Avora International AG (“Avora”, “we”) provides a governed common data environment in which tower companies document and manage their site portfolios. This notice explains what personal data is processed in connection with the Avora platform and this website, why, where it is stored, and the rights you have.
For personal data processed inside the Avora platform, our customer — the company whose deployment it is — is the data controller, and Avora processes that data on its behalf under a data processing agreement. For data you send us directly, and for this website, Avora is the controller.
Avora is domiciled in Zug, Switzerland. The Swiss Federal Act on Data Protection (FADP) applies to us, and the EU General Data Protection Regulation (GDPR) applies to processing for customers and users in the European Union. Switzerland holds an adequacy decision from the European Commission.
First and last name, business email address, business phone number (optional), login timestamps, and records of actions performed in the system (audit logs). Personal data may also appear incidentally inside uploaded documents and site photographs.
Employees of our customers who use the platform, and staff of external partners (planners, structural engineers, construction and survey crews, general contractors) who are granted access.
To authenticate users, control access to site documentation, and provide the traceability (audit trail) that our customers require of their site records. The data is not used for any other purpose — no advertising, no profiling, no automated decision-making.
Art. 6(1)(b) GDPR (performance of a contract) for user account data; Art. 6(1)(f) GDPR (legitimate interest in secure, traceable site documentation) for partner contact data and audit logging. Equivalent grounds apply under the Swiss FADP.
All platform data is stored exclusively in the European Union (OVHcloud, France). The primary region is Paris; backups are replicated to Gravelines, also in France, and expire automatically after 14 days.
We use a small number of sub-processors. Every third party that stores, transmits or processes Avora or customer data is recorded in our sub-processor register with its jurisdiction and what it touches. Those that process personal data or customer document content are:
The full register, including every vendor’s jurisdiction and what it processes, is available to customers under the data processing agreement and on request.
Because each customer runs its own isolated deployment, destruction at contract end means deletion of that deployment’s databases and storage — there is no shared store to selectively scrub.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection under Arts. 15–21 GDPR, and corresponding rights under the Swiss FADP. If your data is processed in a customer’s deployment, contact that company’s data protection contact — as controller it decides on requests, and Avora supports it with export, correction and deletion functions.
Erasure requests are honoured in backups automatically: backup copies expire within the 14-day window, after which no copy of the erased data remains. Audit-log entries are append-only by design (an integrity control); erasure of a person from audit history is handled by anonymising the person reference, preserving the integrity of the audit record while removing the personal data.
You can also contact us directly at support@avoraai.ch, and you have the right to lodge a complaint with a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
This website is a static informational site served from infrastructure in the European Union. It requires no account, and we do not use advertising or profiling cookies.
We update this notice when the platform or our vendors change. The date at the top reflects the last revision.