Privacy policy

1. Controller

info@mdsherpa.ch

+41 79 547 52 70

+41 79 740 41 66

2. Scope

The policy covers in particular:

• website browsing
• forms
• appointment booking
• emails and calls
• commercial requests
• usage statistics
• behaviour analysis if consent
• conversion measurement if consent
• advertising and remarketing if consent

3. Data that may be processed

Depending on usage:

• name
• first name
• company
• email
• phone
• message content
• information relating to a project
• appointments
• commercial relationship data
• technical data
• website interaction data
• conversion data when the corresponding tools are authorised

4. Technical data

May in particular be generated:

• IP address
• date / time
• page viewed
• referrer
• browser
• operating system
• device
• language
• technical connection data
• logs required for security

Depending on consent: events, interactions, conversions and journey data.

5. Forms and appointments

MD Sherpa uses LeadConnector for certain form, communication and appointment booking functions.

The data provided is processed to respond to requests and organise exchanges. Only transmit the necessary information.

6. Commercial relationship

The data may be used to:

• respond to requests
• prepare an exchange
• prepare an offer
• organise a service
• ensure follow-up
• manage the commercial relationship
• comply with legal and accounting obligations
• defend rights

7. Purposes

The data may be processed in order to:

• provide and secure the website
• respond to requests
• manage appointments
• deliver services
• provide support
• improve the website
• measure audience if authorised
• analyse journeys if authorised
• measure campaigns if authorised
• attribute conversions if authorised
• create audiences / remarketing if authorised
• prevent abuse
• comply with legal obligations

8. Legal basis

Under Swiss law, MD Sherpa Sàrl processes data in accordance with the applicable principles of the Federal Act on Data Protection.

When the GDPR applies to a specific processing operation, the processing may in particular be based, depending on circumstances, on:

• consent
• pre-contractual measures
• performance of a contract
• a legal obligation
• legitimate interests

9. Google Tag Manager

Google Tag Manager may be used to manage technical, analytics and marketing tags.

Optional tags must respect the consent preferences.

10. Google Analytics 4

With Analytics consent, GA4 may in particular process:

• pages viewed
• events
• navigation
• device
• browser
• traffic source
• approximate location
• configured conversions

GA4 must remain disabled before analytics consent.

11. Google Ads

With Marketing consent, Google Ads may be used to:

• measure conversions
• evaluate campaign effectiveness
• attribute certain actions
• create audiences
• remarketing if activated

12. Meta Pixel

With Marketing consent, Meta Pixel may be used to:

• measure campaigns
• analyse certain conversions
• create audiences
• remarketing if activated

Meta Pixel must not be loaded before Marketing consent.

13. Microsoft Clarity

With Analytics consent, Clarity may be used to better understand interactions:

• clicks
• scroll
• journeys
• heatmaps
• session recordings
• technical information

Masking of sensitive data is configured. No email, phone, name or form content is ever sent as an identifier.

14. LeadConnector

LeadConnector provides the main infrastructure of the website and certain form, appointment and communication functions.

The data necessary for the operation of these features may be processed by this provider.

15. ReputationHub

The website may display reviews via ReputationHub.

The widget is loaded from a third-party domain and may set cookies or use local storage to display reviews. The required consent category depends on its effective configuration, detailed in the cookie policy.

16. Cookies and consent

Necessary cookies are used for operation and to remember the privacy choice.

The optional categories are:

• Features
• Analytics
• Marketing

They are disabled by default.

You can accept, reject, customise or change your choice later. The details are in the cookie policy.

17. Providers

Climbee SA may act as a technical service provider for MD Sherpa Sàrl for development, maintenance, integrations and certain operations relating to tracking and website infrastructure. In this context, Climbee SA may access the data strictly necessary to perform its tasks and acts only according to the instructions defined by MD Sherpa Sàrl. MD Sherpa Sàrl remains responsible for the processing carried out within the framework of the website.

MD Sherpa Sàrl does not sell the personal data collected through its website.

When MD Sherpa Sàrl entrusts certain processing operations to a provider, it ensures that the data is processed only within the scope of the relevant services and with appropriate protective measures.

18. Processing abroad

Some providers may process data in several countries, in particular in Switzerland, the EEA or the United States.

Where required, appropriate safeguards must be used in accordance with applicable law.

19. Retention

Data is retained for the duration reasonably necessary:

• processing a request
• organising the appointment
• commercial relationship
• accounting or legal obligations
• defence of rights

Data that has become unnecessary is deleted, anonymised or archived where appropriate.

20. Security

MD Sherpa implements reasonable technical and organisational measures to protect the data.

No infrastructure can guarantee absolute security.

21. Profiling

Marketing tools may allow the creation of audiences when the user consents.

The website must not use these tools to automatically make decisions producing significant legal effects for a visitor.

22. Rights

Subject to legal conditions, individuals may in particular request:

• access
• rectification
• erasure
• restriction
• objection
• portability where applicable
• withdrawal of consent for the future

Requests: info@mdsherpa.ch

23. Competent authority

The Federal Data Protection and Information Commissioner is the competent authority in Switzerland.

When European law applies, the possibility to contact the competent supervisory authority is also open.

24. Changes

This policy may be adapted when the tools, services or applicable rules change.