Privacy Policy

1. Who We Are

1.1. This Privacy Policy explains how Mycomp IT-Services GmbH ("Mycomp", "Emporta", "we", "us") collects, uses, stores, and protects personal data when you use the Emporta platform ("Platform") or visit emporta.com and related marketing pages.

1.2. Emporta is operated by Mycomp IT-Services GmbH, Im Bielacker 13, 8580 Amriswil, Switzerland. Emporta provides software that helps organizations manage employee onboarding, offboarding, resource and equipment requests, approvals, and related HR/IT workflows.

1.3. For questions about this Policy or personal data, contact us using the details in the Contact section below.

2. Scope

2.1. This Policy applies to personal data processed in connection with (a) customer organizations and their authorized users of the Platform, (b) employees or other individuals whose data is entered into the Platform by a customer, and (c) visitors to our websites.

2.2. When a customer organization uses Emporta, that organization typically acts as the controller of employee and onboarding data it enters or imports. Emporta processes that data as a service provider to deliver the Platform, except where we determine purposes and means ourselves (for example, account administration, billing, security, or website analytics we operate).

2.3. This Policy does not cover third-party websites, products, or services that may be linked from the Platform or our sites.

3. Personal Data We Process

3.1. Account and organization data may include names, work email addresses, roles, permissions, company or site affiliation, and authentication-related information needed to access the Platform.

3.2. Employee and onboarding/offboarding profile data may include personal and contact details (such as name, private email, phone numbers, address), employment-related fields (such as site, department, job function, start or last working day), identity or HR fields provided by the customer (for example person title, marital status, birth date, or social security identifiers where configured), profile photos, and uploaded documents (such as driver license or other onboarding documents).

3.3. Resource and order data may include resource requests, quantities, templates, suppliers or service providers, approval decisions, status and progress information, notes, and related confirmation records.

3.4. Communication and support data may include comments, messages, change records, and information you send when contacting support.

3.5. Technical and usage data may include login metadata, IP address, device and browser information, approximate location derived from network data, timestamps, and security or diagnostic logs.

3.6. Website and marketing data may include information submitted via contact or early-access forms, and technical data needed to operate and secure the website.

4. Where Data Comes From

4.1. We may obtain personal data from organization administrators and authorized users who create or manage records on the Platform.

4.2. We may obtain data directly from individuals when they use the Platform, upload documents, or contact us.

4.3. We may generate technical and security logs automatically when the Platform or website is used.

4.4. Where integrations are enabled by the customer, we may receive data from connected systems the customer authorizes (for example identity or directory providers).

5. Why We Process Personal Data

5.1. We process personal data to provide and operate Emporta, including onboarding and offboarding workflows, resource and order management, approvals, status tracking, document handling, and user administration.

5.2. We process personal data to maintain security, prevent abuse, troubleshoot incidents, and improve reliability of the Platform.

5.3. We process personal data to provide customer support, communicate service-related notices, and respond to inquiries.

5.4. We process personal data to meet legal, regulatory, and contractual obligations, and to establish, exercise, or defend legal claims.

5.5. Where permitted, we may process limited website and contact data to respond to marketing or early-access requests and to understand how our public site is used.

6. Legal Bases

6.1. Depending on the context and applicable law, processing may be based on performance of a contract (or steps prior to entering a contract), legitimate interests in operating and securing the Platform and website, compliance with legal obligations, and/or consent where consent is required.

6.2. Where a customer is the controller, the customer is responsible for ensuring it has a valid legal basis to collect and instruct Emporta to process employee and related personal data.

7. Sharing and Subprocessors

7.1. We do not sell personal data.

7.2. We may share personal data with subprocessors that help us host, operate, secure, or support the Platform (for example cloud infrastructure, email delivery, or payment providers), under appropriate contractual and security obligations.

7.3. We may share data with the customer organization that owns the relevant Emporta workspace, and with users the customer authorizes (including approvers, managers, or suppliers involved in a resource workflow).

7.4. We may disclose personal data if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and integrity of Emporta, our users, or others.

7.5. A current list of material subprocessors may be provided upon request via support@emporta.net.

8. International Transfers and Storage

8.1. Emporta may store and process personal data on infrastructure in regions selected for the customer or required to operate the service, which may include cloud facilities in Europe or other locations used by our hosting providers.

8.2. Where personal data is transferred across borders, we take steps designed to provide an appropriate level of protection consistent with applicable data protection laws.

9. Retention

9.1. We retain personal data for as long as needed to provide the Platform to the customer, fulfill the purposes described in this Policy, and meet legal or contractual retention requirements.

9.2. After a customer subscription or workspace ends, we will delete or anonymize customer Platform data within a commercially reasonable period (typically within 30 days), unless a longer retention period is required by law, needed for dispute resolution, or agreed with the customer.

9.3. Backup copies may persist for a limited additional period until they rotate out of the backup cycle in the ordinary course of operations.

10. Security

10.1. Emporta implements technical and organizational measures appropriate to the risk, which may include encrypted transmission, access controls, authentication safeguards, logging, and secure hosting practices.

10.2. No method of transmission or storage is completely secure. Users and customer administrators remain responsible for protecting account credentials and configuring access within their organization appropriately.

11. Your Rights

11.1. Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to certain processing of personal data, and to data portability.

11.2. If your data is processed because your employer or another organization uses Emporta, please contact that organization first. We may need to refer your request to the customer controller so it can be handled correctly.

11.3. You may also contact us at support@emporta.net. We may ask for information to verify your identity and the scope of your request before responding.

11.4. Where consent is the basis for processing, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

12. Children

12.1. Emporta is intended for use by organizations and adult users. The Platform is not directed to children, and we do not knowingly collect personal data from individuals under 16 for marketing purposes.

12.2. If you believe we have collected personal data from a child inappropriately, contact us and we will take appropriate steps.

13. Website Visitors

13.1. When you visit our marketing website, we may process technical data needed to deliver pages securely and may process information you voluntarily submit through forms (such as name, email, and message content).

13.2. If we use cookies or similar technologies beyond what is strictly necessary to operate the site, we will provide appropriate notice and choices as required by applicable law.

13.3. Links to third-party sites or social media profiles are governed by those parties’ own privacy practices.

14. Changes to This Policy

14.1. We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page indicates when the Policy was last revised.

14.2. Material changes will be posted on this page and, where appropriate, communicated through the Platform or by email to customer administrators.

Contact

For questions regarding this Privacy Policy or personal data requests, please contact us:
Mycomp IT-Services GmbH
Im Bielacker 13
8580 Amriswil
Switzerland
Email: support@emporta.net