Data controller
Enigmatic SA
Rue de la Gare 13, 2074 Marin-Epagnier, Switzerland
Email: hello@enigmatic.swiss
Enigmatic SA (“we”) is the data controller for the personal data processed within the meaning of the Swiss Federal Act on Data Protection (nFADP).
This policy covers two distinct scopes: the marketing website about.mosaique.co, described in the sections below, and the Mosaique platform (mosaique.co), described in the “Mosaique Platform” section.
Collected data (marketing website)
We collect as little personal data as possible. When you visit our marketing website about.mosaique.co, the following data may be processed:
IP address (anonymized)
Visited pages, date and time of access
Referrer URL
Browser and operating system
This data is collected for statistical purposes to improve our website. It does not allow us to identify you personally.
Data processed in the Mosaique platform is subject to a separate regime, described further down.
Web analytics
We use Matomo, a self-hosted web analytics solution. Matomo is hosted on our own servers in Switzerland. No analytics data is transferred to third parties or outside Switzerland.
IP addresses are anonymized before being stored. Matomo may use a cookie to distinguish unique visitors. You can refuse tracking by enabling your browser’s “Do Not Track” setting, which Matomo respects by default.
Fonts
The fonts used on this website (Figtree) are hosted on our own servers. No requests are made to external font providers. No data is transferred to third parties for font loading.
No transfer of data to third parties (marketing website)
The marketing website does not use any third-party service that would transfer your personal data outside Switzerland. We do not use third-party advertising, social media tracking pixels, or external CDNs.
The only external links on this website lead to our own products, our social media profiles, and our partners’ websites. The use of these links is subject to the respective services’ privacy policies.
This guarantee applies to the marketing website only. Transfers made from the Mosaique platform when publishing content are described in the “Mosaique Platform” section.
Cookies
This website may use a single internal cookie for web analytics (Matomo). This cookie is set by our own servers in Switzerland and is not shared with any third party.
No third-party cookies are used. Under Swiss law, no consent banner is required for this type of analytics cookie, as it serves a legitimate interest and data is anonymized.
Mosaique Platform
This section covers the Mosaique application available at mosaique.co. Enigmatic SA is also the data controller for it within the meaning of the nFADP, at the contact details given above.
Account data: we process the user accounts and teams (name, email address, role and account settings) required to access the service.
Content data: we process the editorial content and media that our customers store in the platform. This data is processed solely to provide the agreed service and is not used for any other purpose.
Connected social accounts
When a user connects a social media account to Mosaique through OAuth, we store the access and refresh tokens (encrypted at rest) as well as the metadata of the account or page concerned: name, ID and avatar.
Purpose: publishing the content the user has prepared in Mosaique to that platform, on their instruction.
Tokens are never sold, shared with third parties, or used for any purpose other than the one described above.
Data transfer when publishing
When content is published, that content and the required authentication data are transmitted to the operator of the target platform. This transfer may involve processing outside Switzerland.
The processing carried out by the platform operator is governed by that platform’s own privacy policy and is beyond our control.
Retention of platform data
Tokens and platform metadata are deleted as soon as the user disconnects the account concerned or deletes it in Mosaique.
Account and content data is deleted in accordance with the contract when a customer ends their subscription.
LinkedIn
Mosaique accesses LinkedIn data exclusively through the official LinkedIn APIs.
Data accessed and stored: OAuth tokens, the basic member profile (ID, name), the list of organization pages the member administers, and the metadata of those pages.
Use: creating and publishing the posts the user schedules in Mosaique, on their member profile or on their organizations’ pages.
We only store the data required to provide the service, and we delete LinkedIn data as soon as the user disconnects the account or revokes access.
Data transmitted to LinkedIn is governed by LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Users can revoke Mosaique’s access at any time in their LinkedIn settings, under “Data privacy → Other applications / Permitted services”.
Your rights
Under the Swiss Federal Act on Data Protection (nFADP), you have the following rights:
Right of access: you can request information about the personal data we hold about you.
Right to rectification: you can request correction of inaccurate data.
Right to erasure: you can request deletion of your personal data.
Right to data portability: you can request a copy of your data in a structured format.
These rights apply both to the marketing website and to the Mosaique platform.
To exercise any of these rights, please contact us at hello@enigmatic.swiss. We will respond within 30 days.
Changes to this policy
We may update this privacy policy from time to time. The current version is always available at this address. We recommend checking this page regularly.
Last updated: 19 August 2026.
Supervisory authority
If you believe your data protection rights have been violated, you can file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC):
Swiss Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch