Version 1.0 · Effective 2 November 2026
This notice explains how Prorum processes personal data under Swiss data protection law. It applies to the website, accounts, requests, business admission and the associated portals.
Privacy requests: info@prorum.ch
The controller is Ruta Group, sole proprietorship of Kacper Ruta, Werkstrasse 11, 6102 Malters LU, Switzerland. Privacy contact: info@prorum.ch.
Where a business performs a service itself, it is responsible for its own quote, performance, invoice, statutory records and personal data it processes independently.
We process identity and contact details, login and account data, addresses and locality assignments, request content and status, answers to trade questions, dates, messages, quotes, invoice and payment status, reviews, consents, and application, business and profile data.
Photos, videos and documents may contain content data and metadata. Technical data includes IP address, timestamps, browser and device details, sessions, security events, token status and audit logs. Login codes and secrets are processed only in the technically required form.
Data comes from you, platform use, involved businesses and, for businesses, public registers or publicly available business sources. Businesses go through a controlled admission before publication.
Only approved directory information is public. Customer requests, private contact details, addresses and messages are not published.
We process data to provide accounts and login codes, record requests, check availability, assign suitable businesses, show communications and documents, admit businesses, manage profiles, provide support, prevent abuse and comply with legal duties.
Processing is used to perform requested platform services, is based on overriding private or public interests, legal duties and, where required, consent. Consent may be withdrawn for the future without affecting earlier lawful processing.
A request is processed only within the displayed workflow. After suitable assignment and the required disclosure step, no more than three businesses may see the request data needed to respond; full contact details and the work address are disclosed only as shown in that process.
Recipients may include commissioned hosting, storage, email, security and support providers, assigned businesses, payment or integration providers when the function is active, and authorities or courts where required. Processors may use data only on our instructions and for the agreed purposes.
The core service and active email transport are currently operated in Switzerland. If a future provider processes data in a country without adequate protection, we will use a recognised safeguard, particularly standard data protection clauses, or a statutory exception and provide information in the relevant workflow.
A payment, communications, analytics or integration provider does not receive data merely because its interface is technically prepared; disclosure occurs only when that function is enabled and used.
Prorum uses technically necessary session, security and language settings so that sign-in, forms and protective functions work. These are not used to build marketing profiles.
No production analytics, advertising or marketing tracking solution is currently active. Before non-essential tracking is used, this notice will be updated and any required choice will be provided.
Search, availability, abuse protection and assignment may be supported by rules or automation. A search suggestion or technical priority is not a legally binding assessment of a business.
Prorum currently makes no solely automated individual decision that has a legal or similarly significant effect on a person.
We keep personal data for as long as needed for the account, request, contract, security and support. It is then deleted or anonymised unless statutory retention, evidence duties or legitimate security interests apply.
Relevant factors include the status and age of a job, accounting periods, open claims, abuse-prevention and audit needs, and the life of an account. Backups are overwritten on the scheduled rotation.
Prorum uses role-based access, MFA for administrators, limited links and codes, transport encryption, logging and organisational controls. No system can guarantee absolute security.
Incidents are investigated, contained, documented and reported as required by law. Report suspicious messages or access to info@prorum.ch and never share login codes or passwords.
Within the law, you may request access, correction, release or transfer, deletion, restriction and, where applicable, object or withdraw consent. Prorum may verify identity to prevent unauthorised access.
Send requests to info@prorum.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner. Statutory retention or evidence duties may limit immediate deletion.
Prorum is not directed at people who cannot enter the relevant service contracts without the consent of their legal representative.
We update this notice for material changes in operations or law. The current version and effective date are published here; material changes affecting existing accounts will be communicated appropriately.
After completed jobs, companies can rate you. Only companies with an open offer for your new request see your average, rating count and on-time Prorum invoice payments from the last 24 months. They never see comments. You can reply to and contest reviews in your profile.
Last 24 months. Only completed jobs and shared invoices on Prorum after this feature was introduced. Open invoices that are not yet due do not count.
Companies with an open offer for your new request see your average rating, rating count and how many invoices you paid on time. They never see comments. With fewer than two ratings we show “New to Prorum”. Contested ratings do not count until a decision is made.