Last updated: 16 September 2026
This policy explains how personal data is processed when you visit our public website. It does not apply to the use of our SaaS platform, which is available exclusively to contracted business clients and is governed by separate agreements. Because this website addresses users in the European Economic Area, we apply the General Data Protection Regulation (GDPR); Swiss data protection law (DSG) applies in addition. In case of doubt, the German version prevails.
Decamerone Sàrl
Rue Rothschild 58
1202 Geneva, Switzerland
Email: info@decamerone.ch
For any data protection question and to exercise your rights, a message to this address is sufficient. Further company details are in our legal notice.
As we are established in Switzerland but address this offering to people in the European Union as well, we have designated a representative in the Union pursuant to Art. 27 GDPR:
Dr. Peter Duesing
Widenmayerstraße 39
80538 Munich
Germany
Email: info@decamerone.ch
On any question concerning the processing of your personal data you may contact either us or our representative; supervisory authorities may also address the representative directly. The designation is without prejudice to your rights and to any claims against us as the controller.
Our website is hosted by Infomaniak Network SA (Geneva, Switzerland). Each request causes the server to process technically necessary connection data:
Purposes: delivering the page, keeping it running reliably, diagnosing and fixing technical faults, and detecting and preventing attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website. The processing is technically unavoidable, as no connection can be established without transmitting the IP address. We do not build usage profiles from this data and do not combine it with other sources.
Recipients: Infomaniak Network SA as processor (section 4). No further disclosure takes place unless we are legally required to do so.
Retention: The log files are rotated daily by the hosting provider and then deleted automatically: access logs after no more than 32 days, error logs after seven days. We keep no copies of our own and access the logs only in the event of faults or security incidents. If a security incident remains to be investigated, the entries concerned are kept until the investigation is complete and deleted afterwards.
The website is operated by Infomaniak Network SA, Geneva, Switzerland. Infomaniak processes the data listed in section 3 solely on our instructions and for the purposes stated there; processing and storage take place in data centres in Switzerland. Infomaniak therefore acts as a processor, and a data processing agreement pursuant to Art. 28(3) GDPR is in place with Infomaniak.
From a GDPR perspective Switzerland is a third country, but one covered by an adequacy decision of the European Commission: the Swiss level of data protection is recognised as equivalent, so this transfer requires no additional safeguards under Art. 46 GDPR.
The typeface we use (Inter) is stored as a file on our own server and loaded from there, as are all images, videos and scripts.
We embed no Google Fonts and no external content delivery networks. Accordingly, no connection is made to third-party servers and your IP address is not disclosed to any third party in this context.
In the “Press & talks” section we refer to a post published on LinkedIn. That post is not loaded automatically. You first see only a notice with a button; the content is retrieved from LinkedIn only once you press it. Until then, LinkedIn learns nothing about your visit.
If you load the post, your browser transmits to LinkedIn in particular your IP address, technical details of your browser and operating system, and the fact that you visited this page. LinkedIn may set cookies in the process. If you are logged in to LinkedIn at the same time, LinkedIn can attribute the visit to your account. We have no influence over the scope or purpose of that processing.
Legal basis: Art. 6(1)(a) GDPR — the consent you give by pressing the button. Consent is voluntary; the page is fully usable without it.
Withdrawal: We do not store your consent. It applies to the individual page view only and lapses when the page is reloaded, after which the post is again loaded only on request. Any rights regarding data already transmitted can be asserted directly against LinkedIn.
Recipients: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, and affiliated companies of the Microsoft group, including LinkedIn Corporation in the USA.
Transfers to third countries: A transfer to the USA is possible. According to its own statements, LinkedIn relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework and, in addition, on standard contractual clauses under Art. 46(2)(c) GDPR. Details and your rights vis-à-vis LinkedIn are set out in LinkedIn’s privacy policy.
Alternatively you can view the post directly on LinkedIn without loading it on our page — the link is next to the button.
This website contains links to third-party content such as trade articles and LinkedIn profiles. These are plain links: no data is transmitted until you click one and thereby open the third-party service. The respective providers are responsible for any processing there.
You can reach us through the form at the end of the home page or directly by email. Both routes lead to the same mailbox.
The form requires only two entries: your email address, so that we can reply, and your message. Giving your name is optional. There are no further fields and no registration is required. In addition, the server processes the technical connection data described in section 3.
The form submits to our own server only. No external form service is involved and no captcha is used — a captcha would transfer data to third parties.
We process your details in order to answer your enquiry. Where it concerns the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR, our legitimate interest being to respond to enquiries.
To protect the form against mass abuse we limit submissions to five per sender per hour. For this purpose your IP address is not stored; instead we store a shortened, non-reversible hash of it with a daily changing addition, together with the time. These entries are held outside the public directory and discarded after one hour. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest being to keep the form functional.
Recipients: our hosting and email provider Infomaniak Network SA (Switzerland) as processor. Delivery runs via their mail servers in Switzerland; no third party is involved.
Retention: We delete the correspondence once your enquiry has been dealt with conclusively and no further questions are to be expected. Where commercial or tax law retention obligations apply — in Switzerland generally ten years — we keep it until those periods expire and restrict processing to meeting those obligations in the meantime. The contents of the form are not stored in a database, only delivered as email.
This website involves no automated individual decision-making and no profiling within the meaning of Art. 22 GDPR.
The platform itself is available exclusively to contracted business clients. Data processing there is not covered by this policy but by the respective contracts, including the data processing agreements.
Under the GDPR you have the following rights against us:
A message to info@decamerone.ch is sufficient to exercise these rights, free of charge.
Right to lodge a complaint: under Art. 77 GDPR you may lodge a complaint with a data protection supervisory authority — that of your habitual residence, your place of work, or the place of the alleged infringement. A list of the German authorities is maintained by the Federal Commissioner for Data Protection and Freedom of Information. Independently of this, under Swiss law you may contact the Federal Data Protection and Information Commissioner (FDPIC).
We update this policy when the website or the legal situation changes. The version published here is the one that applies; its date is shown at the top of the page.
Decamerone