Privacy Policy

Privacy Policy

Effective Date: September 8, 2025

Last updated: 24.05.2026


Qala AG (“Qala”, “Qala AG”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal data.


This Website Privacy Policy explains how we collect, use and share personal data when you visit our website, interact with our online content, contact us, request a demo, subscribe to communications, attend an event, or otherwise engage with us through our public-facing website and marketing channels.

This policy applies to our website at www.letsqala.com and any related public websites or pages that link to this policy (the “Website”).


This policy does not govern personal data processed by Qala through its software platform or services on behalf of customers. Where you are a Qala customer, the processing of customer data through the Qala platform is governed by your agreement with Qala, including any applicable Data Processing Addendum or other procurement documentation.


1. Who We Are

Qala AG is a Swiss company providing software and services that help organisations understand, classify, monitor and govern data across their technology environments.

For the purposes of this Website Privacy Policy, Qala AG is the controller of the personal data we collect through the Website and our related sales, marketing and business development activities.

You can contact us about privacy matters at:

Qala AG
Email: privacy@letsqala.com
Website: www.letsqala.com


2. Personal Data We Collect

We collect personal data in a few simple ways: when you provide it to us, when you use the Website, and when we receive it from selected third parties.

2.1 Information You Provide to Us

You may provide us with personal data when you:

  • complete a contact form;

  • request a demo;

  • subscribe to a newsletter or mailing list;

  • register for an event or webinar;

  • download content or resources;

  • communicate with us by email, phone, social media or other channels;

  • apply for a role with Qala; or

  • otherwise choose to share information with us.

This may include:

  • your name;

  • business email address;

  • phone number;

  • company name;

  • job title or role;

  • country or region;

  • areas of interest;

  • your message or enquiry;

  • event registration details;

  • communication preferences; and

  • any other information you choose to provide.

2.2 Information Collected Automatically

When you visit the Website, we may collect certain technical and usage information automatically, including:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • approximate location based on IP address;

  • pages viewed;

  • links clicked;

  • referring website;

  • date and time of visit;

  • session information; and

  • cookie or similar technology identifiers.

We use this information to operate the Website, understand how visitors use it, improve performance, secure our systems, and evaluate the effectiveness of our content and campaigns.

2.3 Information from Third Parties

We may receive limited business contact information from third parties, such as event organisers, professional networks, business partners, lead-generation providers, public sources, or platforms used for business development.

This may include your name, company, professional role, business contact details, and areas of professional interest.


3. How We Use Personal Data

We use personal data for the following purposes:

  • to operate, maintain and improve the Website;

  • to respond to enquiries and demo requests;

  • to communicate with you about Qala, our services and relevant content;

  • to manage newsletters, events, webinars and marketing campaigns;

  • to understand visitor engagement and improve our content;

  • to manage sales, partnership and business development activities;

  • to assess and respond to job applications, where applicable;

  • to protect the security and integrity of our Website and systems;

  • to comply with legal, regulatory and contractual obligations; and

  • to establish, exercise or defend legal rights.

We do not sell your personal data.


4. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

  • Legitimate interests: for operating and improving our Website, responding to business enquiries, conducting B2B marketing, managing business relationships, securing our systems, and developing our business.

  • Consent: where you have agreed to receive certain marketing communications, accepted non-essential cookies, or otherwise provided consent.

  • Contractual necessity: where processing is needed to take steps at your request before entering into a contract, or to manage an existing business relationship.

  • Legal obligation: where processing is necessary to comply with applicable laws or regulatory requirements.

You may withdraw consent at any time where processing is based on consent.


5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Website, remember preferences, understand how the Website is used, measure performance, and support relevant marketing activities.

Cookies are small text files placed on your device when you visit a website. Some cookies are necessary for the Website to work properly. Others help us understand usage or improve our communications.

We may use:

  • essential cookies, which are required for the Website to function;

  • analytics cookies, which help us understand how visitors use the Website;

  • performance cookies, which help us monitor and improve Website performance; and

  • marketing cookies, where used, to understand engagement with our campaigns and content.

You can manage cookies through your browser settings and, where available, through our cookie preference tools. Blocking some cookies may affect Website functionality.


6. Marketing Communications

We may send you marketing communications about Qala, our services, events, content or related topics where permitted by law.

You can opt out of marketing communications at any time by:

  • clicking the unsubscribe link in our emails;

  • updating your communication preferences, where available; or

  • contacting us at privacy@letsqala.com.

Even if you opt out of marketing communications, we may still send you non-marketing communications, such as responses to your enquiries or important notices relating to an existing business relationship.


7. How We Share Personal Data

We may share personal data with trusted third parties where necessary for the purposes described in this policy.

These may include:

  • website hosting and infrastructure providers;

  • analytics providers;

  • CRM and sales tools;

  • email and marketing platforms;

  • event and webinar platforms;

  • security and monitoring providers;

  • professional advisers, such as lawyers, auditors and accountants;

  • business partners where relevant to your enquiry; and

  • authorities, regulators or courts where required by law.

We require service providers to protect personal data and to use it only for the purposes for which it was provided.

We may also share personal data in connection with a merger, acquisition, financing, reorganisation, sale of assets, or similar corporate transaction, subject to appropriate safeguards.


8. International Transfers

Qala AG is based in Switzerland. Some of our service providers or business partners may process personal data in other countries, including countries that may not provide the same level of data protection as your home jurisdiction.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.


9. Data Retention

We keep personal data for as long as reasonably necessary for the purposes described in this policy, including to respond to enquiries, manage business relationships, operate and secure the Website, comply with legal obligations, resolve disputes, and maintain business records.

Retention periods may vary depending on the type of data, the purpose of processing, legal requirements, and whether you have asked us to delete your data.

When personal data is no longer needed, we will delete, anonymise or securely retain it in accordance with applicable law and our internal retention practices.


10. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, system or method of transmission is completely secure. We therefore cannot guarantee absolute security of personal data transmitted to or through the Website.


11. Your Rights

Depending on where you are located and the laws that apply, you may have rights in relation to your personal data, including the right to:

  • access your personal data;

  • correct inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • restrict or object to certain processing;

  • request portability of your personal data;

  • withdraw consent where processing is based on consent; and

  • lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us at privacy@letsqala.com.

We may need to verify your identity before responding to your request. We will respond in accordance with applicable law.


12. Children’s Privacy

The Website is intended for business and professional audiences. It is not directed at children under the age of 16, and we do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us, please contact us at privacy@letsqala.com.


13. Third-Party Links

The Website may contain links to third-party websites, services or resources. We are not responsible for the privacy practices of those third parties.

We encourage you to review the privacy policies of any third-party websites or services you visit.


14. Changes to This Policy

We may update this Website Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by posting an updated version on the Website or providing another appropriate notice.

The “Last updated” date at the top of this policy indicates when it was last revised.


15. Contact Us

If you have any questions, concerns or requests regarding this Website Privacy Policy or how we handle personal data, please contact us at:

Qala AG
Email: privacy@letsqala.com
Website: www.letsqala.com

 

Shift compliance left. Govern at the speed of code.

Want to see it in action?

Shift compliance left. Govern at the speed of code.

Want to see it in action?

Shift compliance left. Govern at the speed of code.

Want to see it in action?