Datenschutzerklärung

Who are we?

This Privacy Policy applies to Artifact SA. Artifact is a professional service provider in AI and data science: we help business clients accelerate their journey and apply pragmatic, sophisticated AI solutions to deliver real impact.

Data protection principles

Under data protection law, the personal data we hold about you is:

Processed lawfully, fairly and in a transparent manner
Collected only for legitimate purposes that have been communicated to you, and not processed in a way incompatible with those purposes
Stored adequately, with rules appropriate to the purpose of storage
Accurate and, where necessary, kept up to date
Kept in a form permitting identification for no longer than necessary
Processed in a way that ensures appropriate security

Where necessary, remote deletion of personal data on Artifact devices is possible. Artifact SA is responsible for complying with these principles.

How do we collect personal data?

Directly: we obtain personal data directly from individuals in a variety of ways, for example during our hiring process via our application platform, when establishing a work contract, during the development of a business relationship, when we deliver professional services under a contract, through our hosted software applications, or when obtaining business cards or contact emails via our website. We also obtain personal data through social networking sites such as LinkedIn when you connect with us.

Indirectly: we obtain personal data indirectly from a variety of sources, including recruitment services and client interactions and discussions. We may attach personal data to our customer relationship management records to better understand and serve our business clients, prospects and individuals, satisfy legal obligations, or pursue our legitimate interests.

Public sources: personal data may be obtained from public registers such as commercial registers, news articles, internet searches and social media
Recruitment services: we may obtain personal data about candidates from an employment agency or through recruitment platforms such as Recruitee
Business clients: we may be engaged to perform services with access to personal data under our business clients’ control; separate contracts with additional restrictions typically apply in such cases

What personal data do we collect?

To conduct our business activities:

Contact details (name, company name, job title, work and mobile phone numbers, work and personal email, postal addresses)
Professional details (published articles, LinkedIn profile, career background, event participation)

To conduct our hiring process:

Contact details (name, address, phone numbers, email)
Information shared in your CV, application form, cover letter or interview notes
References and motivation letters
Information about citizenship, or your right to work in Switzerland, and supporting documents
Copies of qualification certificates
Information about current salary, benefits and pension entitlements
Work history, skills, experience and qualifications
Personal background and interests, to assess fit with our working culture

If your job application is unsuccessful, we may keep your information on file for up to one year in case a suitable role arises. We ask for your consent before doing so, or before extending this period; consent can be withdrawn in writing at any time.

For our employees: personal data is used to comply with personnel and work-process requirements. Employees receive further information about data collection, storage and processing when signing their work contract. Sensitive data is only collected with the employee’s specific consent. Through our cybersecurity tooling, Artifact can locate, lock or remotely delete devices holding personal data.

What lawful basis do we rely on?

Contract: to perform our contractual obligations
Consent: relying on consent freely given when you provided your data
Legitimate interests: an evaluation that processing is fair, reasonable and balanced, including delivering services and products, marketing (industry insights and offerings we believe are relevant), sales outreach to prospects, and recruitment
Security: storing collected information for backup purposes

Why do we need personal data?

Performing contractual obligations
Promoting our professional services to existing and prospective clients
Sending invitations to, and providing access to, events or webinars
Responding to communications, requests for proposals or quotations
Accomplishing employment and work processes
Seeking qualified candidates

We may share personal data with trusted third parties who help us deliver our services, contractually bound to safeguard the data we entrust to them:

Professional advisors, including lawyers, auditors and insurers
Financial and payroll service providers
Recruitment service providers
IT and cloud-based software providers

Do we transfer personal data outside Switzerland?

We store personal data on secured servers and storage devices located in Switzerland and in Europe. We may transfer personal data to third-party organisations, for example cloud-based accounting software or an external data processor; each is required to safeguard personal data in line with our contractual obligations and applicable data protection law.

Do we use cookies on this website?

We use a restricted number of cookies. Their sole purpose is to understand how the site is used (for example, how long you stay on a page) and to identify and fix interface issues, so we can monitor and improve our website’s performance. The following services are enabled on this website, only after you give consent via the cookie banner:

Google Analytics, to monitor website performance and high-level, anonymised usage information
Cloudflare Turnstile, on the contact form only, to tell human visitors from automated traffic without a visible challenge

Do we use profiling or automated decision-making?

No. Personal data is not subject to automated decision-making, and we do not conduct profiling with personal data.

What are your data protection rights?

If Artifact processes personal data about you, you have the right to:

Access: ask us to confirm whether we process personal data about you, and for more specific information
Correction: ask us to correct personal data that is incorrect or incomplete
Deletion: ask us to delete your data after you withdraw consent, or when it’s no longer needed for the purpose it was collected and no retention requirement exists
Withdraw consent: withdraw consent previously given for one or more processing purposes, without affecting the lawfulness of processing carried out before withdrawal
Restriction: ask us to temporarily restrict processing if you contest its accuracy and prefer restriction over erasure
Data portability: ask us, where technically feasible, to transmit data you provided to us in electronic form

Before responding to a request, we may ask for proof of identity, to ensure personal data is not disclosed to someone without the right to receive it.

To submit a data request, contact:

Artifact SA
Data Privacy Officer
Rue Saint-Martin 7
CH-1003 Lausanne
Switzerland
privacy@artifact.swiss

How long do we retain personal data?

We retain personal data to provide our services, make offers, validate job applications, stay in contact with you, and comply with applicable laws, regulations and professional obligations. We retain data for as long as it’s needed for the purpose it was collected, or as required by law, regulation or contract, and dispose of it once it’s no longer needed, except where a legal retention requirement applies.

Who can you contact?

For questions or comments about this Privacy Policy or how we handle your personal data: