Privacy Policy
Last updated: 21 October 2026
This policy explains what personal data PARAZZO AG processes when you use www.swiss-iq-association.org and the Swiss IQ Association app, why, who with and for how long. It applies in accordance with the Swiss Federal Act on Data Protection (FADP), the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and, for people located in the European Union, the EU General Data Protection Regulation (GDPR).
1. Data controller
PARAZZO AG, Marktgasse 5, 4051 Basel, Switzerland – UID CHE-302.003.927
Data protection contact: info@parazzo.ch
2. Data processed, purposes and retention periods
| Data | Purpose | Lawful basis (UK GDPR / GDPR) | Retention period |
|---|---|---|---|
| Account: first name, surname, email, encrypted password, language, date of birth | Create and manage the account, check the minimum age of 18 | Performance of a contract | Life of the account, then deletion within 30 days |
| Payment: amounts, dates, last 4 digits and card type, transaction status | Collect payment for the test, subscription and resits; accounting | Performance of a contract; legal obligation | 10 years for accounting records (Article 958f of the Swiss Code of Obligations) |
| Results: answers, scores, diplomas, certificates, QR codes | Provide the programme, issue diplomas and allow them to be verified | Performance of a contract | Life of the account; certificate verification data kept until the holder asks for it to be deleted |
| Identity verification (Didit): photo of ID document, extracted data, selfie, liveness check and facial comparison | Check that the person taking the exam is the account holder | Explicit consent (Article 9(2)(a) UK GDPR / GDPR; Article 6(7) FADP) | 30 days after verification |
| Exam proctoring (SMOWL): webcam images, screenshots, computer activity, irregularity flags | Protect the integrity of exams and detect cheating | Explicit consent; performance of a contract | 30 days after results are published, extended until any challenge is closed |
| Contact form: company, first name, surname, email, subject, message | Respond to enquiries | Legitimate interests | 12 months after the last correspondence |
| API partnership request: company, company number, address, contact person, phone, email, job title | Handle partnership requests | Steps prior to a contract; legitimate interests | 24 months after the last exchange |
| Technical data: IP address, browser, device, connection logs | Security, abuse prevention, proper operation | Legitimate interests | 90 days |
| Non-essential cookies and trackers | Audience measurement | Consent | 13 months maximum |
We only process the data needed for these purposes. We never sell or rent personal data.
3. Biometric data
The facial comparison carried out during identity verification and exam proctoring involves processing biometric data. This processing is based solely on your explicit consent, collected before your first exam through a separate tick box. You can withdraw it at any time; you will then no longer be able to take proctored exams, but will keep access to the rest of the content.
Biometric data is used only for identity verification and fraud prevention. It is never sold or used for any other purpose, and is destroyed at the latest at the end of the period stated in section 2.
4. Automated decisions and artificial intelligence
The proctoring software uses artificial intelligence to detect possible irregularities. No decision to cancel an exam is taken on this basis alone: every flag is reviewed by a member of our team before a decision is made. You are told about the decision and the reasons for it, can give your point of view and can challenge it by email to info@parazzo.ch.
5. Recipients and processors
Your data is processed by our authorised staff and by the following service providers, who are bound by a data processing agreement:
| Provider | Role | Country |
|---|---|---|
| Didit Identity Spain, S.L. | Identity verification | Spain (EU) |
| Smiley Owl Tech, S.L. (SMOWL) | Remote exam proctoring | Spain (EU) |
| Stripe | Payments | Ireland |
| Hostpoint | Website and data hosting | Switzerland |
| Sending emails | Ireland |
We may disclose data to authorities where required by law.
6. International transfers
Switzerland, the United Kingdom and the European Union recognise each other as providing an adequate level of data protection. For any transfer to a country without such recognition, in particular the United States, we rely on standard contractual clauses (including the UK International Data Transfer Addendum where applicable) or on the provider's certification under the Data Privacy Framework.
7. Security
We apply appropriate technical and organisational measures: encryption of data in transit, encryption of sensitive data, access controls and selection of providers offering sufficient guarantees.
8. Your rights
Depending on the applicable law, you have the following rights:
- access to your data and a copy of it;
- rectification of inaccurate data;
- erasure of your data;
- restriction of processing and objection to processing based on legitimate interests;
- portability of the data you have provided to us;
- withdrawal of your consent at any time, without affecting earlier processing;
- human intervention and the right to challenge a decision based on automated processing.
To exercise these rights, write to info@parazzo.ch. We reply within one month and may ask for proof of identity.
You have the right to complain to the Information Commissioner's Office (ICO, www.ico.org.uk) in the UK, to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the EU, to the data protection authority in your country.
9. Minimum age
The Service is only available to people aged 18 or over. We do not knowingly collect data about minors. If we learn that an account has been created by a minor, we delete it.
10. Cookies
We use cookies that are strictly necessary for the Website to work (session, security, language preference), which do not require consent. Audience measurement or marketing cookies are only set with your consent, given through the cookie banner, which you can change at any time via the "Cookie settings" link in the footer.
11. Changes
We may update this policy. If we make important changes, we will tell you by email or through a notice on the Website.