Privacy policy

Blue Geneva SAS (“we”) takes the protection of your personal data seriously. This policy explains what data we collect, why and how, in accordance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR) applicable to visitors from the European Union.

Data controller

The data controller is Blue Geneva SAS, reachable at admin@bluegeneva.com.

Data we collect

We only collect the data you choose to send us through the contact form:

• Name
• Email address
• Phone number (optional)
• Type of project and the content of your message

When you submit the form, we also attach referral information, so we know how you found us: the first page you visited on the site, the site you came from (for example a search engine), any campaign parameters in the address, the pages viewed during your visit and when, your device and browser type, your browser language and an approximate location (city or region, derived from your IP address by our hosting provider; the IP address itself is not stored).

This information is kept in your browser’s session storage (sessionStorage), which is cleared when you close the tab. It contains no identifier, is not a cookie, and only reaches us if you submit the form.

If you contact us via WhatsApp, those exchanges are subject to WhatsApp’s privacy policy.

Purposes and legal basis

This data is used solely to respond to your request (quote, question, getting in touch). The legal basis is your consent and our legitimate interest in handling your business enquiry. It is never sold or passed on to third parties for commercial purposes.

Outreach to businesses

We sometimes write to companies and tradespeople to offer our services, at the business email address they publish themselves (their website or the official French directory of RGE-certified professionals). We then use their name, the company name, its town, its line of business and its email address, on the basis of our legitimate interest in presenting an offer relevant to their business. Each message states where the address came from and lets the recipient opt out of any further message by simply replying “stop”; the objection is then recorded and respected. If there is no reply, this data is deleted 3 years after the last contact.

Retention period

Your data is kept for as long as needed to handle your request, then archived or deleted within a reasonable period (generally 3 years from the last contact, for business follow-up purposes), unless the law requires otherwise.

Recipients and processors

Form messages are delivered by our email service provider Brevo (Sendinblue SAS) and hosted by Vercel, which also provides the cookie-free audience measurement described below. These providers act as processors and are bound by confidentiality.

Cookies and analytics

We use Google Analytics 4 (provided by Google Ireland Ltd) to measure the site’s audience and improve its content. This tool sets analytics cookies and collects usage data (pages viewed, traffic source, device type) with an anonymised IP address.

These cookies are only set after you give your consent, through the banner shown when you arrive (Google Consent Mode: measurement is disabled by default). You can decline with no effect on your browsing, and change your mind at any time by deleting the cookies in your browser. No data is used for advertising purposes.

Cookie-free audience measurement

To know how many people visit the site, including visitors who decline cookies, we also use Vercel Web Analytics (Vercel Inc.). This tool sets no cookies and assigns no lasting identifier: a visitor is recognised for one day only, through a fingerprint computed on the server and then discarded. It cannot follow your browsing from one day to the next or across other sites, and only produces aggregate statistics (pages viewed, referrer, country, device type).

This measurement is based on our legitimate interest in knowing our website’s audience. Since it keeps nothing that could identify you, we cannot single out your visits to remove them: to avoid being measured, block requests to /_vercel/insights with a content blocker (most already do). For any question, write to us.

Your rights

Under the FADP and the GDPR, you have the right to access, rectify, erase, object to and port your data. To exercise these rights, email us at admin@bluegeneva.com. You may also lodge a complaint with the competent supervisory authority (FDPIC in Switzerland, CNIL in France).

Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.