Privacypolicy.

Preamble

Duo Guardians Sàrl is committed to protecting the privacy and personal data of its clients, prospects and visitors to duoguardians.ch. This policy describes our practices for data collection, processing and protection, in compliance with the revised Swiss Federal Data Protection Act (FADP), in force since 1 September 2023.

It covers the duoguardians.ch website and our missions. Data from the DuoTrack application (customer accounts, vehicle positions, notifications) is covered by the DuoTrack privacy policy.

1. Data controller

Duo Guardians Sàrl, Rue du Bourg 40, 1816 Chailly/Montreux, Switzerland. Contact for any data-related question: info@duoguardians.ch.

2. Data collected

2.1 Data you provide

When you fill in the contact form, book a meeting via Calendly or write to us by email, we collect:

• First name, last name
• Email address
• Phone number
• Subject and content of your message
• Any element you voluntarily share in the context of a mission request
• For a DuoTrack installation request: the vehicle concerned and, if you provide them, the year, the plate, the number of vehicles, the canton, the preferred plan and a comment

2.2 Technical data

During your visit, we automatically collect:

• IP address (anonymized for statistics)
• Browser type and operating system
• Pages visited, time on site, traffic source
• Performance data (Core Web Vitals)
• Where your visit comes from: the ad or campaign that brought you, the search keyword and the Google click identifier. These are kept for 90 days in your browser and attached to your DuoTrack request if you send one. If you decline cookies, the click identifier is not kept.

3. Cookies and tracking technologies

The site uses three categories of cookies and browser storage. On your first visit, a banner lets you accept or decline.

• Essential: required for the site to work (language preference, remembering your cookie choice). Always on.
• Audience and request measurement: Google Tag Manager, Google Analytics 4 and Google Ads conversion tracking. They tell us how many people visit the site and how many requests come from our ads. They are on from your arrival and you can decline them at any time. When you send a form, the email address and phone number you entered are sent to Google in an irreversibly encrypted form (hashing), only to link the request to the ad that brought it.
• Targeted advertising: Google Ads remarketing lists, to show you our ads on other sites. Only if you click "Accept".

If you click "Decline", Google cookies already set are deleted, the page reloads and nothing is sent to Google any more. You can change your mind at any time: Manage cookies.

Measurement data is processed by Google Ireland Ltd. and Google LLC (USA), certified under the Swiss-U.S. Data Privacy Framework. We use no other advertising network (no LinkedIn, Meta, TikTok, etc.) and we do not sell your data.

4. Processing purposes

Data collected is used exclusively to:

1. Respond to your requests (form, email, booking)
2. Conduct an investigation or security mission under a signed mandate
3. Measure site audience and improve user experience
4. Know which ads and campaigns bring requests, and with your consent, show you our ads on other sites
5. Comply with legal obligations (accounting retention, mandate archives, judicial requisitions)

5. Legal basis for processing

• Consent (contact form, targeted advertising)
• Contract execution (signed investigation mandate)
• Legitimate interest (measuring audience and the requests our ads bring, which you can decline; site security)
• Legal obligation (accounting retention, mandate archives, requisitions)

6. Retention period

• Form requests without follow-up: 6 months
• Client files (executed mandates): 10 years after closure (Swiss legal accounting retention period)
• GA4 analytical data: 14 months
• Google Ads measurement cookies and visit source: 90 days
• Essential cookies: session duration or 12 months maximum

7. Hosting and data location

• Website: hosted by Vercel Inc. (USA), servers in Frankfurt (Germany) for EU/CH data residency.
• Operational case data: Swiss servers exclusively, no non-Swiss subcontracting.
• info@duoguardians.ch mailbox: Google Workspace (Google Ireland Ltd., Dublin — data stored within the EU).
• Outgoing transactional emails: Resend, Inc. (USA) via the mail.duoguardians.ch subdomain — used only for form notifications and automated confirmations.
• Calendly: US provider, data limited to booking information (name, email, time slot).
• WhatsApp: Meta Platforms, Inc. (USA). If you choose this contact channel, your number and message content transit through WhatsApp servers (end-to-end encrypted). No export is made to other systems.

8. Security

We implement appropriate technical and organizational measures to protect your data:

• TLS 1.3 encryption on all site/server communications
• Access to client files limited to the two founders and mandated investigators
• Encrypted storage of operational data, two-factor authentication
• Secure destruction of files at the end of the retention period

9. Your rights

Under the revised FADP, you have the following rights:

1. Right of access: obtain a copy of the data we hold about you
2. Right of rectification: correct inaccurate data
3. Right to erasure: request deletion (except where legal retention applies)
4. Right to object to processing based on legitimate interest
5. Right to portability in a structured, readable format
6. Right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch

To exercise your rights, contact us: info@duoguardians.ch or +41 79 552 08 36. We will respond within 30 days.

10. Changes to this policy

This policy may be modified at any time to reflect changes in our practices or legislation. Any modification will be published on this page with a new update date. We invite you to consult this page regularly.

Last updated · 8 October 2026