Privacy policy

The data controller is:
InnovArt SA
Chemin du Champ-des-Filles 36a,
1228 Plan-les-Ouates
Geneva – SWITZERLAND
Registered with the Geneva Cantonal Commercial Register
IDE & VAT no.: CHE-399.742.827
E-mail: contact@altergeneva.com

We are committed to the principles of data protection. In application of these principles, personal data must be:

• Processed lawfully, fairly and transparently;
• Collected for specified, explicit and legitimate purposes, and not further processed in a way incompatible with these purposes;
• Kept in an adequate and relevant manner, and limited to what is necessary for the purposes for which it is processed;
• Accurate and kept up to date;
• Processed in such a way as to guarantee appropriate security;
• Transferred outside the European Economic Area only if the recipient country has an adequate level of protection or appropriate safeguards.

InnovArt collects and processes personal data for the following purposes:

• The marketing of Services on the Site;
• Customer advice in relation to the Services offered on the Site;
• After-sales service for the Services;
• Applying for a job with our company.

As part of your relationship with us, you may communicate your personal data to us in various ways:

• By filling in the order and contact forms available on the Site;
• By posting comments on the social networks on which we are present (Instagram);
• By applying for a job with our company.

The personal data concerned includes: surname, first name, e-mail address, postal and billing address, telephone number, Site navigation data (please refer to our Cookie Policy for more information on this subject).

InnovArt does not collect or process personal data relating to children under the age of 16 without the prior consent of the child's parents or guardians. If personal data concerning children is collected via the Site, parents or guardians may object by contacting us immediately.

Your personal data is used by InnovArt with your consent and/or in InnovArt's legitimate interest in connection with the provision of our Site and the Services we offer you in order to:

• Execute a contract entered into with you and/or to carry out procedures you have requested;
• Respond to your requests and complaints;
• Respond to your applications as part of our recruitment procedures;
• To match our information, notifications, offers and services to your best interests;
• Develop new services, improve our customer service, etc. ;
• Comply with legal obligations.

Any personal data you may have provided to us is strictly reserved for employees of InnovArt and its affiliated companies authorized to access it in the course of their duties and within the framework of the legitimate provision of our Services.

All InnovArt employees and those of its affiliated companies are made aware of the need to protect personal data.

As a rule, your personal data will not be passed on to third parties:

• According to your consent;
• To our subcontractors in the context of legitimate processing to respond to and fulfill your requests and orders. Our subcontractors receive only the data required to respond to your requests and orders, and use it exclusively for this purpose;
• To the authorities having a right of access to the information within the framework of the implementation of legal obligations;
• To our subcontractors in the context of legitimate processing so that we can provide you with a user-friendly and optimized Site;
• To our subcontractors for legitimate marketing and advertising purposes;
• In the event of a merger or acquisition of all or part of InnovArt by a third party.

InnovArt carefully selects its subcontractors, who are also committed to protecting your data.

Hosting
Infomaniak Network SA: the Site is hosted by Infomaniak in Switzerland. Please refer to their privacy policy.

CMS
STRAPI (Self-Hosted): The Site uses the self-hosted Strapi CMS for content management. Strapi is a back-end content management solution for structuring and delivering data via secure APIs. To find out more about how Strapi handles data, please consult its privacy policy.

Site architecture:
The Site is designed as a decoupled architecture (headless CMS), with a self-hosted back-office under Strapi and a static front-end.

• Front-end : The static site stores no user data locally. All interactions, such as forms, are made via secure API calls to the back-office.
• Back-office: Hosted in Switzerland at Infomaniak Network SA, guaranteeing data protection and confidentiality in accordance with Swiss and European standards (RGPD).

Payment services
The Site offers you the possibility of using the Stripe payment system for online payment of Services by bank cards such as Visa, American Express, Mastercard. You can find out more about how this company stores and uses your personal data by accessing their privacy policy.

