, their duration, and how to manage them, see our Cookie Policy.


10. Children's Privacy

The smartNsales Enterprise website and platform are designed for business professionals and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at privacy@smartnsales-enterprise.com and we will delete it promptly.


11. Security

11.1. Technical & Organisational Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

  • HTTPS encryption for all data in transit (TLS 1.2 / 1.3);
  • access controls limiting data access to authorised personnel only;
  • hosting on Swiss-based infrastructure with physical and logical security measures;
  • regular review of security practices and configurations.

11.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority (the FDPIC for Swiss law; your national DPA for GDPR) without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this page indicates when the policy was last revised.

Where changes are material, we will notify you by posting a prominent notice on this website. Where required by law, we will obtain fresh consent before applying material changes to existing data.

We encourage you to review this policy periodically to stay informed about how we protect your information.


13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Switzerland, in particular the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Any disputes arising out of or in connection with this Privacy Policy shall be subject to the jurisdiction of the competent courts of Luzern, Switzerland, without prejudice to your right to bring a complaint before a supervisory authority in your country of residence.


14. Contact & Complaints

smartNsales AG — Data Controller

Habsburgerstrasse 32, 6003 Luzern, Switzerland

General enquiries: info@smartnsales-enterprise.com

Privacy & data protection: privacy@smartnsales-enterprise.com

For any questions about this Privacy Policy or to exercise your data subject rights, contact us at the address above. We aim to respond within 30 days. If you are dissatisfied with our response, you have the right to contact the supervisory authority in your jurisdiction:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

EEA: The data protection authority of your EU member state of residence.

smartNsales Enterprise

We connect brands with markets.

smartNsales AG
Habsburgerstrasse 32, 6003 Luzern
info@smartnsales-enterprise.com

FAQ Book a Demo Privacy Policy Cookie Policy Terms & Conditions

© 2026 smartNsales AG. Luzern, Switzerland. All rights reserved.