Data protection

What we do with your data.

Written in plain language, not legalese. If anything is unclear, write to us: it means it’s badly written.

⚠️ To be legally validated before going live. This text follows the structure required by the FADP (revised Swiss Federal Act on Data Protection, in force since 1st September 2023), but the tools actually used (analytics, hosting, email) must be confirmed by Exponent, and the whole reviewed by a lawyer.

Who is responsible

Exponent, Quai du Seujet 12, 1201 Geneva. For any question about your data:[email protected].

What we collect, and why

When you write to us

The contact form collects your name, your email address, your company if you give it, and your message. This information is used only to reply to you and, where relevant, to prepare a proposal.

  • Legal basis: your request to us, and our legitimate interest in replying to it.
  • Retention: three years after the last exchange, then deletion.
  • Recipients: Exponent’s partners. Nothing is passed on to a third party.

When you talk to our assistant

Questions put to the assistant are processed to produce an answer. They are not linked to your identity unless you give your contact details, and [specify: whether they are kept, and by which model provider].

Analytics

[To be confirmed.] If analytics are put in place, it will be with a privacy-friendly tool and only after your consent. No advertising trackers, no sharing with ad networks.

What we don’t do

  • No selling or sharing of your data for commercial purposes.
  • No advertising profiling.
  • No newsletter without your explicit sign-up.

Where your data is

Hosting in Switzerland. If a provider located outside Switzerland or the European Union were to be involved, the transfer would be covered by the safeguards provided for by law, and mentioned here.

Your rights

The FADP gives you the right to:

  • know what data we hold about you, and obtain a copy;
  • have it corrected if it is inaccurate;
  • request its deletion;
  • object to processing;
  • withdraw your consent at any time, without having to give a reason.

A request to [email protected] is enough. We reply within thirty days, free of charge. In case of disagreement, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Security

The website is served over HTTPS. Access to contact data is limited to the people who need it. In the event of a breach posing a high risk to your rights, we inform the FDPIC and the people concerned, as the law requires.

Changes

This text may change if our tools change. The date below shows the latest version. A substantial change would be pointed out to you on your next visit.

Last updated: 25 August 2026. See also the legal notice.