This policy covers visits to the firm’s website and communications you choose to send us.
Controller and contact
The controller is GIG Inventions Sàrl, c/o Avalon Advisors Sàrl, Rue de Neuchâtel 1, 1400 Yverdon-les-Bains, Switzerland. Its correspondence office is at Regus Geneva Airport, Route de Pré-Bois 14, 1216 Cointrin – Geneva, Switzerland.
For questions or requests about your data, contact David Grèzes at grezes@gig-inventions.com, by post at the addresses above or on +41 (0)22 519 73 27.
Data and purposes
When you visit, your browser sends technical operators the data needed for the request: IP address, date and time, requested resource, browser information and HTTP parameters. This processing delivers the pages, maintains availability, detects incidents and protects the website.
If you write to us, we process your contact details, message and any attachments you choose to send to respond, assess your enquiry and prepare a possible engagement.
This information website has no visitor account, filing form, case upload or online payment. Contact links open your email application; the website does not store a copy of your message in a website database.
Processing grounds and AI assistance
Processing serves the purposes stated here under the Swiss Federal Act on Data Protection. For processing governed by the GDPR, website delivery and security rely on the firm’s legitimate interests; responding to a request for services and preparing an engagement rely on the requested pre-contractual steps or performance of the engagement. Optional Google Analytics audience measurement relies on your consent. Applicable legal obligations provide grounds for retention that they require.
The website has no chatbot and does not create advertising profiles of visitors or make automated individual decisions about them. Browsing does not trigger analysis of your enquiry by an AI model. The firm’s AI-assisted method for professional engagements is explained separately on the website and in its engagement agreement.
Google Analytics 4: preparation and consent
Google Analytics 4 is available only after your consent.
Activation is planned only on the production website and after your explicit consent. Its purpose is to understand page use and improve the website, without advertising or advertising personalisation. If you refuse or have not consented, no Google Analytics tag loads and no data or consent signal is sent to Google Analytics.
Once enabled and accepted, measurement data may include a pseudonymous browser identifier, pages viewed, configured navigation events, timestamps, referral source and technical browser or device characteristics. Connecting to the service also transmits the IP address. Your email contents and professional case documents are not sent to Google Analytics.
The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, using Google LLC and infrastructure in the United States. The Google Analytics terms, data processing terms and Google information about data from partner sites describe the service and its processing.
Google Maps: an optional location map
The Geneva office map is provided by Google Maps. It loads only when you ask to display it. When it loads, your browser connects to Google and sends technical data, including your IP address and browser information. Google may use cookies and processes these data under its own privacy policy.
Displaying or removing the map does not change your Google Analytics choice. No map preference is saved in this website’s browser storage. The address and the external map and directions links remain available without loading the embedded map.
Recipients and hosting
Access to enquiries sent to the firm is limited to authorised persons and the technical providers needed to handle them. Hosting, delivery, security and email providers act for their respective functions.
The website relies on Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111, United States, and Cloudflare’s delivery and security infrastructure. The current list of technical subprocessors is published in the Lovable Trust Center, linked from its subprocessor page.
Processing abroad
The host’s services use operators in the United States and the European Economic Area, together with a global delivery and security network. Technical data is therefore not processed exclusively in Switzerland or the European Union.
The Lovable DPA describes the provider’s contractual safeguards. In its privacy policy, Lovable states that it uses EU standard contractual clauses with a Swiss addendum for transfers governed by Swiss law. The Trust Center lists its current providers.
If Google Analytics is enabled and you consent, audience measurement also involves Google Ireland Limited and processing in the United States. The Google data processing terms and international transfer mechanisms describe the safeguards offered for that service.
You may contact us for further details about recipients, relevant countries and the safeguards applying to your data.
Retention and security
Technical data is retained according to the infrastructure’s operational and security needs and the relevant providers’ retention rules. The firm does not specify a single numerical retention period for logs it does not manage directly.
Messages are kept for the time needed to respond and follow up the enquiry. If an engagement is opened, documents become part of the professional file and follow the retention duties, evidential needs and legal periods applicable to that engagement. Data no longer needed is deleted or anonymised.
The website uses HTTPS. Access to files and correspondence is organised according to authorised persons’ functions.
For the future activation of Google Analytics, the selected retention period for user-level and event-level data is two months. This setting does not apply to standard aggregated Google Analytics reports. Retention periods for measurement cookies and the record of your choice appear on the Cookies page.
Your rights
You may ask us for access to your data, correction of inaccurate data, deletion or restriction of processing, and object to processing. You may request delivery or transmission of your data in the situations provided by law. Where processing relies on your consent, you may withdraw it at any time for the future.
Send your request to grezes@gig-inventions.com. We verify your identity to the extent needed to protect your data. Access requests are normally handled free of charge within 30 days.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC) or the competent data protection authority for processing governed by the GDPR. The FDPIC explains the right to access personal data.