Legal

Privacy Policy

Last updated: 2 October 2026

This policy explains how StrategySphere GmbH (“StrategySphere”, “we”, “us”) processes personal data when you visit this website, contact us, work with us as a client or partner, or use our products. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Controller and contact

StrategySphere GmbH
Hofstetterstrasse 19C, 4112 Flüh SO, Switzerland
Email: info@strategy-sphere.com

For any question about this policy or your personal data, please write to us at this address.

2. Personal data we process

  • Website visits: technical data such as IP address, date and time of access, pages visited, browser and device type. Our hosting provider records this in server logs to operate and secure the website.
  • Enquiries: name, company, email address, optional phone number, enquiry type and message when you use the contact form or write to us. For consulting enquiries, also your company size, areas of interest, project scope and timeline.
  • Clients, prospects and partners: business contact details, job titles, correspondence, meeting notes, contract and billing information.
  • Product users: account and usage information needed to provide, support and secure our products, such as Mergiva, as set out in the applicable customer agreement.

We do not intentionally collect sensitive personal data through this website. Please do not include it in messages to us.

3. Purposes and legal bases

  • Answering your enquiries and preparing proposals (your request and our legitimate interest in responding to business contacts).
  • Delivering consulting services and products, and managing the client relationship (performance of a contract).
  • Operating, securing and improving this website (legitimate interest).
  • Website analytics with Google Analytics 4, only if you agree (consent, which you can withdraw at any time).
  • Accounting, tax and other legal obligations (legal obligation).

4. Client data in consulting projects and products

In consulting engagements and data migration projects, we may handle personal data contained in our clients’ systems and documents. In these cases we act as a processor on behalf of the client, only on the client’s documented instructions and under a data processing agreement. The client’s own privacy notice applies to that data.

Mergiva is deployed in the customer’s own cloud environment. Customer data processed by Mergiva stays under the customer’s control, and StrategySphere has no access to it unless the customer grants access, for example for support.

5. Use of artificial intelligence

We use AI tools in our work and AI features in our products responsibly and transparently:

  • We use clients’ confidential information or personal data with AI tools only where this is agreed with the client and appropriate safeguards are in place.
  • We do not use client data, or personal data you send us, to train AI models.
  • AI features in our products, such as document classification in Mergiva, run in the environment and with the AI services agreed with the customer. They support human decisions, and key actions require human review and approval.
  • We do not make decisions based solely on automated processing that have legal or similarly significant effects on individuals.

6. Who receives personal data

We share personal data only where necessary and with appropriate confidentiality and data protection commitments:

  • IT service providers who process data on our behalf, such as website hosting, email and productivity services, and Google for website analytics if you consent.
  • Partners and subcontractors involved in a client engagement, only where the client has agreed.
  • Professional advisers, such as lawyers, auditors and accountants.
  • Authorities, where we are legally required to disclose data.

We do not sell personal data.

7. Transfers abroad

Some of our service providers process data outside Switzerland, for example in the EU/EEA, the United States or other countries where their servers are located. Where a country does not offer an adequate level of data protection, we use recognised safeguards such as the EU Standard Contractual Clauses as approved by the Swiss Federal Data Protection and Information Commissioner, or the Swiss-US Data Privacy Framework where the recipient is certified.

8. Retention

We keep personal data only as long as needed for the purposes above. Enquiries that do not lead to a business relationship are deleted after 12 months. Contract and accounting records are kept for 10 years as required by Swiss law.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and confidentiality obligations for everyone who works with us.

10. Cookies, fonts and external links

Necessary cookies are used to run this website. Analytics cookies are set only with your consent. See the Cookie Policy for details.

This website loads fonts from Google Fonts, which means your IP address is transmitted to Google when the page loads. Links to external websites, such as LinkedIn or mergiva-ai.com, are subject to the privacy policies of those sites.

11. Your rights

Subject to applicable law, you have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. To exercise these rights, write to info@strategy-sphere.com.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU/EEA, with your local data protection authority.

12. Changes to this policy

We may update this policy from time to time. The current version is always published on this page.