Privacy.

This page is the information required by article 19 of the Swiss Federal Act on Data Protection (FADP, RS 235.1) when this site collects a contact.

Controller

SGDL Innovation SA, a Swiss corporation, Avenue Eugène-Pittard 56, 1206 Geneva, Switzerland. Enterprise identification number CHE-378.003.003. For any request about your data: contact@sgdl.com.

What the forms ask, and why

The contact form asks for your name, organization, role, email, subject and message, so that we can answer that message. The data is not used to build a mailing list and is not used for any other purpose.

The investor form asks for your name, organization, role, email and the purpose of the request, so that we can examine a request for access under a confidentiality agreement. Access, once granted, is individual and logged.

A request for an SGDL signature asks for your name, organization, email and the purpose of the request, so that we can examine it and, if it is accepted, send the signature to that address.

Data recorded without being typed

With each submission the server also records the IP address, the browser agent, the date and time, and the language of the page. They are not typed into the form. They serve to limit abuse — five submissions in ten minutes — and to secure the site. The IP address is kept with the message and is not shown in the contact follow-up.

The host connection log can contain the same data, for the operation and the security of the site. The visit report uses a separate journal, which does not contain IP addresses.

Session

After an SGDL signature, the site sets one session cookie, sgdl_com. It is HttpOnly, it identifies the signed session, and it expires after eight hours. The session stores the name and the email returned by the signature, so that the open session can be recognized. The private key does not pass through this site.

Two short-lived cookies, sgdl_com_state and sgdl_next, last fifteen minutes and only carry the signature exchange. The site sets no analytics cookie and no advertising tracker. No decision about a message is taken by an automated system alone.

Recipients

The people at SGDL Innovation SA who answer the message. Messages sent from the site are delivered to the mailbox ops@sgdl.com. The address contact@sgdl.com is an alias of that mailbox, and a copy goes to the person who follows these messages. The site and the journal are hosted in Switzerland by Infomaniak Network SA, Geneva, which acts as processor. Delivery uses Infomaniak mail, in Switzerland. An acknowledgement is sent to the address you gave.

The data is not sold, not passed to partners, and not sent by us to a foreign state. If your mailbox is hosted abroad, the acknowledgement follows the path of the address you indicated (article 17 of the FADP).

How long

A message from a form is kept while the exchange is open. Closing it erases the message and the IP address stored with it. If it is not closed, both are erased twelve months after the message was sent. A submission caught by the spam trap is erased after seven days. A document that a legal duty requires us to keep is kept for that period. The session cookies expire with the session.

The host connection log, which can contain the IP address, is kept for thirty days, for the operation and the security of the site. The visit journal does not contain IP addresses and is kept for ninety days.

Your rights

You may ask whether we process data about you and receive that information free of charge, in principle within thirty days (article 25 of the FADP). You may ask for inaccurate data to be corrected (article 32). You may ask for erasure when the data is no longer needed. Where article 28 applies, you may ask for a copy in a common electronic format. Write to contact@sgdl.com.

You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.