Back to home

    Privacy Policy

    Introduction and data controller

    ATELIER FENICE PROJECT SÀRL, which operates the AGAMI brand, attaches great importance to the protection of your personal data. This privacy policy tells you which data we process when you visit agami.ch, book an appointment, place an order or fill in the start form for your project, in accordance with the Swiss Federal Act on Data Protection (FADP) and, for visitors from the European Union, the General Data Protection Regulation (GDPR). Data controller: ATELIER FENICE PROJECT SÀRL, Oberer Aareggweg 31, 3004 Bern, Switzerland, UID CHE-449.788.578, [email protected]. Last updated: 30 September 2026.

    Data collected at a glance

    Depending on what you do on the site, we process: • Technical connection data: IP address, date and time, page requested, browser, operating system, referring page • Audience measurement and advertising data, only with your consent: pages viewed, events on the site, cookie identifiers • Appointment data: name, email address, phone number, company, guests, message, time slot, time zone, language • Order data: last name, first name, email address, phone number, company, billing address, chosen package, options and languages, payment method, proof of acceptance of the terms and conditions • Project data: information and files sent through the start form, email exchanges • Data stored in your browser: your cookie choice, the language, and some session information described below We never receive your bank card number.

    Purposes and legal bases

    Your data is processed to: • Display the site and protect it against abuse (legitimate interest, Art. 6(1)(f) GDPR) • Arrange the appointment you request (pre-contractual steps, Art. 6(1)(b) GDPR) • Perform your order, invoice it and collect payment (contract, Art. 6(1)(b) GDPR) • Build your website from the information and files you send us (contract) • Keep our accounts and retain the records required by law (legal obligation, Art. 6(1)(c) GDPR) • Measure the site's audience and the results of our advertising campaigns, only with your consent (consent, Art. 6(1)(a) GDPR) Under Swiss law, this processing complies with the principles of the FADP; the consent you give in the cookie banner counts as consent within the meaning of the FADP and the GDPR.

    Website hosting

    The agami.ch site is hosted by Cloudflare, Inc. (United States) on Cloudflare Pages and delivered through its global network of data centres. • Data concerned: IP address, date and time, page requested, browser, referring page • Purpose: display the site, make it fast and protect it against attacks • Basis: legitimate interest • Duration: these technical logs are kept by Cloudflare under its own rules; we do not use them to identify you. The site's fonts are loaded from Google Fonts (Google). Your browser then sends your IP address to Google to download them, without a cookie.

    Cookie banner

    On your first visit, a banner offers you two choices. • “Accept all” turns on Google Analytics 4 and Google Tag Manager for audience measurement, and the Meta pixel for advertising and measuring our campaigns. • “Decline” turns on no measurement cookie and not the Meta pixel. Your choice is stored in your browser (key agami.consent.v1, with the date of the choice). To change your mind at any time, click “Manage cookies” at the bottom of any page: the banner opens again. If you withdraw your consent, the measurement cookies are deleted and the page reloads. You can also write to us at [email protected].

    Google Analytics 4 and Google Tag Manager

    We use Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited (Ireland) and Google LLC (United States), in Google's “Consent Mode”. • Without your consent: no measurement cookie is set. Google's scripts still load and may send Google cookieless signals (page viewed, time, device type) that do not allow you to be recognised from one visit to the next. • With your consent: the _ga and _ga_* cookies are set and Google measures page views and certain events (for example booking an appointment, arriving on our campaign page, viewing the prices). The same consent allows the advertising signals provided for by Google's Consent Mode. • Purpose: compile traffic statistics and improve the site • Basis: consent for the cookies; legitimate interest for the cookieless signals • Transfer: Google may process this data in the United States • Duration: cookies up to 2 years (Google's default setting); statistics data according to the retention period set in our Google Analytics account Personal links you receive by email (project start link, appointment management link) are removed from the page address before these tools load, so they are not sent to Google. Learn more: https://policies.google.com/privacy

