NexAlp Data Privacy Policy
Last updated: 17/08/2026
1. Controller
NEXALP PRIVATE OFFICE SÀRL
Rue Muzy 8, 1207, Geneva, Switzerland
Email: info@nex-alp.ch
(the “Company”, “we”, “us”) is the controller of the personal data processed as described in this statement, within the meaning of the Swiss Federal Act on Data Protection (“FADP”) and Regulation (EU) 2016/679 (“GDPR”).
2. Scope and applicable law
This statement governs the processing of personal data collected through our website. Such processing is subject to the FADP and the Data Protection Ordinance and, in respect of data subjects located in the European Economic Area, to the GDPR.
3. Categories of personal data
3.1 Data submitted through the contact form
name
email address
telephone number
capacity in which you contact us (business or private individual)
company name (optional)
content of the free-text message field
Provision of this data is voluntary. In the absence of a name and at least one contact channel, we are unable to respond to your enquiry.
You are requested not to submit sensitive personal data within the meaning of Art. 5 lit. c FADP and Art. 9 GDPR, in particular data concerning health, religious, philosophical or political views, trade union membership or legal proceedings. Where you submit personal data relating to third parties, you shall ensure that those persons have been informed of this statement.
3.2 Website statistics
Our website is operated on the Framer platform, which generates aggregate statistics comprising unique and concurrent visitor counts, page views, bounce rate, average session duration, traffic sources, referring sites, campaign parameters (UTM), pages accessed, visitor country and device type. Country and device type are derived from the IP address and browser identification respectively. Daily unique visitors are determined by hashing the IP address and user agent with a secret value regenerated and deleted each day. No cookies and no persistent identifiers are used, and no profiles are created.
3.3 Connection data
Upon each access to the website, the following data is recorded automatically: IP address, date and time of access, browser and operating system type, and pages requested. This data is processed for the purposes of delivering the website and preventing misuse, and is retained by our hosting provider for 30 days as part of the standard plan.
3.4 Absence of further processing
The website employs no advertising technologies, tracking pixels, third-party analytics services or social media plug-ins, and sets no cookies requiring consent. Any change to the foregoing will be reflected in an updated version of this statement and, where required, made subject to prior consent.
4. Purposes and legal bases
Purpose
Legal basis under the GDPR
Responding to your enquiry, including by telephone, and subsequent correspondence
Art. 6(1)(b); alternatively Art. 6(1)(f)
Delivering the website and preventing misuse
Art. 6(1)(f)
Compiling aggregate website statistics
Art. 6(1)(f)
Retaining records arising from a business relationship
Art. 6(1)(f), in conjunction with retention obligations under Swiss law
Our legitimate interests consist in responding to enquiries addressed to us, maintaining a secure and functioning website, and complying with the retention obligations imposed on us by Swiss law.
Under the FADP, the processing is carried out in accordance with the principles of lawfulness, good faith, proportionality, purpose limitation and transparency, on the basis of data provided to us voluntarily for the purpose of the enquiry.
We do not sell personal data, do not disclose it for advertising purposes, do not send marketing communications to persons who have submitted an enquiry, and do not carry out automated individual decision-making producing legal or similarly significant effects.
5. Recipients
Access within the Company is restricted to the persons responsible for handling enquiries, currently two.
The following processors act on our behalf, under contract and on our instructions:
Processor
Processing performed
Place of processing
Framer B.V.
Website hosting, receipt and transmission of form submissions, website statistics
Netherlands / EEA
Microsoft (Microsoft 365 – Power Automate, SharePoint, Exchange Online)
Transmission, storage of enquiries and email correspondence
Switzerland and/or the EEA, in accordance with the data residency configured for our tenant
Form submissions are transmitted from the website to our Microsoft 365 environment by automated connection.
Disclosure to authorities or third parties occurs only where required by law or necessary for the establishment, exercise or defence of legal claims.
6. Disclosure abroad
Personal data is processed in Switzerland and in the European Economic Area.
Any disclosure to a state not providing an adequate level of protection is effected on the basis of the safeguards provided for in Art. 16 FADP and Chapter V GDPR, in particular the European Commission’s Standard Contractual Clauses as recognised by the Federal Data Protection and Information Commissioner, or, in respect of the United States, the recipient’s certification under the EU–U.S. Data Privacy Framework and its Swiss–U.S. extension. Details of the safeguards applied are available upon request.
7. Retention
Personal data is retained for the period necessary for the purposes set out in section 4. Enquiries not resulting in a business relationship are, as a rule, not retained beyond 24 months from the date of last contact.
Where documents arising from a business relationship form part of our accounting records or accounting vouchers, those records are retained for ten years from the end of the financial year concerned pursuant to Art. 958f of the Swiss Code of Obligations.
8. Security
We implement appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encryption in transit, multi-factor authentication on the systems on which enquiries are stored, and restriction of access to authorised persons.
9. Rights of data subjects
Subject to the conditions and exceptions provided by applicable law, you are entitled to:
obtain access to the personal data concerning you and information as to its processing
obtain rectification of inaccurate or incomplete data
obtain erasure of your data
object to processing based on our legitimate interests and, where the GDPR applies, obtain restriction of processing
obtain the data you have provided in a commonly used electronic format, or its transmission to another controller, where the applicable conditions are met
withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal
Requests are to be addressed to info@nex-alp.ch. We may require verification of your identity. As a rule, requests are processed within 30 days.
You are further entitled to lodge a complaint with a supervisory authority. In Switzerland: Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. Within the EEA: the supervisory authority of your place of residence, place of work or of the alleged infringement.
10. Amendments
We reserve the right to amend this statement. The version published on this page, bearing the date indicated above, is the version in force.