Privacy Policy

Version 1.1 | Last updated: 01.11.2025

1. Applicability

Porters Group AG ("Porters", "we", "us") is committed to protecting your privacy and safeguarding all personal data that flows through our website www.withporters.com ("Website").

This Privacy Policy explains how we collect and process personal data ("Personal Data") in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

This Policy applies only to this Website and not to any third-party websites that may be linked to it. Those are governed by their own privacy policies.

If you have any further questions regarding data protection or data processing, please do not hesitate to contact us at any time using the contact details provided below.

2. Controller, Contact and Data Protection Officer

Porters Group AG ("Porters", "we" or "us")

Delphinstrasse 14

8008 Zürich, Switzerland

E-Mail: info@withporters.com

Porters Group AG is the controller responsible for processing Personal Data collected through this Website.

Our data protection officer is available for you at:

Porters Group AG

Data Protection Officer

Delphinstrasse 14, 8008 Zurich, Switzerland

Email: dataprotection@withporters.com

3. Data processing when visiting our website

a) Information you provide voluntarily

When you contact us via the Website contact form or by email, we collect the Personal Data you provide, such as:

  • Name
  • Email address
  • Message content

We use this information solely to respond to your inquiry.

b) Automatically collected data

When you visit our Website, certain technical information is automatically collected, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of access

This data is used for website operation, security, and performance monitoring. We do not use it to identify you personally.

4. Purpose and Legal Basis of Processing

We process your Personal Data for the following purposes:

Purpose: Responding to contact requests

Legal Basis: Art. 6 (1) lit. b GDPR / legitimate interest under FADP

Purpose: Operating and improving the Website

Legal Basis: Art. 6 (1) lit. f GDPR / legitimate interest under FADP

Purpose: Ensuring security and preventing misuse

Legal Basis: Art. 6 (1) lit. f GDPR / legitimate interest under FADP

Purpose: Managing email communications with subscribers

Legal Basis: Art. 6 (1) lit. a GDPR / consent

Purpose: Processing job applications

Legal Basis: Art. 6 (1) lit. b GDPR / legitimate interest under FADP

We do not sell or otherwise disclose Personal Data for marketing purposes. Where this Policy references GDPR provisions, these apply analogously under the Swiss FADP.

5. Processing of data when engaging in a partnership agreement

If you engage in a partnership agreement with Porters, we process data relevant to the partnership agreement for the purpose of processing and managing the joint partnership. The data processed includes, in particular:

  • Your name, email address, and postal address;
  • Your company’s name, email address, and postal address;
  • Bank details or payment details of partners for the settlement of fees
  • and other information necessary for the verification or processing of the partnership.

This data is processed on the basis of Art. 6 (1) lit. b GDPR (performance of a contract).

6. Use of processors

To provide the services listed above, we use carefully selected external service providers who process personal data on our behalf. This particularly applies to activities such as hosting and provision of technical infrastructure, customer service and support, communication (e.g. by email or chat), payment processing, analysis and validation of data, as well as our partner program and internal administrative processes.

Data Processing is carried out exclusively on the basis of data processing agreements in accordance with Art. 28 (3) GDPR. Our service providers are contractually obliged to process personal data only in accordance with our instructions and in compliance with high data protection standards. Where possible, data processing takes place within the European Union, the European Economic Area or Switzerland.

7. Data transfer to third countries

As a matter of principle, we process personal data on servers located within the European Union or Switzerland in compliance with the highest security standards.

However, in the course of providing our services, certain data may be transferred to service providers in so-called "third countries," i.e., countries outside the EU or the European Economic Area (EEA) where the GDPR does not apply directly. Such data transfers only take place under the conditions of Art. 44 ff. GDPR.

In particular, this means:

  • A transfer is permissible if the European Commission has determined that an adequate level of data protection exists in the respective third country ("adequacy decision"). A current list of these countries can be found here: https://commission.europa.eu/law/.../adequacy-decisions_en
  • If no such adequacy decision has been made, personal data will only be transferred if appropriate safeguards are in place, such as the conclusion of EU standard contractual clauses or if the receiving company is certified under the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/). Alternatively, a transfer may also take place if a legally provided exception pursuant to Art. 49 GDPR applies.