    Meta pixel

    With your consent, our site uses the Meta (Facebook) pixel, provided by Meta Platforms Ireland Ltd, to measure the effectiveness of our advertising on Facebook and Instagram. • Trigger: the pixel only loads after you click “Accept all” in the cookie banner. Without your consent, no data is sent to Meta. • Data concerned: pages visited, actions taken on the site, technical identifiers (IP address, browser, _fbp cookie and, if you come from one of our ads, _fbc) and, where applicable, your Meta identifier if you are logged in to Facebook or Instagram. • Campaign page (/vendre-vos-lots): we report to Meta the display of the page (ViewContent event) and the confirmation of an appointment (Schedule event). To know which ad led to the appointment, the source parameters of the address (utm_source, utm_medium, utm_campaign, utm_content, utm_term and fbclid) are kept in your browser for the length of your visit (key agami.campagne.v1, erased when the tab is closed) and attached to that event, as well as to the corresponding Google Analytics measurement. These events wait for your consent: they are only sent if you accept during the same page visit. • Purpose: measure the results of our advertising campaigns and improve their targeting. • Basis: consent • Transfer: Meta may process this data outside Switzerland and the European Union, in particular in the United States. • Duration: _fbp and _fbc cookies up to 90 days (Meta's default setting) • Withdrawing your consent: click “Manage cookies” at the bottom of any page, then “Decline”; the _fbp and _fbc cookies are deleted and the pixel receives nothing more. You can also write to us at [email protected]. To learn more about how Meta processes data: https://www.facebook.com/privacy/policy

    Booking an appointment

    The site's calendar (home page, order panel, campaign page) lets you book a video call. • Data concerned: name, email address, phone number, company if you provide it, email addresses of the guests you add (five at most), message, subject of the call, chosen time slot, time zone, language, and your order reference if you book from the order panel • Purpose: arrange the appointment, send you the confirmation, the calendar file and a reminder, prepare the call • Basis: pre-contractual steps at your request • Recipients: our management application (see “Order and payment”), which forwards the booking to Cal.com, Inc. (United States). Cal.com keeps our calendar, creates the Google Meet (Google) video conference link and sends the confirmation, the .ics file and the reminder. We receive a booking notice by email, sent through Resend (United States). • Management link: the confirmation email contains a personal link that lets you cancel or move the appointment. Do not share it. It is removed from the page address as soon as it is opened and kept in your browser for the length of the visit. If you add guests, please let them know that their email address is sent to us so that we can send them the invitation.

    Order and payment

    The order panel sends your order to AGAMI's management application. • Data concerned: last name, first name, email address, phone number, company, billing address (street, postcode, town, country), chosen package, options and languages, order language, payment method (card, invoice or appointment), and proof of your acceptance of the terms and conditions: version of the terms, date and time, IP address and browser • Card payment: you enter your card details directly in Stripe's form (Stripe Payments Europe Ltd, Ireland, and Stripe, Inc., United States). We receive neither your card number nor your security code; Stripe only tells us whether the payment succeeded. Stripe also processes technical data about your device to prevent fraud, under its own responsibility: https://stripe.com/privacy • Payment by invoice: we send you the invoice by email, with a QR-bill; the bank transfer goes through your bank and ours. • Purpose: perform the order, issue the invoice, collect payment, start your project • Basis: contract; legal obligation for accounting • Hosting of the management application: Vercel Inc. (United States), run in the Frankfurt region (Germany); Neon database, hosted in Frankfurt (Germany) • Order emails and invoices: sent through Resend (United States)

    Start form and files

    After an order, a personal link gives you access to the start form (/fr/demarrage) and to your project tracking page (/fr/suivi). • Data concerned: details of the project and of the contact person, description of the project and of the units, goals, content and technical information, and the files you upload (logos, photos, plans, documents) • Draft: your answers are saved in our management application as you type, so you can continue later; your browser remembers the current step. • Files: they go directly from your browser to Vercel Blob (Vercel Inc., United States), at an address that cannot be guessed, with our application's authorisation. • Summary: a summary email is sent to you through Resend (United States). • Purpose: build your website • Basis: contract • Personal link: it is enough to open your form. Do not share it. It is removed from the page address as soon as it is opened and kept in your browser for the length of the visit. Email exchanges about your project (messages we send you through Resend and your replies) are linked to your project in our management application.