Analysis tools
Google Analytics - we use this web analytics service provided by Google Ireland Limited. This service uses cookies to enable us to analyze your use of our website. The information generated by the cookie about your use of the website, including your IP address, may be transmitted to and stored by Google on servers in the United States. Google will not associate your IP address with any other data held by Google. Technically, however, it cannot be ruled out that Google may be able to identify individual users on the basis of the data obtained. It is possible that personal data and profile data of users of the Google website may be processed for other purposes outside our sphere of influence. This data protection problem is compounded by the fact that data is transferred to the USA.

If you wish to deactivate Google Analytics, you can find the appropriate add-on for your browser at this link. Please note, however, that this deactivation may prevent you from using certain functions available on the Site.

Marketing tools
Facebook Pixel - We use the Facebook pixel to help us reach our audience on Facebook and provide them with relevant content. You can disable Facebook pixel cookies by visiting the Ads tab in your general account settings. The information we share with Facebook will only be used in accordance with Facebook's Data Usage Policy.

Google Tag Manager - We use this service from Google Ireland Limited to integrate and manage Google Ads and other Google and third-party services on our Site. Google processes the information transferred and other data relating to Google Ads pseudonymously. This means that, from Google's point of view, pseudonymous profiles and not the profiles of individual persons actually identified are managed, unless the corresponding person has authorized Google to carry out the processing without pseudonymization. You can object to Google's interest-based advertising by using the relevant Google settings options.

InnovArt undertakes to keep your personal data for no longer than is necessary for the purposes for which it is processed, in accordance with the retention periods imposed by the applicable laws in force for certain categories of data.

On the Site you may find links to social networks.

By clicking on these links, if you are already connected to the relevant social media service at the time you click on the button, the sharing dialog box will detect this so that you can share the content directly. If this is not the case, you will be asked to connect to these social networks.

It is your responsibility to check the security and privacy settings of the social networks concerned, as well as their terms of use.

You can find information on the collection, storage and use of your data by these sites at the following addresses:

• Facebook;

• Instagram;

• Linkedin.

InnovArt implements all appropriate technical and organizational measures, having regard to the nature, scope and context of the personal data you provide to us and the risks presented by their processing, to preserve the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorized access to such data.

The technical architecture of the Site has been designed to comply with current security and data protection standards, in accordance with Swiss legislation and the General Data Protection Regulation (RGPD).

Secure hosting and data control
The Strapi CMS used for content management is hosted internally on servers located in Switzerland, under the management of Infomaniak Network SA (Rue Eugène-Marziano 25, 1227 Les Acacias, Geneva). This configuration guarantees total control over data security, access and management.

Static site with enhanced protection
The Site's front-end is generated in static form, limiting direct interaction with users and thus reducing the risks associated with database injection or compromise attacks.

Securing API calls
Data exchanges between the front-end and the Strapi back-office are carried out exclusively via API calls restricted to what is strictly necessary. These calls are protected by secure protocols (such as HTTPS) and appropriate authentication mechanisms to guarantee the confidentiality and integrity of transmitted data.

Finally, we would like to remind you that the security and confidentiality of personal data depends on everyone's good practices. This is why we invite you not to share your passwords with third parties, to systematically disconnect from your social network accounts and to close your browser window at the end of your work session, especially if you access the Internet from a computer shared with other people. This will prevent other users from accessing your personal information.

We also recommend that you do not distribute any documents containing your personal data to third parties or post them on social networks.

In accordance with applicable regulations on the protection of personal data, you may, at any time, exercise your rights of access, rectification and deletion of data concerning you, as well as your rights to limit and object to the processing and portability of your personal data by contacting us directly by e-mail contact@altergeneva.com.

InnovArt will delete your personal data from its database within 72 hours, insofar as you no longer have a contractual relationship with InnovArt and we have no legal obligation to retain your data.

For any questions regarding these Privacy Policy, please contact us by emailing contact@altergeneva.com.