Privacy Policy
This Privacy Policy explains how BioQuant IQ GmbH (“BioQuant IQ”, “we”, “us”) processes personal data in connection with the Echo website and product. We are committed to processing personal data lawfully, fairly and transparently under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).
1. Who we are
The data controller is BioQuant IQ GmbH, Baselmattweg 135, 4123 Allschwil, Switzerland. For any privacy question or to exercise your rights, contact letustalk@bioquantiq.ch.
2. What we collect
- Contact & demo requests — work email, name, company, role, LinkedIn and the skills you tell us you want to work on.
- Product data (Echo) — role and company context you provide, your responses within scenarios, the resulting competency scores, feedback and progress history.
- Technical & usage data — with consent, analytics about how you use the site (see our Cookie Policy).
3. Why we process it, and our legal bases
- To respond to demo and contact requests — legitimate interest / steps prior to a contract.
- To provide and improve the Echo product to our customers — performance of a contract with the customer organisation.
- To run analytics and improve the site — consent (which you can withdraw at any time).
Model training. We do not use customer scenario data or personal responses to train general-purpose or third-party AI models. We confirm this on request.
4. Echo scores — what we measure, visibility, and automated decisions
Echo is deployed by an organisation. Access to an individual’s scores is role-based — typically the individual, their manager or coach, and authorised HR administrators, as configured by the customer. Measurement stays invisible during the experience itself.
What we measure. Echo scores the decisions and behaviours a person makes inside a scenario — not personality, identity, or protected characteristics. Progress is measured you-versus-you, against a person’s own baseline, not ranked against colleagues.
No solely automated employment decisions. Echo is a development tool. Consistent with Article 22 GDPR, scores are not used to make decisions producing legal or similarly significant effects — such as hiring, promotion, termination or selection — based solely on automated processing. Those decisions remain with people; Echo informs development. Organisations configure visibility, retention and reporting before any scenario runs.
5. Retention
We keep personal data only as long as necessary for the purposes above or as required by law, then delete or anonymise it. Default retention periods are set out in our customer agreements. As a guide, demo-enquiry data is kept for up to 24 months and product data for the term of the customer agreement, unless a longer period is required by law.
6. Your rights (GDPR / FADP)
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a supervisory authority (in Switzerland, the FDPIC; in the EU, your local authority). To exercise any right, email letustalk@bioquantiq.ch.
7. International transfers
Where personal data is transferred outside Switzerland or the EEA, we rely on recognised safeguards such as adequacy decisions or Standard Contractual Clauses. Echo is hosted within Switzerland and the EEA; a current list of sub-processors is available on request.
8. Changes
We may update this policy; material changes will be reflected by the “last updated” date above.