PRIVACY

Privacy and data protection policy.

1. Data controller

The controller of personal data collected via the website alchimie-conseil.ch (hereinafter the "Website") is:

Alchimie Conseil

Registered office: Lausanne, Switzerland

Contact: via the Website's contact form

2. Legal framework

This privacy policy has been drawn up in accordance with the Swiss Federal Act on Data Protection (FADP, SR 235.1), which entered into force on 1 September 2023, and its implementing Ordinance (DPO, SR 235.11).

Where the Website is accessible from the European Union or used by data subjects to whom EU law applies, the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) may apply in addition, in particular on the basis of Article 3 (territorial scope).

For data subjects located in France, Act no. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended, supplements the GDPR for matters governed by French execution and supervisory law (data subjects’ rights, cooperation with the supervisory authority), insofar as those provisions apply to this Website.

3. Data collected

The Website is designed according to a principle of data minimisation. We collect only:

  • Voluntary contact data: when you contact us via the contact form or by email, we collect the information you voluntarily provide (name, email address, message content).
  • Technical connection data: during your visit, technical data may be collected automatically by our hosting provider (IP address, browser type, date and time of access, pages viewed). This data is processed by Cloudflare for the security and proper functioning of the Website.

The Website does not use tracking cookies, advertising cookies or behavioural analytics tools.

4. Purposes of processing

The personal data collected is processed for the following purposes:

  • Responding to your contact requests and ensuring the follow-up of our exchanges.
  • Ensuring the proper functioning, security and maintenance of the Website.
  • Complying with our legal obligations.

5. Legal basis for processing

In accordance with the FADP, the processing of personal data is lawful if it complies with the principles of good faith, proportionality and purpose limitation. The processing carried out is based on:

  • Your consent: when you contact us voluntarily.
  • Our legitimate interest: to ensure the security and proper functioning of the Website.
  • The performance of pre-contractual measures: when your contact request is aimed at establishing a business relationship.

6. Data retention

Contact data is retained for the period necessary to process your request, then deleted, unless a longer retention period is required by law.

Technical connection data is retained by our hosting provider in accordance with its own retention policy, in principle for a limited period necessary for the security of the Website.

7. Disclosure to third parties

Alchimie Conseil does not sell, rent or transfer your personal data to third parties for commercial or advertising purposes.

Your data may be disclosed only in the following cases:

  • Hosting provider: Cloudflare, Inc. (United States), in connection with the hosting and security of the Website. Cloudflare benefits from the Swiss-U.S. Data Privacy Framework.
  • Legal obligation: if required by law, a court order or a competent authority.

8. International data transfers

The hosting of the Website by Cloudflare may involve a transfer of data to the United States. This transfer is governed by the Swiss-U.S. Data Privacy Framework, recognised by the Swiss Federal Council as providing an adequate level of protection (Art. 16 FADP).

In the absence of an adequacy decision, transfers are ensured by standard contractual clauses or other appropriate safeguards in accordance with Art. 16(2) FADP.

9. Data security

Alchimie Conseil takes appropriate technical and organisational measures to protect your personal data against unauthorised processing, loss, destruction or accidental damage, in accordance with Arts. 7 and 8 FADP (privacy by design / by default and data security) and the requirements of the DPO (including Art. 1 et seq.).

The Website uses the HTTPS protocol (SSL/TLS) to encrypt communications between your browser and the server.

10. Your rights

In accordance with Arts. 25 et seq. FADP (data subject rights) and, where applicable, the GDPR (Chapters III and IV), you have in particular the following rights:

  • Right of access: to obtain confirmation as to whether or not personal data concerning you is being processed, and to receive a copy thereof (Art. 25 FADP).
  • Right to rectification: to request the correction of inaccurate personal data concerning you (Art. 32(1) FADP).
  • Right to erasure: to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
  • Right to object: to object to the processing of your data on legitimate grounds.
  • Right to data portability: to receive the data you have provided to us in a structured, commonly used and machine-readable format (Art. 28 FADP).

To exercise these rights, please contact us via our contact form. We will respond to your request within 30 days.

11. Right of complaint

If you believe that the processing of your personal data infringes applicable legislation, you may lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC) — supervisory authority in Switzerland

Feldeggweg 1, CH-3003 Bern

Website: www.edoeb.admin.ch

Commission nationale de l’informatique et des libertés (CNIL) — supervisory authority in France where the GDPR or applicable French law confers jurisdiction on it (in particular Article 77 GDPR): www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

12. Amendments

Alchimie Conseil reserves the right to amend this privacy policy at any time. The version in force is the one published on the Website on the date of your visit. We invite you to consult it regularly.

13. Applicable law and jurisdiction

This privacy policy is governed by Swiss law, in the first place.

Where the GDPR or applicable French law for data subjects in France or the EU applies on a mandatory basis, the corresponding material rules and remedies (including before the CNIL or another EU supervisory authority) remain reserved within the limits set by those instruments.

Any dispute relating to data protection in connection with the use of the Website shall be subject to the exclusive jurisdiction of the ordinary courts of Lausanne, Canton of Vaud, Switzerland, without prejudice to any mandatory rules on judicial jurisdiction.

Last updated: May 2026