Privacy policy

1 · Data controller

2 · Data collected

• Identity and contact details (name, email, phone, company, message)
• Mandate brief and field study forms
• Messages with SIMOH (public mandate chat)
• Technical data (IP, browser, security logs)

3 · Purposes

• Respond to requests and open a mandate file
• Qualify scope (paths A · B · C) and atelier follow-up
• Platform security
• Contractual relationship when a mandate is signed

4 · Legal basis (FADP / GDPR)

• Consent — forms and chat
• Contract / pre-contract — mandate follow-up
• Legitimate interest — security

5 · Retention

Briefs and exchanges are kept for request handling, then limited archive for mandate follow-up and legal obligations. Erasure may be requested when no mandate is engaged.

6 · Hosting & processors

Web hosting: professional provider in Europe. AI (SIMOH): secure HTTPS API — no sale of conversations for advertising.

7 · Your rights

Access, rectification, erasure, restriction, objection, portability: dpo@bbs-geneve.com (within 30 days). Complaint to the FDPIC (Switzerland).

8 · SIMOH

SIMOH prepares and orients mandate requests. No binding automated decisions · human BBS validation for contractual scope.

9 · Cookies

Session cookies for private admin only. No advertising cookies on the public BBS Core front.

10 · Related documents