Privacy policy

1Data controller

The controller for the data collected through this website is:

Phone

+41 76 203 63 53

WhatsApp

+41 77 944 85 56

Email

contact@peinture-suisse-romande.ch

For any data protection question, or to exercise your rights, contact us by phone or through the contact form. We have not appointed a data protection adviser, so your requests reach us without an intermediary.

2Our principles

• We only collect the data we genuinely need in order to answer you and carry out our work.
• We never sell, rent or trade personal data.
• We use no audience measurement tool (Google Analytics or equivalent), no advertising pixel and no profiling for marketing purposes.
• The site's fonts are served from our own servers: opening a page triggers no call to a third-party service.

3Data we process

Depending on how you use the site, we process the following categories of data:

• Quotation request — name, phone number, email address, locality, requested service and the content of your message. Your name and at least one means of contact are needed for us to reply; the other fields are optional.
• Client area — email address, display name and password. The password is stored only in hashed form by our authentication provider: neither they nor we can read it. If you choose “Continue with Google”, we instead receive your Google email address, name and profile picture.
• Technical data — IP address, browser and operating system type, pages viewed, date and time of the request. This data appears in server logs and serves the operation and security of the site.
• Direct contact — if you email us, call or use WhatsApp, we process the data you send on that occasion, including any jobsite photographs you share.

We process no sensitive personal data within the meaning of art. 5 let. c FADP. Please do not send us such data (health, religious or political views, etc.) through the form or by message.

4Why we process this data

• Answering your enquiries, preparing a quotation and arranging a site visit.
• Concluding and performing the contract for work: planning, carrying out the work, invoicing, warranty.
• Managing your client area: account creation, sign-in, access to your documents.
• Keeping the site secure and available, preventing abuse and automated submissions.
• Meeting our legal obligations, in particular the retention of accounting records (art. 958f CO).

5Legal bases

Under Swiss law, processing personal data requires no specific legal basis as long as it respects the FADP principles: lawfulness, good faith, proportionality, recognisable purpose and data security. We observe these for every processing operation described above.

For people residing in the European Union, the GDPR legal bases are as follows: performance of a contract or pre-contractual steps (art. 6(1)(b)) for quotations, works and the client area; our legitimate interest (art. 6(1)(f)) for site security and abuse prevention; legal obligation (art. 6(1)(c)) for accounting retention.

6Providers and recipients

We rely on technical providers that process data on our behalf, on our instructions and under a data processing agreement. None of them may use your data for their own commercial purposes.

If you write to us through the WhatsApp button, the exchange takes place on the infrastructure of WhatsApp Ireland Ltd. (Meta group), under that platform's terms, over which we have no influence. Your data may also be disclosed to our accountant, our insurer or the authorities where the law requires it.

7Transfers abroad

The providers listed above are based in the United States and your data may be processed or stored there.

These disclosures rely on the safeguards set out in art. 16 and 17 FADP: either the provider's participation in the Swiss–U.S. Data Privacy Framework recognised by the Federal Council, or standard contractual clauses approved by the Federal Data Protection Commissioner, supplemented where appropriate by technical measures such as encryption in transit.

8Retention periods

We keep data for as long as necessary for the purpose it was collected for, then delete or anonymise it:

• Quotation requests that led nowhere — 12 months, so that an earlier exchange can be found if you contact us again.
• Job files, contracts and invoices — 10 years from the end of the financial year, in accordance with art. 958f CO.
• Client area account — until the account is deleted, which you may request at any time; residual data is removed within 30 days.
• Technical server logs — a few weeks at most, then deleted automatically.

9Security

The site is served entirely over HTTPS and enforces transport encryption (HSTS). A Content Security Policy (CSP) restricts scripts and connections to the necessary origins only, which sharply limits the risk of code injection and data leakage.

Client area passwords are never stored in clear text. Access to quotation requests and client files is limited to the people in the company who need it.

No measure can guarantee absolute security for a transmission over the internet, however. Please do not send us particularly sensitive information by email or messaging.

10Your rights

You have the following rights over the data concerning you, at any time:

• Access — obtain confirmation that we process your data and receive a copy of it (art. 25 FADP).
• Rectification — have inaccurate or incomplete data corrected (art. 32 FADP).
• Erasure — request deletion of data we no longer need and are not required to keep.
• Objection — object to processing based on our legitimate interest.
• Handover or transfer — receive the data you provided to us in a common format (art. 28 FADP; portability under art. 20 GDPR).
• Withdrawal of consent — where processing relies on your consent, withdraw it without retroactive effect.

Send your request by phone or through the contact form. We normally respond within 30 days and free of charge. To avoid disclosing your data to someone else, we may ask you to prove your identity.

11Cookies

This site uses only the cookies strictly necessary for it to work — which is why no consent banner is shown: there is nothing to accept or refuse. The details are on our cookie page.

12Changes to this policy

We may adapt this policy if our services, our tools or the legal framework change. The applicable version is the one published on this page; the date of the last update appears at the top of the document.

13Complaints

If you believe your data is not being processed lawfully, please talk to us first: most situations are settled quickly.

You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — edoeb.admin.ch. If you reside in the European Union, you may lodge a complaint with the supervisory authority of your country of residence.