Privacy policy

The controller is e-devis.ch, operated by MS Contractor SA, Rue de la Servette 88, 1202 Geneva, Switzerland, UID number CHE-218.172.825 (revFADP art. 5 let. j). For a question about your data, to exercise your rights or to report a problem: contact@e-devis.ch or the Contact form on the site. Write “data protection” in the subject line and your message is handled as a priority. No data protection adviser has been appointed, which the law does not require of a company of this size: your requests reach management directly.

Client contact details: first name and surname, address, postcode and locality, e-mail address (revFADP art. 5 let. a). Address of the work: the address of the site, its postcode, locality and canton, together with whether you are the owner or authorised to have the work carried out. Description and attachments: the text you write, the preferred start date and up to five files (photos, plans, PDF documents). Photos are re-encoded on arrival and the hidden information they carry — place, device, date — is removed. Company account data: company name, UID number, address, website, trades performed, service postcodes, and a password stored in an encrypted form that cannot be reversed. Payment data: amount, date, subject of the purchase, receipts and movements of the prepaid balance; no card number ever reaches e-devis.ch. Technical data: your IP address is read when a form is submitted, solely to limit how many submissions come from one connection; it is not kept in clear text, only an unreadable short-lived fingerprint remains. Please avoid putting sensitive data within the meaning of revFADP art. 5 let. c — health, religion, opinions, debt proceedings — in your description or attachments: they are not needed to obtain a quote.

To put you in touch with companies able to carry out your work: that is the purpose of the site. To check every request before passing it on: credibility, consistency, no contact details in the summary sent to companies. To manage company accounts, their prepaid balance, their purchases and their receipts. To issue invoices and keep the accounts. To keep the service secure: preventing mass submissions, false requests and unauthorised access attempts. To send you advice and offers from e-devis.ch by e-mail, only if you ticked the box provided for it. These are the purposes stated here and we do not add others silently (revFADP art. 6 para. 3). Your data serves nothing else: no resale, no rental, no transfer to data brokers or advertising networks.

Performance of the contract and pre-contractual steps: handling your request, running a company account, selling access to a request (revFADP art. 31 para. 2 let. a; GDPR art. 6 para. 1 let. b). Consent: sending advice and offers by e-mail, which you may withdraw at any time (revFADP art. 6 para. 6; Unfair Competition Act art. 3 para. 1 let. o; GDPR art. 6 para. 1 let. a). Overriding interest: the security of the service and the prevention of abuse (revFADP art. 31 para. 1; GDPR art. 6 para. 1 let. f). Legal obligation: keeping accounting records for ten years (Code of Obligations art. 958f; GDPR art. 6 para. 1 let. c). Under Swiss law lawful processing does not always require consent; we state the basis of each processing anyway, so that it can be checked.

The registered companies, selected by trade and by postcode. This is the heart of the service, and you accept it when you submit your request, by ticking a box provided for that purpose. Here is exactly how it works. Your request is first checked by our team; nothing goes out before that. Companies that perform the trade requested and that have declared your postcode first receive an anonymous summary, written by us, with no name, address, e-mail or link. Your name, address, e-mail and attachments are released only to a company that buys access to your request. Several companies may buy it; they then contact you directly and become responsible in turn for the data they received. Next, our processors, who act on our instructions and under contract (revFADP art. 9): Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), for hosting the site, the database and the attachments and for sending e-mail; Stripe, for online payment by card and digital wallet. Finally an authority, but only where Swiss law obliges us. There is no other recipient.

On the request form two separate boxes concern your data, and neither is ticked in advance. The first accepts passing your request and your contact details to the companies concerned; without it the request cannot be handled. The second, optional, accepts receiving advice and offers by e-mail; refusing it changes nothing about how your request is handled. The exact text shown on screen at the moment you tick the box is stored with your request, together with the date, the time and a version number. The same mechanism applies to a company registration. You can therefore know, months later, word for word what you accepted. To withdraw consent to marketing: the unsubscribe link appears in every message, and a note to contact@e-devis.ch is equally enough. Withdrawal takes effect for the future and does not call into question what was done before (revFADP art. 6 para. 6).

The site, the database, the attachments and the mail service are hosted in Switzerland, at Infomaniak. For that processing your data does not leave the country. One exception: online payment. Stripe handles it from its European entity established in Ireland, and the Stripe group also carries out processing in the United States. Ireland is among the states whose protection the Federal Council recognises as adequate (revFADP art. 16 para. 1). For processing carried out in the United States, the transfer relies on recognised data protection clauses within the meaning of revFADP art. 16 para. 2, and on the measures set out in revFADP art. 17. The corresponding documents are kept by e-devis.ch and may be requested. Only the data needed for payment is concerned: amount, currency, subject of the purchase and billing e-mail address. Card data is entered at Stripe and never passes through e-devis.ch.

