Data processing agreement
Version of 10.11.2026
This agreement applies when a condominium uses Étagio online. The condominium is the controller; the publisher of Étagio processes the data on its behalf, as a processor within the meaning of art. 9 FADP.
1. Subject and roles
The condominium, represented by its administrator, decides which data it enters and why. The publisher provides the software and the hosting, and processes this data only on its instructions, to provide the service.
2. Data and data subjects
Owners and members of their household, contacts, suppliers, administrators and users: names, addresses, e-mails, phone numbers, IBANs, ownership shares, invoices, payments, meter readings, condominium documents.
3. What Étagio commits to
- Process the data only to provide the service, never for its own purposes
- Keep the data in Switzerland, with no transfer abroad
- Never sell it, use it for advertising or to train an AI
- Bind everyone working on the service to confidentiality
- Notify the condominium without delay of any data security breach
- Help the condominium respond to requests from data subjects
- Allow a complete export of the data at any time
4. Subprocessors
The publisher uses the following providers. All of them process the data in Switzerland.
| Provider | Role | Location |
|---|---|---|
| Infomaniak Network SA, Geneva | Hosting of the servers, the database and the documents | Switzerland |
| The publisher of Étagio, on its own server | Sending e-mails (SMTP relay) | Switzerland |
| The publisher of Étagio, on its own server | Reading invoices and documents with AI | Switzerland |
| Off-site storage | Off-site backup copy, encrypted | Switzerland |
Any new subprocessor is announced 30 days in advance; the condominium may object and terminate.
5. Security measures
- HTTPS for all exchanges
- IBANs, notes, login secrets and documents encrypted with AES-256-GCM
- Passwords protected with Argon2id, two-step login with backup codes
- Access based on each user's role, condominiums kept separate from one another
- Log of all actions chained by SHA-256 hashes, documents verified by their hash
- Backed up every night and before every update, encrypted off-site copy, in Switzerland
- The publisher's administration console has no access to condominium data
6. End of processing
At the end of the contract, the condominium receives a complete export. Its data is then deleted from the servers within 30 days, and from the backups when they expire.
7. Audit
The condominium may ask the publisher for the information needed to verify compliance with this agreement.
8. Liability and applicable law
Liability is governed by the terms of use. Swiss law. Place of jurisdiction: the publisher's registered office.