1. Controller
KOBANÊ SERVICES, Route de Carignan 13, 1565 Missy, Switzerland, contact@kbn-services.ch.
2. Data collected
- Contact data: name, email, telephone number and preferred contact method.
- Project data: service, date, addresses, property type, rooms, floors, lifts, heavy items and message.
- Photographs voluntarily attached to a quote request.
- Management data: consent timestamp, request status and internal notes.
- Technical security data such as server logs and an IP address that may be processed temporarily by the host. The IP address is not currently stored in the quote-request table.
- For administrators only: email, account identifiers and authentication session data.
3. Purposes
- Respond to requests, prepare quotes and organise services.
- Contact the requester and manage the customer relationship.
- Assess volume, access and goods using the submitted details and photos.
- Secure and administer the website and prevent abuse.
- Meet contractual, accounting and legal duties and protect legal rights.
4. Grounds for processing
Processing is carried out to respond to pre-contractual requests, perform a contract, meet legal obligations and pursue legitimate interests in security, organisation and legal protection. Consent is obtained where required by law.
5. Recipients and processors
Only authorised KOBANÊ SERVICES personnel and necessary technical providers may access the data.
Supabase is used for the database, authentication and private file storage, and Infomaniak Network SA hosts the website. Data is not sold or rented for advertising.
6. Retention
- Quote requests not leading to a contract and their attachments: 12 months after the last exchange.
- Contract data: for the contractual relationship and as long as legal interests or limitation periods require.
- Accounting records: ten years where required under Swiss law.
- Technical logs: limited period set by the host and Supabase, to be confirmed.
- Data no longer needed is deleted or anonymised, subject to legal retention duties.
7. Attachments and gallery
Quote attachments are stored privately and are accessible only to authorised administrators. They are not automatically published.
Project photographs should be published only after the necessary rights and, where applicable, permission have been confirmed.
8. Cookies and analytics
The public website currently uses no advertising, profiling or third-party analytics tools. Strictly necessary cookies or equivalent mechanisms may be used for secure administrator sessions.
If analytics, marketing or external-content tools are added later, this policy and any required consent mechanism must be updated first.
9. Security
Reasonable safeguards include administrator authentication, role verification, database access policies, private attachment storage, form validation and rate limiting. No system can guarantee absolute security.
10. Individual rights
Subject to the FADP, individuals may request information, access, correction, deletion or restriction, object to certain processing and, where the conditions are met, request delivery or transfer of their data.
Requests should be sent to contact@kbn-services.ch. Identity evidence may be required. Individuals may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
11. Automated decisions
The website currently makes no automated individual decisions and carries out no profiling producing legal or similarly significant effects.
12. Changes
This policy may change if processing, providers or applicable law changes. The published version and update date apply.
