1. Data controller
The controller of personal data collected via this site is:
2. Data collected
We only collect data that you voluntarily provide via the contact form:
- Identity — first name, last name;
- Contact details — email address, phone number (optional);
- Professional context — company, country;
- Content of your request — request type and free-form message.
No sensitive data within the meaning of Article 9 of the GDPR is collected. Fields marked with an asterisk are mandatory; others are optional.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Respond to your contact request (project, service, parts) | Consent (art. 6-1-a GDPR) |
| Establish a commercial relationship, quotation, invoicing | Performance of pre-contractual measures (art. 6-1-b GDPR) |
| Ensure follow-up of the installed machine base and technical support | Legitimate interest of the controller (art. 6-1-f GDPR) |
| Comply with our legal and accounting obligations | Legal obligation (art. 6-1-c GDPR) |
No processing for unsolicited commercial prospecting purposes is carried out without your explicit and prior consent.
4. Recipients and processors
Your data is processed by authorised employees of Demaurex SA. It may be transmitted to the following processors, strictly within the scope of the purposes above:
- Infomaniak Network SA (Switzerland) — website hosting, processing and delivery of contact form messages;
- OpenStreetMap Foundation (United Kingdom) — display of the map on the contact page.
These processors operate under data processing agreements (DPAs) and contractual clauses compliant with Article 28 of the GDPR. Your data is never sold or transferred to third parties for commercial purposes.
5. Transfers outside the European Union
The processing of data submitted via the contact form, as well as the hosting of the site, is carried out in Switzerland by Infomaniak Network SA, in data centres located on Swiss territory. No transfer of your data to a third country outside Switzerland or the European Union takes place as part of the operation of the site.
For clients and prospects based in Switzerland, processing complies with the requirements of the FADP (revised Federal Act on Data Protection, in force since 1 September 2023). For European Union residents, Switzerland benefits from an adequacy decision of the European Commission, ensuring a level of protection equivalent to that of the GDPR.
6. Retention periods
- Prospects with no follow-up — 3 years from last contact;
- Active clients — duration of the commercial relationship, then archiving for 10 years for accounting and contractual obligations (art. 958f Swiss CO);
- Service / parts requests — lifetime of the relevant machine plus 5 years;
- Server technical logs — 12 months maximum.
7. Your rights
In accordance with the GDPR and the FADP, you have the following rights regarding your personal data:
- Right of access — obtain confirmation and a copy of the data concerning you;
- Right of rectification — correct inaccurate or incomplete data;
- Right to erasure — request the deletion of your data;
- Right to restriction — restrict certain processing operations;
- Right to portability — retrieve your data in a structured format;
- Right to object — object to processing based on legitimate interest;
- Right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
- Right to set post-mortem directives regarding your data.
To exercise these rights, write to us at contact@demaurex.com specifying your request. A response will be provided within one month.
8. Security
Demaurex implements appropriate technical and organisational measures to protect your data against loss, alteration, unauthorised access or disclosure: TLS encryption of exchanges, restricted access to authorised personnel only, regular backups, hosting in Switzerland.
9. Cookies and trackers
This site uses no advertising cookies or marketing trackers. Only technical elements strictly necessary for the operation of the site may be used (display preferences, session). The display of the interactive map (contact page) generates a request to the OpenStreetMap servers to load the map tiles.
10. Contact us · Complaint
For any question relating to the processing of your data, contact us at contact@demaurex.com.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with:
- Switzerland — Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch;
- France — Commission nationale de l'informatique et des libertés (CNIL), cnil.fr;
- Other EU country — competent supervisory authority of your country of residence.