Privacy statement

Controller (this website)

iTrain GmbH
Seefeld 4/5
8716 Schmerikon
Switzerland

Managing director: André Pflaum

UID CHE-110.164.135

Email: tlspilot.support@itrain.ch

https://www.tlspilot.com · https://itrain.ch

Swiss Federal Act on Data Protection (FADP / nDSG).

This statement covers (1) these pages on tlspilot.com and (2) the Microsoft Entra app iTrain TLSPilot Setup Helper (publisher: iTrain GmbH, publisher domain itrain.ch). It is not a cookie policy and not the TLSPilot software licence.

1. Website (tlspilot.com)

These legal pages do not require an account. The host may store server logs (IP address, time, requested URL, user agent) as needed to operate and secure the site, for a short period. iTrain GmbH is controller for that log data.

Impressum and other site legal pages stay on the website; they are not repeated here beyond the identity above.

2. Setup Helper (Entra)

The helper runs on premises on the customer's TLSPilot host. Sign-in is an interactive Microsoft Entra login in the customer's tenant. Microsoft is the identity provider and is not iTrain.

The helper uses the signed-in person's delegated Graph access in that tenant to create or configure app registrations and grants that the operator requests in TLSPilot. The permissions shown on Microsoft's consent screen are the current request.

Customer Entra / directory data: the customer is controller of their tenant. iTrain does not operate that tenant and does not receive the directory as a processor unless the customer sends data (for example support). Data created on the host stays with the customer.

Categories typically involved: the identity of the person who signs in (as Microsoft presents it); app-registration metadata the operator creates or changes in the tenant; technical logs on the customer's host.

Recipients: Microsoft (Entra / Graph); the customer's own systems. iTrain only if the customer transmits data (shop, licence administration, support).

3. Shop, licence, support

If iTrain processes personal data for the shop, licence administration or support, iTrain is controller for that processing. Details then follow the privacy notice for that channel. On-prem certificate, key and target data on the customer's systems are processed by the customer.

4. Retention

Website logs: as short as needed for operation and security. Data on the customer's host: the customer's retention. Data sent to iTrain for support or shop: as long as that purpose and legal duties require.

5. Rights (nDSG)

You may request access, rectification, deletion, objection and portability, and you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB). For directory data in the customer's tenant, address the customer (and Microsoft as identity provider). iTrain can only act on data it actually holds.

Where EEA or UK law also applies to website data, those rights apply in addition; the controller for this website remains iTrain GmbH.

6. Contact

info@itrain.ch
iTrain GmbH, Seefeld 4/5, 8716 Schmerikon, Switzerland

Terms: Terms of use. German: Datenschutz.