GDPR & FADP
A plain summary of your rights under the EU General Data Protection Regulation and the Swiss Federal Act on Data Protection, and how to exercise them with BioQuant IQ.
1. Scope
This page applies to everyone who uses Echo from the European Economic Area, the United Kingdom, or Switzerland, and — by our choice — to users in every other jurisdiction we serve.
2. Your rights
| Right | What it means | GDPR | FADP |
|---|---|---|---|
| Access | Request a copy of your data | Art. 15 | Art. 25 |
| Rectification | Correct inaccurate data | Art. 16 | Art. 32(1) |
| Erasure | Deletion when no longer needed | Art. 17 | Art. 32(2) |
| Restriction | Pause processing while we verify | Art. 18 | Art. 32(2) |
| Portability | Machine-readable export | Art. 20 | Art. 28 |
| Objection | Stop processing based on legitimate interests | Art. 21 | Art. 30(2)(b) |
| Withdraw consent | At any time, without penalty | Art. 7(3) | Art. 6(7) |
3. Subject access request
- Email privacy@bioquantiq.ch with the subject "SAR".
- We acknowledge within 72 hours.
- We may request proof of identity proportionate to the sensitivity of the data.
- We respond in full within 30 days (extendable by 60 days for complex requests, with notice).
- Response delivered in a machine-readable format (JSON or CSV) plus a plain-language summary.
4. Legal basis
See section 3 of our Privacy.
5. DPIA
We perform a Data Protection Impact Assessment before any new processing that presents a high risk to the rights and freedoms of natural persons (GDPR Art. 35). Summaries are shared with customer DPOs on request.
6. International transfers
Hosting is in the EEA and Switzerland. Transfers outside rely on Standard Contractual Clauses and a documented transfer impact assessment.
7. Breach notification
Supervisory authorities are notified within 72 hours where GDPR Art. 33 requires. Affected individuals are notified without undue delay where GDPR Art. 34 requires. Our runbook is available to customer DPOs under NDA.
8. Contact
Privacy team: privacy@bioquantiq.ch. EU Article 27 representative details on request.
