Your rights under the EU GDPR and the Swiss revFADP, and exactly how to exercise them with BriefMaster 3000.
BriefMaster 3000 is built in Switzerland and operated under both the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (revFADP / revDSG, in force since 1 September 2023). This page explains what that means in practice.
For your account data, we are the controller. For the content inside your briefs — including any personal data your team places there — your organisation is the controller and we are your processor, acting only on your documented instructions.
| Right | What it means | How to exercise it |
|---|---|---|
| Access | Get a copy of the personal data we hold about you | Email privacy@briefmaster3000.com |
| Rectification | Correct data that is inaccurate or incomplete | Edit it in your profile, or email us |
| Erasure | Have your personal data deleted | Delete your account, or email us |
| Restriction | Have processing paused while a dispute is resolved | Email privacy@briefmaster3000.com |
| Portability | Receive your data in a machine-readable format | Export briefs to PDF, or request a data export |
| Objection | Object to processing based on legitimate interest | Email privacy@briefmaster3000.com |
| Withdraw consent | Turn off analytics you previously accepted | Cookie banner, or browser Do Not Track |
We respond within 30 days and do not charge for reasonable requests. We may ask you to verify your identity before acting, to make sure we are not disclosing your data to someone else.
Brief content stays in the EU (Frankfurt, Germany). Where a supporting provider processes limited data outside the EEA, we rely on EU Standard Contractual Clauses. Switzerland holds an EU adequacy decision, so EEA-to-Switzerland transfers require no additional safeguards.
We provide a DPA covering GDPR Art. 28, our sub-processor list, security measures, breach notification and Standard Contractual Clauses. It is available on all paid plans — request it at privacy@briefmaster3000.com and we will send it for signature.
In the event of a personal data breach affecting your data, we notify affected controllers without undue delay and in any case within 72 hours of becoming aware, with the information required under GDPR Art. 33.
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern) or with the data protection authority in your EU country of residence.
kreisvier communications AG
Thiersteinerallee 29
CH-4053 Basel
privacy@briefmaster3000.com