Data protection declaration

The controller for personal data processed through this site is:

• EMA DIGITAL LTD, company number 15221041
• 128 City Road, London EC1V 2NX, United Kingdom
• gestion@emagency.ch

No data protection officer has been appointed. Requests about your data are handled at the address above.

The following is not a statement of intent but a description of the current implementation:

• no cookies are set, of any kind;
• no analytics tool is installed — no Google Analytics, no equivalent;
• no advertising tracker, no pixel, no tag manager;
• no script, font or image is loaded from a third-party domain;
• no profiling, no automated decision-making, no sale of data;
• no form data is received or stored by any server of this site.

Consequently no consent banner is required and none is shown. Were a measurement tool to be introduced, this declaration would be updated and the consent question reconsidered beforehand.

The Swiss Federal Act on Data Protection (FADP, revised, in force since 1 September 2023) and the EU General Data Protection Regulation are not the same and do not apply in the same situations. Which framework applies depends on your circumstances and on the processing concerned.

• FADP — the primary framework for this site, which addresses the Geneva and French-speaking Swiss market. Processing by a private person must be lawful, carried out in good faith, proportionate, recognisable, and consistent with the purpose stated.
• GDPR — may apply where processing relates to offering goods or services to people in the EU or EEA. Where it does, the legal bases are Article 6(1)(b) for contact and booking, and Article 6(1)(f) for operating and securing the site.
• UK law — as EMA DIGITAL LTD is registered in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply to its processing.

The site is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland, acting as a processor. Infomaniak states that data is stored in data centres located exclusively in Switzerland.

As with any web server, the infrastructure records the requests it receives: IP address, date and time, requested address, response code, referrer and browser used. These logs serve to deliver the pages and to keep the service available and secure. They are not used to analyse your behaviour and are not combined with other sources. Their retention period is determined by the host's configuration.

If you switch the site between its night and day appearance, that choice is kept in your browser's local storage as a single entry named ema-theme, whose value is dark or light.

This is not a cookie: the value is never sent to the server, identifies nobody, and does not leave your device. You can remove it at any time by clearing your browser's site data.

The booking form runs entirely in your browser. What you type — company, name, email address, optional phone number, chosen slot — is not sent to any server as you type it.

When you confirm, those details are placed into a pre-filled message that opens in your own mail program. Nothing is transmitted unless you send that message yourself. This site has no collection endpoint, no database and no record of those fields.

The "add to calendar" file is likewise generated in your browser and is sent nowhere.

If you write to us, we process your email address and the content of your message in order to reply and, where relevant, to arrange the call you asked for. How the message travels depends on your email provider and ours.

This site discloses no data to third parties for commercial purposes and sells none. The only third parties involved are the technical providers needed to run it: the host named above, and email providers when an exchange of email takes place.

The site itself makes no transfer of data to a third country: no resource is loaded from a foreign domain and no request is made to an external service.

Data is kept only for as long as the purpose it was processed for requires:

• server logs — for the period set by the host's configuration;
• correspondence — for as long as it takes to deal with your request, then for the duration of the business relationship and any retention obligations that follow from it;
• display preference — until you clear your browser storage.

The site is served over HTTPS only, with an HSTS policy. A restrictive Content Security Policy forbids the execution of any third-party script, the framing of the site by another, and the submission of forms to an external domain. No form data can be compromised on the server, because none reaches it.

Depending on the applicable framework, you have the right to obtain information about the data concerning you, to have it corrected or deleted, and to object to processing. Where the GDPR applies, the rights to restriction of processing and to data portability are added to these.

None of the processing described here relies on your consent, so there is currently no consent to withdraw. Were that to change, withdrawal would be possible at any time and without disadvantage to you.

To exercise these rights, write to gestion@emagency.ch. We may ask for reasonable evidence of your identity before acting.

If you believe processing is not lawful, you may contact the competent authority:

• Switzerland — Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch;
• EU / EEA — the supervisory authority of your habitual residence or of the alleged infringement;
• United Kingdom — Information Commissioner's Office (ICO), ico.org.uk.

This site addresses businesses and people acting in a professional capacity. It is not directed at children and we do not knowingly collect data about them.

This declaration is revised whenever the way the site works changes — in particular if an analytics tool, a hosted form or an advertising service is introduced. Only the version published on this page applies; its update date appears at the top.