Privacy policy

Our commitment

Lambert Consulting SA (“we”) publishes Fabric5. This policy explains which personal data we process when you visit fabric5.ch or request a quote, why we process it and what your rights are.

It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, on the EU General Data Protection Regulation (GDPR).

Data controller

Lambert Consulting SA, Avenue des Baumettes 9, 1020 Renens, Switzerland. UID: CHE-109.548.345.

For any question about your data: offre@fabric5.ch. For a non-disclosure agreement: nda@fabric5.ch.

Data we process

Quote request: name, company, business email, phone number if you provide it, planned number of users, description of your needs, features chosen on the website, and the requirements document or download link you send us.

Non-disclosure agreement (NDA): the messages and documents you send us by email.

Website visits: our host’s technical logs (IP address, date and time, page requested, browser type), used for security.

The “Describe your business” assistant and the configurator run entirely in your browser: what you type there is neither sent nor stored.

If your request contains data about other people (employees, customers), make sure you are entitled to send it to us and limit it to what is necessary.

We do not seek to receive sensitive data. If your requirements document contains any, please anonymise it or ask us for a non-disclosure agreement first.

Why we process it

To prepare and send you a quote, then discuss it with you (pre-contractual measures).

To keep the website secure and prevent abuse, especially automated submissions (legitimate interest).

To meet our legal obligations, for example accounting obligations if a contract is concluded.

Your data is never sold, rented or used for advertising or profiling. We do not make any automated individual decisions within the meaning of Art. 21 FADP.

Who has access

Infomaniak Network SA in Geneva processes your data on our behalf: it hosts the website and our email, in Switzerland.

Our processors are bound by confidentiality and security obligations. We do not share your data with any other third party unless the law requires us to.

Transfers abroad

Your data is processed in Switzerland and is not transferred abroad. Should this change, any transfer would comply with the FADP, to a country with an adequate level of protection or with recognised safeguards such as standard contractual clauses.

How long

Request with no follow-up: deleted, together with your requirements document, no later than 12 months after our last exchange, including from our mailbox; backups then disappear according to their rotation cycle.

If a contract is concluded: kept for the duration of the contractual relationship, then for as long as needed to defend our rights, in principle until the limitation periods expire. Accounting books and records (accepted quotes, invoices) are kept for ten years from the end of the financial year (Art. 958f Swiss Code of Obligations).

Technical logs: our form’s log contains neither your IP address nor the content of your request and is deleted after 90 days; the IP address is only kept as an encrypted fingerprint for 24 hours, to limit abusive submissions; our host’s logs are kept according to its own retention periods, for security.

The website keeps no copy of your file: it is sent to us by email, then deleted from the server.

Security

Encrypted connection (HTTPS), check of the actual type of files received, limit on the number of submissions, bot trap, strict security headers, and application logs without IP addresses or request content. We review these measures regularly.

Cookies and analytics

This website uses no cookies and no analytics or advertising tools. Fonts and icons are hosted on our own server: your visit sends no data to Google or any other third party.

Our customers’ data

In the software we build and host for our customers, each customer remains responsible for its data. We then act as a processor, under a data processing agreement concluded with the customer (Art. 9 FADP, Art. 28 GDPR).

Your rights

You can request access to your data, its correction or deletion, its delivery in a common electronic format where the conditions of Art. 28 FADP are met, and object to processing, by writing to offre@fabric5.ch. As a rule, we reply within 30 days (Art. 25(7) FADP).

You can also contact the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the data protection authority of your country.

Changes

We may update this policy to reflect changes in the law or in our services. The current version is always published on this page, with its date.