Website — Privacy policy
Last updated: June 2026. This notice covers the marketing website exosites.ch only. It describes our current data practices and is not legal advice; we recommend independent counsel review for your specific situation. Processing by the ExoSites File Manager application is described under “App privacy” in the footer.
Controller and scope
The data controller for personal data collected through exosites.ch is Exosites, operating from Switzerland. For privacy questions about this Site: studio@exosites.com. This policy describes how we process personal data when you browse the Site, use our contact form, or use the scheduling and booking features. It does not govern the ExoSites File Manager desktop or web product; that processing is covered by our separate app privacy notice.
Categories of data we process
We may process: (a) technical and usage data when you load pages—such as IP address, browser type, device type, approximate location derived from IP, referrer, date/time, and pages viewed; (b) identifiers and content you submit via the contact form (for example name, email address, company, message text); (c) booking and scheduling data you provide on the Schedule page—such as name, email, phone number, optional message, and answers to additional project questions we may ask before confirming a slot; (d) meeting-related metadata when a booking is created through our infrastructure, including integration with Infomaniak’s KMeet service (for example meeting room identifiers and join links). Our current integration configures meetings without enabling recording by default through that API; Infomaniak’s own terms and privacy notice also apply to their services. (e) When you accept analytics cookies in our cookie banner, we use Google Analytics 4 (measurement ID G-D2YDMR1KN7) and Google Ads (conversion tag AW-385988450): pseudonymous page views, events, and ad measurement via Google tags loaded from googletagmanager.com. These tags do not load until you consent. (f) Preferences stored in your browser (local storage)—including your cookie choice, selected theme, and language—so the Site can remember settings between visits. Typography files (web fonts) are served from exosites.ch with our other static assets; they do not call Google Fonts.
Purposes and legal bases
We process data to: operate and secure the Site; respond to contact messages; arrange and confirm meetings you request; measure aggregate interest in our pages and services when you have accepted analytics cookies; improve content and UX; comply with legal obligations; and defend legal claims. Where GDPR, UK GDPR, or the Swiss Federal Act on Data Protection applies, we rely as appropriate on: performance of a contract or steps prior to a contract (for example handling a booking you request); legitimate interests (running a professional website, IT security, serving self-hosted fonts and strictly necessary storage); and consent where required—for analytics cookies and similar optional technologies, which we only activate after you choose “Accept all” or enable Analytics in the cookie preferences.
Recipients and processors
We use service providers who process data on our instructions, including: Infomaniak (Switzerland) for KMeet meeting creation and related calendar operations connected to bookings; email delivery through our mail infrastructure (SMTP-compatible providers configured on our servers); and Google (Google Analytics 4 and Google Ads tags only when you consent to analytics cookies). Hosting and CDN providers that serve the Site—including self-hosted font files—may process technical data in their logs. We do not sell your personal data. We may disclose information if required by law or to protect rights, safety, and integrity.
Cookies and similar technologies
We use cookies and similar technologies (including local storage) as follows. Necessary: preferences required for core functionality—your cookie consent record, theme, and language—stored locally in your browser; these are always active. Analytics (optional): Google Analytics 4 and Google Ads tags load only after you accept analytics in our cookie banner or in Cookie preferences. Until then, no Google analytics or ads tags are loaded. Google may set or read cookies or identifiers according to Google’s documentation. You can change or withdraw consent at any time via the “Cookies” link in the site footer, which reopens the preference panel. Rejecting analytics reloads the page so any active Google script is removed. You can also control cookies through your browser; blocking necessary storage may affect theme, language, or consent memory.
Retention
We retain contact submissions and booking records only as long as necessary to fulfil the purpose for which they were collected—typically to handle your request, manage the meeting, send related communications, and maintain short internal records for follow-up, accounting, or legal compliance—then delete or anonymise them when no longer needed. Server and security logs may be kept for a limited period compatible with security monitoring and troubleshooting. Analytics retention periods follow the settings in our analytics configuration where applicable.
Security and international transfers
We implement appropriate technical and organisational measures having regard to the risk. No method of transmission or storage is completely secure. Where personal data is transferred outside Switzerland or the EEA, we use appropriate safeguards where required by law (for example standard contractual clauses approved by the European Commission or Swiss adaptations, or reliance on adequacy decisions). Providers such as Google may process data in multiple countries; their documentation describes their global infrastructure and safeguards.
Your rights
Subject to applicable law, you may have the right to access, rectify, erase, restrict, or object to certain processing, to withdraw consent where processing is based on consent, and to data portability. You may lodge a complaint with a supervisory authority—for example the Swiss Federal Data Protection and Information Commissioner (FDPIC) or an EU/UK authority depending on your residence and our processing. To exercise rights regarding exosites.ch, email studio@exosites.com. For the File Manager app, see “App privacy” and in-product settings.
Automated decision-making
We do not use solely automated decision-making on the Site that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR. If that changes, we will update this policy and provide information about logic, significance, and your rights.
Children and updates to this policy
The Site is directed at businesses and adults. We do not knowingly collect personal data from children under 16 through the Site. If you believe we have done so, contact us and we will take appropriate steps. We may update this policy; the date at the top will change. Material changes may be highlighted on the Site or communicated where appropriate.