Privacy
How BioQuant IQ processes personal data on Echo under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP, revised 2023).
Effective: 22 April 2026 · Version: 2.0
1. Introduction
This Policy explains how BioQuant IQ (the "Controller", "we", "us") processes personal data when you visit the Echo website, use an Echo Sprint, contact us, or subscribe to our communications. We apply the stricter of the GDPR and the Swiss FADP in every jurisdiction.
2. Data controller
BioQuant IQ (operated by Manoj Kumar Mandelia), Basel, Switzerland. For privacy matters write to privacy@bioquantiq.ch. EU Article 27 representative details are available on request.
3. Legal basis for processing
| Purpose | GDPR Art. 6 basis | FADP equivalent |
|---|---|---|
| Operating the website & Sprints | 6(1)(b) Contract | Art. 31(2)(a) FADP |
| Analytics (with consent) | 6(1)(a) Consent | Art. 6(6) FADP consent |
| Marketing communications (with consent) | 6(1)(a) Consent | Art. 6(6) FADP consent |
| Legal & regulatory compliance | 6(1)(c) Legal obligation | Art. 31(2)(c) FADP |
| Improvements to the service | 6(1)(f) Legitimate interests | Art. 31(1) FADP |
4. What we collect
- Identity data: name, organisation, role, country
- Contact data: email address
- Sprint data: chosen responses, timing, observed behavioural scores
- Technical data: IP address (truncated), user agent, consent record
5. Why we use it
To deliver the Sprint you started, to produce the behavioural report you requested, to respond to your enquiry, and — only with consent — to understand usage and send you relevant Echo updates. We do not sell data. We do not train third-party LLMs on your data.
6. Retention
- Contact enquiries: 24 months from last contact
- Sprint results: duration of your account + 12 months, unless you export and delete sooner
- Consent audit log: 24 months from record
- Marketing email list: until you unsubscribe, plus 12 months suppression
7. Your rights
Under GDPR and FADP you have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent at any time. Exercise any right by emailing privacy@bioquantiq.ch. We respond within 30 days (GDPR Art. 12(3)).
8. International transfers
Data is hosted in the European Economic Area and Switzerland. Any transfer outside these areas relies on Standard Contractual Clauses (SCCs) and a transfer impact assessment, together with additional safeguards where required.
9. Children
Echo is not intended for users under 18. We do not knowingly process data of minors.
10. Security
Encryption in transit (TLS 1.3) and at rest, least-privilege access, SOC-2-style controls on sub-processors. Incident response under GDPR Art. 33 (72-hour notification).
11. Complaints
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority. We request the chance to resolve concerns first.
12. Changes
Material changes are announced with 30 days’ notice on this page and — where you have given a marketing consent — by email.
