Confidentiality policy

1. Responsable du traitement

Name: Maloia SA
Address: Passage de l'intendant 6, 1227 Carouge GE
Telephone: +41 22 820 24 24
Email: communication@maloia.ch
Legal form: Société Anonyme (SA)
Commercial Register registration number: CH-660.1.110.014-3
VAT number: N/A
Publishing manager: Yves Cohen

2. Data collected

We limit the collection to data that is strictly necessary:
- By phone (Making an appointment): Name, first name, telephone number and type of service desired. This data is not entered on the website but collected orally.
- Through the website:
-- Technical cookies: Cookies strictly necessary for the display and security of the site (hosted on Webflow).
-- Statistical analyses: Pseudonymized browsing data (pages visited, duration of session, city of connection), with anonymization of the IP address.
-- Third-party content (Instagram): If you agree, the extension Elfsight show our Instagram feed. This may involve the transmission of your IP address to Instagram/Meta.

3. Purposes of the treatment

Your data is processed for:
- Manage your appointment requests and the pre-contractual relationship.
- Ensure the proper technical functioning of the website.
- Allow interaction with our social networks (displaying the Instagram feed) only after your explicit agreement.

4. Legal bases

- Pre-contractual measures/Contract execution: To make an appointment by phone.
- Consent: For the activation of Google Analytics and the Instagram module (via CookieYes).
- Legitimate interest: For the security of the website.

5. Shelf life

- Appointment data: Kept for the duration of the commercial relationship, plus the legal limitation periods (10 years for accounting if a service is invoiced).
- Technical data (logs): 6 months maximum.
- Cookie consent: 12 months
- Analytical data (Google): 14 months

6. Recipients and data transfer

Your data is processed by Maloia SA. The following service providers act as subcontractors:
- Webflow: Hosting of the site (technical navigation data).
- CookieYes: Managing your consent preferences.
- Elfsight/Meta (Instagram): Only if you activate the social feed.
- Google Ireland Ltd: For audience analysis services (Google Analytics/GTM).
The main storage of appointment data is located in switzerland. Flows related to web tools (in particular Webflow, google and Elfsight) may involve data processing outside the European Union, in particular at u.s.. These transfers are supervised by standard contract terms approved by the European Commission.

7. Your rights

You have the following rights with respect to your personal data:
- Access, correction and deletion.
- Limitation or opposition to treatment.
- Withdrawal of consent (in particular for displaying Instagram).
To exercise your rights: communication@maloia.ch

8. Third-party cookies and tools

Nous utilisons des cookies et des outils tiers sur notre site pour améliorer votre expérience et analyser l’usage du site. Ces cookies sont classés selon leur finalité et leur niveau de nécessité.
- Functional cookies: Indispensable to the site.
- Instagram widget (Elfsight): The display is blocked by default. The loading of the script and the deposit of third-party cookies only take place after your acceptance click on our consent banner.
- Analytical cookies (Google Analytics): These cookies allow us to measure the audience of the site and to understand how visitors interact with our pages. Data is processed in such a way as to protect your anonymity. They are disabled by default.
- Cookies publicitaires / de suivi :
-- Google Tag Manager / Google Ads : Mesurer l’efficacité des campagnes publicitaires et optimiser les annonces.
-- DoubleClick / Google : Vérifier si votre navigateur accepte les cookies pour la publicité ciblée.
You can change your preferences at any time via the “Cookie Management” link at the bottom of the page.

9. Changes

This policy may be updated. The version in force is the one published on the site.

10. Supervisory authority

- Switzerland: Federal Data Protection and Transparency Officer (PFPDT).
- STREET: Data protection authority in your place of residence.