Privacy Policy

1. About TOSOO

‍

TOSOO AG is a Swiss medical technology company headquartered at Heinrichstrasse 267, 8005 Zürich, Switzerland. We develop platforms for sleep-targeted research and clinical programmes.

This policy explains how we handle personal data submitted through our website at tosoo.ch and any forms hosted on it.

If you have any questions about this policy or want to exercise any of your rights, contact us at privacy@tosoo.ch.

‍

2. The Data We Collect

‍

We collect personal data only when you actively provide it to us by submitting a form on our website or contacting us directly. Depending on the form, this may include:

• Your name and professional title
• Your work email address and telephone number
• Your institution, company, or affiliation
• Your role and area of professional interest
• Any information you choose to include in a free text field, such as a description of your research, study, or inquiry
• For careers applications: your CV, cover letter, and any supporting materials you submit

We also collect limited technical data automatically when you visit our website, such as your IP address, browser type, and pages viewed. This data is processed by our website provider Webflow to operate the site and monitor its performance.

We do not collect health data or other sensitive personal data through our website.

‍

3. Why We Process Your Data

‍

We process your data only for the following purposes:

• To respond to your inquiry or request
• To send you materials you have requested, such as datasheets or white papers
• To follow up with you regarding our products, services, or potential research collaborations
• To evaluate your application if you apply for a position with us
• To operate, secure, and improve our website

We rely on your consent when you submit a form, and on our legitimate interest in conducting and developing our business when we follow up with you afterwards.

‍

4. Who Has Access to Your Data

‍

Your data is accessible only to TOSOO personnel who need it to do their job, and to the service providers we use to run our business. The main ones are:

• Webflow — our website provider, which hosts the site and collects basic technical data when you visit
• Odoo — our customer relationship management system, where form submissions and ongoing correspondence are stored
• Email and productivity tools used internally to manage communications

We do not sell your data, and we do not share it with third parties for marketing purposes. We may share it with professional advisors or regulatory authorities where this is required by law.

Some of our service providers may process data outside Switzerland or the EU. Where this is the case, we rely on the contractual protections these providers have in place, which are designed to meet Swiss and European data protection standards.

‍

5. How Long We Keep Your Data

‍

We keep your data for as long as we have a legitimate business reason to do so, or as required by law. In practice this means:

• Inquiries, product requests, and correspondence are kept in our records as part of our ongoing business activity
• Careers applications are kept for a reasonable period following the recruitment process they relate to
• Technical and analytics data is kept in line with our service providers' standard retention policies
• Data subject to legal retention obligations is kept for as long as the law requires

You can ask us to delete your data at any time by emailing privacy@tosoo.ch. We will do so unless we are legally required to retain it or have an overriding business reason not to, in which case we will explain why.

‍

6. Cookies and Website Analytics

‍

Our website is built on Webflow, which uses cookies and similar technologies necessary for the site to function. We may also use analytics tools to understand how visitors use our website and improve it over time.

For details on what cookies Webflow places, see Webflow's own privacy and cookie information at webflow.com.

If you do not want analytics cookies to be placed, you can disable them in your browser settings or use a browser extension that blocks them.

‍

7. Your Rights

‍

You have the following rights regarding your personal data:

• To know what data we hold about you
• To ask us to correct it if it is inaccurate
• To ask us to delete it
• To object to how we are processing it
• To withdraw your consent at any time, where we rely on consent to process your data

To exercise any of these rights, email privacy@tosoo.ch. We will respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch, or with the data protection authority in your country if you are based in the EU.

‍

8. How We Protect Your Data

‍

We use access controls and rely on the security infrastructure of our established service providers (Webflow, Odoo, and others) to protect your data. No system is fully secure, but we take reasonable steps to keep your data safe.

‍

9. External Links

‍

Our website may contain links to other websites. This policy only applies to our website. We are not responsible for how third-party sites handle your data.

‍

10. Changes to This Policy

‍

We may update this policy from time to time. The current version will always be available on this page.

‍

11. Contact

‍

TOSOO AGHeinrichstrasse 267, 8005 Zürich, Switzerland

‍privacy@tosoo.ch

‍