Privacy Policy

As of October 21, 2026

This Privacy Policy describes how GoNiña AG (“GoNina,” “we”) processes personal data. It applies to the website www.gonina.com, to our communications with prospective customers, customers, and partners, and to the provision of our AI forecasting solution (the “Solution”).

We comply with the Swiss Data Protection Act (DSG). To the extent that we process personal data of individuals in the EU or the EEA, the General Data Protection Regulation (GDPR) also applies.

1. Data Controller

GoNiña AG, Zweierstrasse 35, 8004 Zurich, Switzerland
VAT No. CHE-499.164.486
privacy@gonina.com

For individuals in the EU and the EEA: We do not have a branch office in the EU. Please direct any GDPR-related inquiries to the address listed above.

2. Our Role: Data Controller or Data Processor

We process personal data in two different capacities: as the data controller for the website, for contact and demo requests, for marketing, and for contract processing with our customers (sections 3 through 7); and as the data processor for the data that our customers provide to us for the purpose of generating forecasts (section 8). The respective customer remains responsible for this data.

3. Website

When you visit our website, our hosting provider, Webflow Inc. (U.S.), collects technical data such as your IP address, browser, operating system, pages visited, and the date and time. This data is used to ensure the secure and stable operation of the website and is deleted shortly thereafter. The legal basis for this is our legitimate interest in secure operation.

We use Weglot (France) to translate the website. Weglot stores the selected language in a cookie.

4. Cookies and Marketing Tools

We use the following services, which employ cookies or similar technologies and transmit data to the providers listed:

Google Ads and Google Tag Manager (Google Ireland Ltd., Ireland / Google LLC, U.S.): Measuring the effectiveness of our ads and managing tags.

Meta Pixel (Meta Platforms Ireland Ltd., Ireland / Meta Platforms Inc., U.S.): Measuring the effectiveness of our ads on Facebook and Instagram, as well as creating advertising audiences.

HubSpot (HubSpot Inc., USA): Forms, appointment scheduling, and customer relationship management.

To the extent that applicable law requires consent, we obtain it through the cookie notice on the website. You can revoke your consent at any time, effective for the future, by changing your browser’s cookie settings or deleting the relevant cookies.

5. Contact, Demo Requests, and Contract Processing

When you contact us, book a demo, or enter into a contract with us, we process the information you provide: name, company, job title, email address, phone number, the content of your inquiry, and the data necessary for contract fulfillment and billing. The legal basis for this is the initiation and performance of the contract, as well as our legitimate interest in maintaining the business relationship.

We store this data in HubSpot and Google Workspace (Google Ireland Ltd.). Invoice data is retained for ten years in accordance with statutory retention requirements.

6. Marketing and Newsletters

We occasionally send emails to existing customers and prospective customers who have provided us with their contact information to inform them about our solution and related topics. You can opt out at any time—the easiest way is to click the unsubscribe link in each email or send a message to privacy@gonina.com. For individuals in the EU and the EEA, we obtain consent before sending promotional emails, to the extent required by law.

We use LinkedIn, Facebook, and Instagram for advertising. Target audiences can be created based on website visits or interactions with our ads (Section 4). We do not share contact lists with these platforms.

7. Disclosure to Third Parties and Transfers Abroad

We disclose personal data to third parties only to the extent necessary for the purposes stated: to the service providers listed in this statement, to our consultants and auditors, and to government authorities when we are legally required to do so.

Some service providers are based in the United States. We base the transfer on the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework, provided the provider is certified under one of these frameworks; otherwise, we rely on the European Commission’s Standard Contractual Clauses, with the necessary adaptations for Switzerland.

8. Our Customers' Data in the Solution

To generate forecasts, our clients provide us with sales, product, and location data from their point-of-sale and ERP systems. This data generally does not contain any personal data. However, if it does contain personal data (such as employees’ names in transaction data or users’ login credentials), we process it exclusively on behalf of and in accordance with the client’s instructions.

The purpose, scope, confidentiality, use in anonymized form, retention, and deletion of this data are governed by the user agreement between GoNina and the respective customer. Data subjects who have questions about this data should contact the customer, who is the data controller.

The solution is hosted on servers in Switzerland and the EU. To improve our forecasts, we use weather, holiday, and event data from third-party providers; no personal data is transmitted to these providers.

9. Data Security

We protect personal data through appropriate technical and organizational measures, including, in particular, encryption during transmission and storage, access restrictions based on the need-to-know principle, and regular backups.

10. Storage

We retain personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. We delete inquiries that do not result in a contract after 24 months; contract data is deleted upon expiration of the statutory retention periods. Section 8 applies to data stored in the solution.

11. Your Rights

You have the right to access your personal data, to have it corrected, deleted, or its processing restricted, and to receive a copy of your data, as well as the right to object to the processing of your data and to withdraw your consent. Please direct any requests to privacy@gonina.com; we may require proof of your identity to verify who you are.

You can also file a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU, it is the data protection authority in your country of residence.

12. Changes

We may update this Privacy Policy at any time. The version currently published on the website is the one that applies. In the event of significant changes, we will notify our customers by email.