    Bot protection and abuse limits

    • Cloudflare Turnstile (Cloudflare, Inc., United States) protects the order panel and the calendar against bots. When active, it analyses technical signals from your browser and your IP address, without any advertising cookie, and issues a token that our application checks with Cloudflare. Basis: legitimate interest in preventing abuse. Learn more: https://www.cloudflare.com/privacypolicy/ • Request limits: to prevent abuse (testing of stolen cards, mass bookings), our application counts requests per IP address and, for orders and appointments, per email address. These counters are kept at Upstash, Inc. (Upstash Redis) and erase themselves after 48 hours at most. Basis: legitimate interest.

    Storage in your browser

    The site stores some information in your browser (local storage and session storage), without passing it on to third parties, except for the source parameters described in the “Meta pixel” section: • agami.consent.v1 (local storage): your cookie choice and its date, until you delete it • i18nextLng (local storage): the site language, to welcome you in the right language • agami.demarrage.ecran.v1 (local storage): the step reached in the start form • agami.campagne.v1 (session storage): the source parameters of an ad (utm_* and fbclid) • agami.projet, agami.rdv and agami.rdv.relais (session storage): your personal project or appointment link, once removed from the page address • agami.selection.v1, agami-splash-shown and agami.whatsapp.accroche.v1 (session storage): your selection on the pricing page and the one-time display of certain animations Session storage is erased when the tab is closed. This information is necessary for the site to work and does not require your consent.

    External links, social networks and maps

    • WhatsApp, LinkedIn and Instagram: the site offers plain links. No data is sent to these services until you click; after that, their own privacy policy applies. WhatsApp is provided by WhatsApp Ireland Limited (Meta group). • Maps on the demo sites: the “Bellerive” demo shows a Google Maps (Google) map and the “Villas Rives du Lac” demo an OpenStreetMap map (OpenStreetMap Foundation, United Kingdom). When the map is displayed, your browser sends your IP address to these services. • The contact forms on the demo sites are fictitious: they send no data.

    Recipients and transfers outside Switzerland and the EU

    We do not sell your data. We only entrust it to the providers named in this policy, for the purposes described: • Cloudflare, Inc. (United States): site hosting, bot protection • Google Ireland Limited and Google LLC (Ireland, United States): fonts, audience measurement, Google Meet video conferencing • Meta Platforms Ireland Ltd (Ireland, United States): Meta pixel, with your consent • Stripe Payments Europe Ltd and Stripe, Inc. (Ireland, United States): card payment • Vercel Inc. (United States, run in Frankfurt): management application and uploaded files • Neon (database in Frankfurt, Germany) • Cal.com, Inc. (United States): calendar and appointment emails • Resend (United States): sending emails • Upstash, Inc.: anti-abuse counters Some of these providers are established in the United States or may process data there. These transfers rely on the Swiss-US and EU-US Data Privacy Framework where the recipient is certified under it, or otherwise on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.

    Retention period

    • Appointment and contact data: at most 2 years from the last contact • Order data, invoices and accounting records, including proof of acceptance of the terms and conditions: 10 years, as required by Swiss law (Art. 958f of the Code of Obligations) • Project data and files: for the duration of the project, then at most 2 years from the last contact, unless they are part of the records that must be kept • Anti-abuse counters: 48 hours at most • Cookie choice and language: in your browser, until you delete them; session storage: until the tab is closed • Google and Meta cookies: see the corresponding sections Unless a legal obligation requires otherwise, your personal data is deleted or anonymised at the end of these periods.

    Your rights

    In accordance with applicable law, you have the following rights: • Right of access to your data • Right to rectification • Right to erasure • Right to data portability • Right to object • Right to restriction of processing (GDPR) • Right to withdraw your consent at any time, without affecting processing already carried out To exercise these rights, contact us at: [email protected] You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the data protection authority of your country.

    Security

    We implement appropriate technical and organisational measures to protect your data against unauthorised access, modification, disclosure or destruction: encrypted connection (HTTPS) across the whole site, card data handled by Stripe only, personal links removed from page addresses, access to our management application protected by two-factor authentication.