Privacy.

The data controller

Ermite Agency, represented by Vahe Karaman, Geneva. For any question about your data: contact@ermite-agency.ch. Processing is subject to the Swiss Federal Act on Data Protection (revFADP) and, for people established in the European Union, to the GDPR.

The data collected

This site collects data about you in one case only: when you fill in the demo request form: name, company, current website or social profile, phone or email, a description of your business, plus the originating page and the time of sending. Only a way to reach you and the description of your business are required; everything else is optional.

The rest of your browsing only produces technical logs (IP address, browser) kept by the host for site security.

Why, and on what basis

Your data is used to answer your enquiry: to prepare a first direction for your website, present it to you, then discuss the project. These are pre-contractual steps taken at your initiative. It is not used for advertising, automated mailings, or transfer to third parties for commercial purposes.

Retention

Enquiries are kept 12 months after the last exchange, then deleted. Enquiries that lead to a contract are kept for the duration of the business relationship and the statutory accounting retention periods.

Recipients and processors

• Cloudflare, Inc. (United States): site delivery and technical logs.
• Supabase (eu-west-3 region, Paris): storage of enquiries sent through the form.
• Google Fonts and jsDelivr: loading of the fonts and of a graphics library; your browser sends its IP address to those services when the page loads.
• WhatsApp (Meta): only if you choose to write to us through that channel, under WhatsApp’s terms.

No other recipient. No data is ever sold.

Audience measurement

To know which pages are read and through which channel visitors arrive, this site records an event on each page view, on each click on a contact method and on each form submission. That event contains only: the date, the type of action, the page involved, the domain name of the site you came from (never the full address) and whether you are on a phone or on a computer.

It contains no IP address, no cookie, no visitor identifier. Two visits cannot be linked to the same person, and no cross-referencing with another site is possible. This data is aggregated, used by the agency alone, and is neither sold nor shared for advertising purposes. It is stored with Supabase, in France.

Because it is strictly anonymous, this measurement does not require your prior consent. It is described here so that you know it exists.

Cookies

This site uses no tracking cookie, no advertising pixel and no consent banner. Only one piece of local storage is used, and only on the 404 error page: the high score of the little game that lives there. It stays in your browser, is never sent anywhere, and contains no personal identifier.

Your rights

You may at any time request access to your data, its correction, its deletion or a copy, by email to contact@ermite-agency.ch. We reply within 30 days. In Switzerland you may contact the Federal Data Protection and Information Commissioner (FDPIC); in the European Union, your national supervisory authority.

Security

Exchanges with this site are encrypted over HTTPS. Requests sent through the form are stored in a restricted database, protected by rules that forbid any public read. Notifications of a new request go to a private address of the agency and to its professional mailbox; they pass through no marketing service.

The form carries an anti-bot filter: a hidden field and a measurement of typing time. A request judged suspicious is flagged, never deleted; it stays readable by the agency, precisely so that no genuine request is ever lost.

Automated decisions

No decision producing an effect on you is taken automatically. The anti-bot filter turns nobody away: it adds a note to the request, which a human then reads. No profiling is carried out.

Transfers outside Switzerland and the European Union

Form requests are stored in France (eu-west-3 region). The site is delivered over Cloudflare's global network, a company established in the United States; that transfer relies on the European Commission's standard contractual clauses and the corresponding safeguards recognised in Switzerland. No form data is stored in the United States.

Changes to this page

This page may change along with the site and the tools it uses. The date of the latest update appears at the bottom. Earlier versions can be requested by e-mail.