Privacy Policy
LGG – Leclanché Generic GUI
This policy explains what personal data LGG processes, why it is processed, how long it is retained, and what rights data subjects may exercise under applicable law.
1. Scope and Principles
LGG is an offline-first software application. It transmits data only (i) when a fatal error occurs and LGG creates an automatic diagnostic report, (ii) when you choose to submit an issue report, or (iii) when a commissioning run is executed.
All processing complies with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).
2. Controller
3. Personal Data
| Context | Categories of data | Source |
|---|---|---|
| Automatic error report (triggered only on unrecoverable crash) |
|
Generated by LGG |
| Commissioning report |
|
Generated by LGG |
| Voluntary issue report (within “Report Issue” dialog) |
|
Provided by you |
4. Purpose and Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Diagnose and correct software defects | Legitimate interest (Art. 6(1)(f)) |
| Respond to your issue report | Consent (Art. 6(1)(a)) |
5. Recipients
Diagnostic and issue data are sent over TLS to Leclanché’s secure servers in Switzerland. Access is restricted to:
- LGG core development team (Leclanché SA, Switzerland)
- Leclanché E-Mobility AG, Switzerland (infrastructure support)
Data are not shared with analytics providers, advertising networks, or group companies outside the teams listed above, unless disclosure is required by law.
6. International Transfer
If troubleshooting requires assistance from Leclanché entities in France, Germany, Norway, the United Kingdom, the United States, or Canada, standard contractual clauses (2021/914/EU) secure the transfer.
7. Retention
- Automatic error reports: 90 days, then permanent deletion.
- Issue reports: retained until the related ticket is closed and two release cycles have passed, with a maximum of 12 months.
- Commissioning reports: retained for the warranty period defined in the customer agreement.
- Aggregated, non-identifiable statistics may be kept indefinitely.
8. Security
- Data in transit: TLS 1.2+
- Data at rest: AES-256 encryption
- Access controls: role-based access control
- Monitoring: audit logging and weekly vulnerability scans
9. Rights of Data Subjects
You may request access, rectification, erasure, restriction, portability, or objection by e-mail or post to the controller.
You may lodge a complaint with the EDÖB (Switzerland) or your local supervisory authority in the EEA or UK.