Privacy Policy

This privacy policy explains how Recica Tech, the company behind the Amula AI brand ("we", "us"), processes personal data when you visit www.amula.ai, book a call, contact us, or deal with us as a client, prospective client, partner or supplier.

It is based on the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). Where the EU General Data Protection Regulation (GDPR) applies, section 14 adds the information it requires.

This policy does not cover personal data we process for clients during an engagement, for example in reporting systems we build in a client's own environment. There we act as the client's processor: the client decides how the data is used, and our written agreement with the client governs the processing.

The controller responsible for the processing described in this policy is:

Send data protection questions and requests to the email or postal address above. We have not appointed a data protection advisor under Art. 10 FADP; Rinor Recica handles these requests personally.

This website is delivered by a hosting and content delivery provider based in the USA that runs servers worldwide, including in Switzerland and the EU; each page is usually served from a server near you. When you open a page, your browser sends technical data that the provider processes to deliver the page, keep the website stable and protect it against attacks and misuse:

We do not use this data to identify you, and we do not combine it with other data. The provider keeps it only briefly, for security and operational purposes. Our interest in a secure, working website justifies this processing (Art. 31 para. 1 FADP).

Fonts, images and videos are served from our own domain, so your visit sends no requests to font libraries or video platforms.

We remember whether you want the website in English or German. The choice is stored on your device, in your browser's local storage under the key "amula-locale". It contains only "en" or "de" and stays there until you clear your browser's site data.

If you have not chosen a language and your browser does not indicate a preferred one, your browser makes a single request to a service of our hosting provider, which returns the country associated with your IP address. We use the country only to pick the language and do not store it.

To understand how visitors use this website and to improve its content and structure, we use a web analytics service from a provider based in France. Its script records how you interact with our pages:

From these interactions the service also creates session replays: reconstructions of a visit that show how a visitor moved through the pages. We use the data in pseudonymous form to analyse how the website is used. We do not try to identify individual visitors, and we do not use the data for advertising.

The service stores pseudonymous identifiers in cookies on your device (names beginning with "_cs_"), with lifetimes of between 30 minutes and 13 months. According to the provider, IP addresses are used only to derive the approximate location and for security, and are deleted shortly afterwards; analytics data is kept for up to 13 months. The provider processes the data on our behalf and on our instructions (Art. 9 FADP), on servers in the European Union.

We rely on our overriding private interest in improving our website (Art. 31 para. 1 FADP). You can refuse this processing at any time (Art. 45c of the Telecommunications Act): use the switch below, block cookies in your browser settings, or install a tracking-blocker extension.

The website loads a tag management service from a provider based in Ireland that belongs to a US group. It lets us manage website scripts in one place. When it loads, your browser connects to the provider's servers, which receive your IP address and technical browser data. According to the provider, the service itself collects no information about visitors beyond standard server logs, which are deleted within 14 days.

At the time of this update, we do not use the service to load any analytics, advertising or other scripts. Before we add any, we will update this policy. The provider may process data in the USA; its group is certified under the Swiss-U.S. Data Privacy Framework (see section 10).

Our booking buttons open our online booking calendar; on the contact page it is embedded directly. When you book a call, we process:

We use these details to confirm the appointment, send you the invitation and reminders, prepare for the call and follow up on it, and we record them in our customer relationship system. We process them because you asked us to, and because we have an interest in answering enquiries and preparing a possible contract (Art. 31 FADP).

The booking calendar and the customer relationship system are provided by a service provider based in the USA, which processes the data on our behalf (see section 10). When the calendar loads, your browser sends technical data such as your IP address to the provider, which may set cookies needed for the calendar to work.

If you email or call us, we process your contact details and the content of your message to reply and, where relevant, to prepare and manage a business relationship. Our email runs on a cloud email and office service from a provider based in Ireland that belongs to a US group; data may be processed in the EU and the USA.

Links to LinkedIn on this website are plain links: LinkedIn receives no data from your visit unless you click one, and from then on LinkedIn's own privacy policy applies. If you interact with our company page on LinkedIn, LinkedIn processes your data as its own controller; for the page statistics it provides to us, LinkedIn and we are jointly responsible.

We process the business contact details of people at our clients, prospective clients, partners and suppliers: name, role, employer, business email address and phone number, correspondence, meeting notes, and contract and billing information. We use them to prepare, deliver and invoice our services, to manage the relationship and to keep the business records the law requires.

We may also collect business contact details from publicly accessible sources, such as company websites, the commercial register and professional networks, and from providers of business contact data, to contact people at financial companies about our services. In that case we process the categories of data listed above (Art. 19 para. 3 FADP), relying on our interest in developing our business (Art. 31 para. 1 FADP). You can object at any time, and we will stop contacting you.

We disclose personal data only as far as the purposes described in this policy require, to these categories of recipients:

The Swiss Federal Council recognises the states of the EU and EEA as providing adequate data protection (Annex 1 DPO). Since 15 September 2024, the same applies to US companies certified under the Swiss-U.S. Data Privacy Framework. Where a recipient is in a country without adequate protection and is not certified, we agree standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) (Art. 16 para. 2 lit. d FADP), unless an exception under Art. 17 FADP applies, for example because the disclosure is directly connected with concluding or performing a contract. You can ask us for a copy of these safeguards.

We do not sell personal data.

We keep personal data only as long as we need it for the purpose for which we collected it, as long as the law requires, or as long as we have a legitimate interest in keeping it, for example to document our work or to defend legal claims. After that we delete or anonymise it. As a guide:

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse (Art. 8 FADP), including encrypted connections (HTTPS), access limited to the people who need it, and written agreements with our service providers. If a breach of data security is likely to result in a high risk for you, we notify the FDPIC and, where your protection requires it, you (Art. 24 FADP).

Under the FADP you have the right to:

To exercise these rights, contact us as described in section 2. We may ask you to confirm your identity. Your rights can be restricted where the law allows it, for example where we must keep data for legal reasons.

We do not make decisions based solely on automated processing that have legal effects for you or significantly affect you (Art. 21 FADP).

You can also report a concern to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

If you are in the EU or EEA, the GDPR may apply to some of the processing described here, for example when we offer you our services or analyse your use of this website. In that case:

We may update this privacy policy when our website, our services or the law change. The version published on this page applies.