CN1 Backup Privacy Policy

Controller

Neumann IT Solutions, Christian Neumann, Burghügelweg 1, 9604 Lütisburg, Switzerland, info@cn1.ch.

Local backup

CN1 Backup processes selected files, folders, backup destinations and restore states locally on the Windows device. The backup contents are stored encrypted on customer-setup local drives, NAS/Windows shares, or removable USB storage devices. Neumann IT Solutions does not gain access to file names, paths, file contents, repository passwords, or emergency package passwords.

The customer determines backup sources and destinations and remains responsible for the legality of the backed up content, access rights, storage and the safe storage of data media and emergency package.

Licensing and optional monitoring

For activation and licence verification, we process the installation identifier, licence and edition status, system type, and pseudonymised customer and device identifiers. Optional monitoring for Business hubs and Windows Server is activated only after express consent. Managed Business workstations are registered through their hub.

Only technical status data is transmitted: software version, last contact, time and result of the most recent backup, number of open errors, and pseudonymised installation and customer assignments. Backup content, file names, folder paths and repository passwords are not transmitted. Consent can be paused or withdrawn locally.

Purposes, recipients and processing locations

The data is used to provide licences, prevent misuse, display technical status and review abnormal events within the booked scope. Access is limited to authorised Neumann IT Solutions personnel and processors required for technical operation.

Licensing and monitoring services run on IONOS Group infrastructure in France. The website and email services are operated by METANET AG in Switzerland. Further disclosures abroad are made only where an adequate level of protection exists or the safeguards required by law are in place.

Retention

• Technical heartbeats: 90 days
• Completed incident, recovery and contact records: 12 months
• Completed notification records: 180 days
• Active licence, installation and consent records: for the duration of the contract
• Records required by law: for the applicable statutory retention period

Rights and contact

Data subjects may request access and, to the extent provided by law, rectification, erasure, restriction of processing or data portability. Requests should be sent to info@cn1.ch. Data security breaches are assessed in accordance with the documented incident process and, where required, reported to affected persons or the competent authorities.