Privacy policy

Updated on September 9, 2026

Introduction

This statement describes how FORWARD SYSTEMS Sàrl ("we", "our") collects, uses, and protects your personal data. It applies to our publicly accessible services , notably our website https://fwrd.ch and its subdomains.

Our data processing strictly complies with the Swiss Federal Act on Data Protection (LPD) and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

Data collected

When browsing our website https://fwrd.ch and its subdomains, we primarily collect automated technical data via your browser.

Session and navigation data: IP address (anonymized), device configuration, browser type, and approximate location data.
Usage data: pages viewed, session duration, and interactions with our services.

Data collection

We collect your personal data directly and transparently. We do not buy, rent, or use any data from external sources or data brokers. Your data is communicated to us exclusively by you or generated automatically during your interaction with our systems.

Data is collected during your browsing and when voluntarily submitting forms. We use self-hosted technical and analytical cookies to ensure site functionality and measure our audience.

Purpose of processing

Data is directly used for the anonymized statistical analysis of our services' usage, or to manage the contact relationship established following form submission.

Data retention period

We apply the principle of minimization and adapt the retention period to the nature of the data.

Navigation and statistical data: retained for a maximum period of 12 months. Beyond this, they are irreversibly anonymized or deleted.
Contact form data: retained for the duration necessary to process your request, then for 5 years (or according to applicable legal obligations) for evidence and tracking purposes of the potential business relationship.

Disclosure to third parties and integrated services

We do not sell or rent your personal data. Your data remains under our exclusive control and is not transmitted to any commercial third party.

Hosting and infrastructure: all our services are deployed on our infrastructure at Infomaniak SA. Our servers are located exclusively in Switzerland. Infomaniak acts solely as an underlying infrastructure provider and we retain full control over your data and its processing.
Self-hosted analytics and tracking: unlike many websites, we do not use any third-party analytics services (such as Google Analytics, Matomo Cloud, etc.).

Storage and security

Data is stored exclusively in Switzerland in Infomaniak SA's data centers, which are ISO 27001 certified. Your data is never transferred to third countries.

Access to your data is strictly limited to FORWARD SYSTEMS Sàrl employees who need it to perform their duties (development, support, administration). All our employees are bound by a strict confidentiality obligation.

Your rights and options

In accordance with the LPD and GDPR, you have the following rights, which you may exercise free of charge.

Right of access: obtain confirmation that we are processing your data and receive a copy.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data, subject to our legal retention obligations.
Right to restriction of processing: request temporary blocking of your data in certain cases.
Right to data portability: receive your data in a structured format.
Right to object: object, for reasons relating to your particular situation, to processing based on our legitimate interest.

To exercise these rights, simply contact us using the methods presented below. Proof of identity may be requested to verify your identity. We will process your request within a maximum of 30 days. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Legal framework and reference language

This privacy statement is governed primarily by the Swiss Federal Act on Data Protection (LPD) and its implementing ordinances. For users residing in the European Union or when our services specifically target the European market, the provisions of the General Data Protection Regulation (GDPR) apply additionally, insofar as they offer an equivalent or higher level of protection.

This privacy policy may be made available in multiple languages to facilitate your understanding. In the event of any discrepancy in interpretation or contradiction between the different language versions, only the version drafted in French shall be authoritative and legally prevail.

Contacting us

For any questions regarding this statement, to exercise your rights or to report a security incident, please contact us at privacy@fwrd.ch . You can also reach us via the dedicated Contact us page or by mail at the address below.

FORWARD SYSTEMS Sàrl
c/o ExpertFid & Audit SA
Rue de la Tour-de-l'Ile 4
1204 Genève
Suisse

Updated on September 11, 2026

Introduction

This statement describes how FORWARD SYSTEMS Sàrl ("we", "our") collects, uses, and protects your personal data. It applies to the use of our commodity risk and trade management software ("CTRM").

Our data processing strictly complies with the Swiss Federal Act on Data Protection (LPD) and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

Data collected

We collect the following data categories, strictly necessary for the service to function and for security purposes.

Identification data: first name, last name, and professional email address.
Session data: IP address, browser type and version, operating system, device configuration, and approximate location (derived from IP address).
Usage data: history of pages viewed, action timestamps, and interactions with CTRM features.

Data collection

We prioritize direct and transparent collection. We do not buy, rent, or retrieve personal data from brokers or third-party sources. Your data is communicated to us exclusively:

when your account is created by your internal administrator.
automatically, during your browsing and interactions with our platform (via the dedicated domain name, e.g.: https://ctrm.example.com).

Purpose of processing

Your data is processed solely for the specific purposes below and remains confined to your dedicated CTRM environment.

Identification data: used to identify you, send you notifications, connect you, and facilitate collaboration between users.
Our legal basis is the performance of the service contract.
Session data (IP address, browser, device): analyzed to detect unauthorized access and secure authentication.
Our legal basis is legitimate interest (system security) and our legal obligations.
Usage data: retained to ensure data integrity and maintain an action history for audit purposes.
Our legal basis here is legitimate interest and our legal obligations.

Data retention period

We apply the principle of minimization and retain your data only for as long as necessary.

Session data and interaction logs: retained for 90 days, a period deemed necessary for security analysis, debugging, and current auditing.
Identification data and critical audit logs: retained for a maximum of 10 years after account deactivation, in accordance with legal obligations for evidence retention and traceability in the financial and commercial sector.

At the end of these periods, data is anonymized or securely deleted.

Disclosure to third parties and integrated services

Your data remains under our exclusive control and is never sold or transmitted to third parties for commercial purposes.

Technical hosting and infrastructure maintenance are provided by our partner Infomaniak SA. Our servers are located exclusively in Switzerland. Infomaniak acts as a technical subcontractor (host) and has no functional access to your business data. A data processing agreement (DPA) compliant with the LPD and GDPR binds our two entities.

Storage and security

Access to your data is strictly limited to authorized FORWARD SYSTEMS Sàrl employees (development, technical support, administration). All our employees are subject to a strict contractual confidentiality obligation. We implement technical and organizational measures (encryption, access control, backups) to ensure a level of security appropriate to the risks.

Your rights and options

In accordance with the LPD and GDPR, you have the following rights, which you may exercise free of charge.

Right of access: obtain confirmation that we are processing your data and receive a copy.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data, subject to our legal retention obligations.
Right to restriction of processing: request temporary blocking of your data in certain cases.
Right to data portability: receive your data in a structured format.
Right to object: object, for reasons relating to your particular situation, to processing based on our legitimate interest.

To exercise these rights, please contact us using the channels indicated at the bottom of the page. Proof of identity may be requested to verify your identity. We will process your request within 30 days. In the event of a dispute, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the supervisory authority of your country of residence in the EU.

Legal framework and reference language

Contacting us

For any questions regarding this statement, to exercise your rights or to report a security incident, please contact us at privacy@fwrd.ch. You can also reach us via the dedicated Contact us page or by mail at the address below.

FORWARD SYSTEMS Sàrl
c/o ExpertFid & Audit SA
Rue de la Tour-de-l'Ile 4
1204 Genève
Suisse