Privacy Policy

HarmoniX GmbH

Sandäckerstrasse 1a

8957 Spreitenbach, Canton of Aargau, Switzerland

UID: CHE-287.266.848

Email: info@harmonixgroup.ch

Website: harmonixgroup.ch

1. Introduction and Controller

HarmoniX GmbH ("we", "us", "HarmoniX") takes the protection of your personal data seriously. This Privacy
Policy explains what data we collect when you visit our website harmonixgroup.ch or contact us, how we
process that data, and what rights you have.

The controller responsible for data processing under the Swiss Federal Act on Data Protection (FADP) and,
where applicable, the EU General Data Protection Regulation (GDPR), is:

HarmoniX GmbH

Sandäckerstrasse 1a, 8957 Spreitenbach, Switzerland

info@harmonixgroup.ch

This Privacy Policy applies exclusively to our website. Use of the HarmoniX therapy platform by institutions
and their patients/clients (including processing of biometric data such as heart rate, heart rate variability,
and respiration) is governed by a separate data processing agreement concluded with the respective
institution.

2. What Data We Process

2.1 Data You Provide to Us

● Contact form: name, email address, phone number, institution/company, message content

● Requests for demos, partnerships, or press inquiries

● Application documents, if you apply to work with us

2.2 Data Collected Automatically

● Server log files (IP address, date/time of access, page accessed, browser type, referrer URL)

● Cookies and similar technologies (see Section 5)

● Usage statistics (if analytics tools are used, see Section 4.3)

2.3 Special Categories of Personal Data

We do not collect health or biometric data through the website itself. Should special categories of personal
data (e.g. health data, biometric data) be processed as part of platform use by institutions, this occurs
exclusively under separate contractual agreements with the respective institution as data controller;
HarmoniX acts as data processor in this context.

3. Purposes of Processing

We process your data for the following purposes:

● Providing and operating the website
● Responding to inquiries and communication
● Scheduling demos/consultation calls
● Improving our web offering (analytics, troubleshooting)
● Complying with legal obligations
● Direct marketing, where you have consented or where legally permitted

4. Legal Bases

Depending on the circumstances, we rely on:

● Your consent (e.g. for newsletter sign-up or non-essential cookies)
● Performance of pre-contractual measures or a contract (e.g. handling your inquiry)
● Our legitimate interest (e.g. website security, traffic analysis)
● Legal obligations

Where the GDPR applies (e.g. to visitors from the EU/Germany/Austria), we rely on Art. 6(1)(a), (b), and (f)
GDPR.

4.1 Hosting

Our website is operated via Vercel (frontend). Data may consequently be processed on servers outside
Switzerland/the EU (e.g. in the USA). We ensure that appropriate data processing agreements or standard
contractual clauses are in place with our hosting providers to guarantee an adequate level of data
protection.

4.2 Recipients and Processors

We only share your data with:

● IT service providers (hosting, technical maintenance), e.g. Vercel, Railway
● Authorities, where legally required
● Advisors (e.g. legal, tax), where necessary

We do not share your data with third parties for advertising purposes.

5. Cookies

We use cookies to ensure the functionality of our website. A distinction is made between:

● Necessary cookies: required for the technical operation of the site
● Functional/analytics cookies: only with your consent, e.g. to optimize our offering

You can manage or disable cookies via your browser settings. This may limit the full functionality of the
website.

6. Retention Period

We retain personal data only as long as necessary for the purposes stated above or as required by law (e.g.
Swiss commercial and tax law generally require retention of business correspondence for 10 years).
Inquiries submitted via the contact form are deleted once they have been fully processed and no further
retention obligations apply.

7. Your Rights

Under applicable law (FADP and/or GDPR), you have in particular the following rights:

● Access to the data we process about you
● Rectification of inaccurate data
● Erasure of your data
● Restriction of processing
● Data portability (where the GDPR applies)
● Withdrawal of consent given, with effect for the future
● Objection to processing for direct marketing purposes
● Lodging a complaint with the competent supervisory authority (in Switzerland: the Federal Data
Protection and Information Commissioner, FDPIC; for data subjects in the EU, the competent data
protection authority)

To exercise your rights, please contact us using the details above.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against
unauthorized access, loss, or misuse (e.g. encrypted transmission via TLS/SSL, access restrictions).

9. International Data Transfers

Where data is transferred to countries without an adequate level of data protection (e.g. the USA), we
ensure an adequate level of protection through appropriate safeguards (e.g. the EU Commission's Standard
Contractual Clauses, the Data Privacy Framework).

10. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in law or in our offering. The current
version is always available on this page.

11. Contact

For questions regarding data protection, please contact:

HarmoniX GmbH

Sandäckerstrasse 1a, 8957 Spreitenbach, Switzerland

Email: info@harmonixgroup.ch

HarmoniX GmbH

HarmoniX connects music, therapy, and technology to create inclusive learning and wellbeing experiences for individuals, institutions, and communities.

Based in Switzerland – working internationally.

© 2026 HarmoniX GmbH. All rights reserved.