8. Cookies and similar technologies

We use cookies and similar technologies (e.g. pixels) on our website or Platform. Cookies are text files that your browser automatically creates and stores on your end device. These cookies store different types of information. Some of the cookies are deleted when you end your browser session ("session cookies"). In some cases, the cookies remain stored on your end device, for example to recognize you as a returning user when you next visit our website or our Platform.

We use the following types of cookies:

Necessary cookies

These are cookies that are absolutely necessary for the functionality and provision of our website. The legal basis for accessing or storing information on your end device is Section 25 (2) No. 2 of the Telecommunication and Digital Services Data Protection Act (TDDDG); the legal basis for the associated data processing is our legitimate interest in the provision and convenient use of our website within the meaning of Art. 6 (1) lit. f) GDPR.

Analysis & Statistics

We also use certain cookies to statistically evaluate and improve the use of our website and Platform. The legal basis for accessing or storing information on your end device is your consent in accordance with Section 25 (1) TDDDG; the legal basis for the associated data processing is your consent in accordance with Art. 6 (1) lit. a) GDPR.

When you visit our website, you can use a cookie management tool (“cookie banner”) to manage your cookie settings and give your consent to the use of cookies or revoke your consent at any time. Further information on the use of these technologies can also be found in the cookie banner.

You can adjust your settings at any time in the footer of our website under "Cookies" by calling up the cookie banner again.

9. Duration of storage of your personal data

Unless we have specified a shorter storage period in this Privacy Policy, we generally only store personal data (i) for as long as is necessary to provide the services to you and/or (ii) for as long as is necessary with regard to the contractual relationship with you; the data will subsequently only be stored if and to the extent that we are obliged to do so due to statutory retention obligations. If the relevant personal data is no longer required for the purposes described above, such personal data will only be stored for the duration of the respective statutory retention obligations and will not be processed for any other purposes.

10. Your Rights

Under the Swiss FADP and, where applicable, the GDPR, you have the following rights:

  • Access to your data
  • Rectification or deletion
  • Restriction or objection to processing
  • Data portability
  • Withdrawal of consent (at any time with future effect)

To exercise these rights, please contact us at info@withporters.com

We may request proof of identity to ensure that we only disclose Personal Data to the rightful person.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch

11. Changes to This Policy

We will update our privacy policy if this is necessary due to factual or legal changes or to take account of technical or economic developments. We will inform you of such changes in advance in an appropriate manner. If you continue to use our services after receiving a corresponding notification from us, we may assume that you accept the changes to the privacy policy.

Appendix

LLMProviderTerms of Use
  • Anthropic Models
  • Amazon Models
  • Mistral Models
  • OpenAI Models
  • Meta Models
Amazon Bedrock

Porters has entered into a customer contract with AWS. Porters uses Amazon Bedrock services based on the AWS Service Terms. In these terms, AWS has committed not to use content processed via AI services for training the models or for improving other AWS services. The fact that Amazon does not use the data for training purposes is stated in the AWS Service Terms, the DPA, and is also summarized again in the User Guide: "Amazon Bedrock doesn't store or log your prompts and completions. Amazon Bedrock doesn't use your prompts and completions to train any AWS models and doesn't distribute them to third parties." Porters has also concluded a data processing agreement with AWS that regulates the data processing by AWS. In this agreement, AWS has committed, among other things, to treat the data confidentially, not to disclose it to third parties, and to process the data only in the European Union.

Google ModelsGoogle Cloud Platform

Porters has entered into a customer agreement with Google. Porters uses Google Cloud Platform services based on the Service Specific Terms. In these terms, Google has committed not to use customer data for training or improving AI/ML models without prior customer consent. Accordingly, Google also states in a guide on generative AI products from Google Cloud and in a statement on privacy commitments for cloud-based AI products that Google Cloud, by default, does not use customer data to train its foundation models: "Customers can use Google Cloud's foundation models knowing that their prompts, responses, and any adapter model training data aren't used for the training of foundation models." Additionally, Porters has entered into a data processing agreement with Google Cloud, which governs data processing by Google Cloud. In the Service Terms, Google Cloud also assures that if the customer chooses a specific region or multi-region as the data location, Google will store the customer data only in that selected region or multi-region.