Privacy policy

BeGenerous Digital Sàrl
Chemin du Chalet-de-Praroman 4
1000 Lausanne 26, VD · Switzerland
IDE: CHE-473.966.024

Contact for any question about your data: greg@begenerous.digital

We only collect the data strictly necessary to provide our services and to manage the business relationship:

• Contact form data: first name, last name, email, company (optional), message.
• Appointment data: collected via Cal.com when booking a discovery call (name, email, chosen slot, notes).
• Browsing data: anonymized IP address, user-agent, visited pages, session duration, via Google Analytics 4 and Vercel Analytics (see Cookies section).
• Communication data: email or phone exchanges as part of a project or commercial request.

Each processing operation relies on an explicit legal basis under art. 31 FADP / art. 6 GDPR:

• Respond to your requests — basis: performance of pre-contractual measures / legitimate interest.
• Manage the client relationship (quotes, invoicing, project follow-up) — basis: performance of the contract.
• Measure site audience (aggregated analytics) — basis: consent (cookie banner).
• Comply with legal obligations (accounting, record retention) — basis: legal obligation.

• Unconverted contact data: 24 months after the last exchange.
• Active client data: for the entire duration of the relationship + 10 years (Swiss accounting obligation, art. 958f CO).
• Analytics browsing data: 14 months (GA4 default setting).
• Cookie consent: 6 months, then the banner reappears.

We never sell or rent your data. The following processors have limited access to certain data to provide their services, under contracts compliant with FADP / GDPR:

• Vercel Inc. (USA / Frankfurt EU) — hosting, edge network.
• Google Ireland Ltd. (Ireland / Analytics) — audience measurement, via Google Tag Manager.
• Google LLC (USA) — Gmail / Google Workspace for transactional emails.
• Cal.com Inc. (Germany for the EU) — discovery call booking.

Some of our processors (Vercel, Google) are based in the USA. These transfers are covered by:

• The Swiss-US Data Privacy Framework (in force since September 15, 2024) for Switzerland.
• The EU-US Data Privacy Framework for EU visitors.
• Standard contractual clauses from the European Commission as a complement.

Where possible, we favor hosting within the European Union (Frankfurt — fra1 Vercel).

The site uses two categories of cookies:

• Essential cookies — strictly necessary for site operation (consent preferences, security). No consent required.
• Measurement cookies — Google Analytics 4 (via Google Tag Manager) and Vercel Analytics, to understand site usage and improve the experience. Explicit consent required via the banner displayed on your first visit.

You can change your consent at any time by clearing your cookies from the https://begenerous.digital domain — the banner will appear again.

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, alteration or disclosure:

• HTTPS encryption (TLS 1.3) across the entire site.
• Strict security headers (HSTS, CSP, Permissions-Policy).
• Two-factor authentication on all internal tools.
• Data access limited to strictly necessary personnel.

In accordance with FADP and GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the data we hold about you.
• Right of rectification: correct inaccurate data.
• Right to erasure("right to be forgotten"): subject to legal obligations.
• Right to object to certain processing (marketing, profiling).
• Right to data portability of the data you have provided.
• Right to withdraw consent at any time for processing based on consent.

To exercise any of these rights, write to greg@begenerous.digital. We reply within a maximum of 30 days.

As a Swiss-law company, BeGenerous Digital Sàrl is directly subject to the new Federal Act on Data Protection (FADP, RS 235.1). In addition to the rights above:

• We do not make any automated individual decision within the meaning of art. 21 FADP without human intervention.
• We do not carry out any high-risk profiling within the meaning of art. 5 let. g FADP.
• In case of a security breach resulting in high risk, we notify the Federal Data Protection and Information Commissioner (FDPIC) as soon as possible.
• You may file a complaint with the FDPIC: www.edoeb.admin.ch.

We may modify this policy to reflect legal or functional changes to the site. Any substantial change will be signaled on the home page or by email to the relevant clients. The last-updated date appears at the top of this page.

For any question, request to exercise your rights, or complaint:

• greg@begenerous.digital
• +41 79 409 38 00