Privacy policy

Privacy policy

This privacy policy describes how Devis24 processes the personal data of users of the Site and of people who contact us via the website devis24.ch (hereinafter “the Site”).

It has been drawn up in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable (for example for people located in the European Economic Area), the General Data Protection Regulation (GDPR).

Last updated: 21 October 2026.

1. Controller

Devis24
Rue du Cardinal-Journet 25, 1217 Meyrin (Geneva), Switzerland
Telephone: 022 558 03 68 · 078 945 60 07
Email: [email protected]

Legal form: sole proprietorship (not entered in the commercial register)
VAT: business not subject to VAT
Contact person for data protection questions: Mohammed Ibrahim ([email protected])

2. What data do we collect?

2.1. Contact and quote forms

When you use the forms on the Site (in particular the /devis and /contact pages, managed with Contact Form 7), we may collect:

  • your name;
  • your email address;
  • your telephone number;
  • the content of your message, as well as the details of your project or worksite (description, any photos, location, type of work, etc.).

2.2. WhatsApp

The Site offers a link to WhatsApp (wa.me/41789456007). If you contact us via WhatsApp, your data (telephone number, messages, any media) are also processed by Meta Platforms in accordance with its own privacy policy. We have no control over the processing carried out by Meta. We invite you to read the terms and privacy policy of WhatsApp / Meta before using this channel.

2.3. Server logs

When you visit the Site, the hosting server (OVHcloud) may automatically record technical data: IP address, date and time of the request, pages viewed, browser type, operating system and any error codes. These data are used for the proper functioning, security and technical diagnosis of the Site.

2.4. Cookies and similar technologies

During a check carried out on 15 October 2026 on devis24.ch, no audience analytics tool (Google Analytics, Matomo, etc.), no advertising pixel and no cookie consent banner were detected. No tracking Set-Cookie header was observed on the home page.

The Site may, however, use cookies or technical mechanisms that are strictly necessary for its operation (for example WordPress sessions, Contact Form 7 form security tokens). These elements are not used to profile you for advertising purposes.

If non-essential cookies (audience measurement, marketing, etc.) were added in the future, this policy would be updated and, where applicable, a consent mechanism would be put in place.

The Site uses Cloudflare (Cloudflare, Inc.) as a delivery and protection network: your requests pass through its servers, and the Turnstile service may check that forms are submitted by a person. Fonts are loaded from Google Fonts (Google LLC), which transmits your IP address to Google.

3. Purposes of processing

We process your data for the following purposes:

  • responding to your requests for quotes, contact or information;
  • preparing an estimate, calling you back or scheduling work;
  • managing the business relationship (quotes, accepted quotes, jobs);
  • ensuring the security, availability and proper technical operation of the Site;
  • complying with our legal obligations, where applicable.

We do not sell your personal data and do not use it for targeted advertising via the Site.

4. Grounds for processing

Depending on the case, processing is based on:

  • your request (contact, quote request) and the resulting pre-contractual measures;
  • the performance of a contract if you entrust us with work;
  • our legitimate interest in securing and operating the Site;
  • compliance with legal obligations, where applicable.

5. Retention period

We keep your data only for as long as necessary for the purposes above:

  • quote / contact requests not followed up: in principle up to 12 months after the last exchange, unless a business file or a legal obligation justifies longer retention;
  • clients / projects: for the duration of the contractual relationship, then for the statutory and accounting retention periods applicable in Switzerland;
  • server logs: limited period, depending on the host’s configuration, generally from a few weeks to a few months.

At the end of these periods, the data are deleted or anonymised, unless there is an obligation to retain them.

6. Recipients

Your data may be accessible to:

  • authorised persons within Devis24, to the extent necessary to process your request;
  • our host OVHcloud (Site hosting and MX Plan email), as technical processor;
  • Meta / WhatsApp, if you choose to contact us via this channel (see section 2.2);
  • Cloudflare (proxy, security, form protection) and Google (Google Fonts), as technical processors;
  • authorities or advisers (lawyer, tax adviser, etc.) where required by law or to assert our rights.

We do not disclose your data to third parties for commercial purposes.

7. Transfers abroad

The Site and email are hosted by OVHcloud (infrastructure located in particular in France / the European Union). Depending on the configuration of the services, data may therefore be processed outside Switzerland, in the European Economic Area.

If you use WhatsApp, your data may be processed by Meta in countries outside Switzerland and the EEA, in accordance with Meta’s policy.

Cloudflare and Google may process data outside Switzerland and the EEA, in particular in the United States.

Where required by law, we ensure that appropriate safeguards are in place (for example adequacy decisions or standard contractual clauses) for the transfers concerned that are under our control.

8. Your rights

In accordance with the nFADP (and the GDPR where applicable), you have in particular the following rights:

  • right of access to your personal data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure (within the limits provided by law);
  • the right to object to certain processing or to request its restriction, where applicable;
  • the right to data portability, where the GDPR applies and the conditions are met.

To exercise your rights, contact us at: [email protected] (or by post at the address given in section 1). We will reply within the statutory time limits, after verifying your identity if necessary.

9. Supervisory authority

If you consider that the processing of your data infringes the applicable legislation, you may lodge a complaint with the:

Federal Data Protection and Information Commissioner (FDPIC / PFPDT)
Feldeggweg 1, 3003 Bern, Switzerland
Website: https://www.edoeb.admin.ch

If the GDPR applies to your situation, you may also contact the data protection authority of your country of residence in the EU / EEA.

10. Security

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration (professional hosting, restricted access, secure forms, etc.). However, as no system is completely infallible, we cannot guarantee absolute security.

11. Changes

We may update this policy to reflect legal, technical or organisational changes. The update date shown at the top of the page is authoritative. We invite you to consult it regularly.

Privacy policy — Devis24 — 21 October 2026.