Your data is kept for as long as your account exists and the relationship continues. It is deleted on request, and you may ask for that deletion at any time. In other words: nothing is erased by the mere passage of time, and nothing is kept indefinitely against your wishes, because asking is enough. Since we announce no figure for a retention period, we say here what is kept and why (revFADP art. 6 para. 4). One exception, imposed by law and impossible to shorten: accounting records — invoices, payment receipts, credit notes — are kept for ten years (Code of Obligations art. 958f). They are not deleted before that term, even if you ask for everything else to be deleted. One practical limit worth knowing: a request already bought by a company now also sits with that company. We delete what we hold; for what the company holds, address it directly, and we will help you reach it.

Access: you may ask whether we process data about you and obtain a copy of it, with the purpose, the recipients and the retention period (revFADP art. 25). Rectification: you may have an inaccurate item corrected (revFADP art. 32 para. 1). Erasure: you may ask for your data to be deleted, subject to the accounting records. Objection: you may object to a processing operation, in particular to your data being disclosed to third parties (revFADP art. 30 para. 2 let. b). Handover or transfer: you may ask for your data in a common, machine-readable format, or for it to be transferred to another provider (revFADP art. 28). Withdrawal of consent: at any time and without giving reasons, for marketing by e-mail. How to proceed: with a company account, the “My data” section of your area lets you view your data, download it, have it corrected, withdraw your agreement to advice e-mails and ask for your account to be deleted, without writing to anyone. If you submitted a quote request as a private client, the link in your acknowledgement of receipt opens the “My request” page, which offers the same options with no account and no password. In every case you can also write to contact@e-devis.ch or use the Contact form, saying what you are asking for. We may ask you to prove your identity before releasing data, so that it does not go to somebody else. We answer within thirty days. If the request needs more time, we tell you so within that same period and say when the answer will come. There is no charge.

You may turn to the Swiss supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. You may also bring the matter before the Swiss civil courts. Write to us first if you wish: it is often faster, and we would rather correct a mistake than defend it.

Requests are distributed automatically: the system compares the trade requested and the postcode of the site with the trades and postcodes each company has itself declared. That comparison decides nothing about you, produces no legal effect and deprives you of no right (revFADP art. 21). No request is passed on on that basis alone: a member of our team reads every request, writes the anonymous summary, confirms in writing having checked it, and only then triggers the sending. Without that human approval, nothing goes out. We build no personality profile, we calculate no score and we do not analyse your browsing behaviour.

Exchanges with the site are encrypted with HTTPS, and the browser is instructed to use no other route. Passwords are stored in an encrypted form that cannot be reversed; nobody here can read yours. Attachments are stored outside the public folders of the site, in a directory with restricted access, and are released only after access to the request has been bought. Access to data is limited according to the role of the account, and the administration area is protected by two-factor sign-in. No card number is entered or stored on e-devis.ch: payment takes place at Stripe. These measures answer the security requirement of revFADP art. 8 and its ordinance. No system is invulnerable. If a security breach were to pose a high risk to you, we would report it to the Federal Commissioner as quickly as possible and inform you (revFADP art. 24).

The site sets only technical cookies, needed for it to work. The NEXT_LOCALE cookie remembers the language you chose; it holds nothing but a language code and it disappears when the browser is closed. Two further technical cookies accompany the sign-in forms: one protects against a form being submitted from another site, the other remembers the page you return to after signing in. If you open a company or administration session, a sign-in cookie is added to keep you signed in. None of these cookies serves advertising or audience measurement. The site installs no statistics tool such as Google Analytics, no advertising pixel and no social network button that would follow you; the typeface is served from the site itself. That is why no cookie banner appears and no consent is asked of you: a strictly necessary cookie does not require one. The detail is given in the Cookie policy.

e-devis.ch addresses people and companies established in Switzerland. Requests concern sites located in Switzerland, and only Swiss postcodes are accepted. The five languages of the site serve the population living in Switzerland; they do not target customers abroad. e-devis.ch does not offer goods or services to people located in the European Union and does not monitor their behaviour. The platform is therefore not required to appoint a representative within the meaning of art. 27 of the GDPR, and has not appointed one. The law that applies first is the revised Swiss Federal Act on Data Protection (revFADP) together with its ordinance. The GDPR is quoted on this page as a frame of reference, for European visitors passing through, and not as a submission to its representation obligations.

The date shown at the top of this page is that of the version in force. If an important change occurs — a new recipient, a new purpose, a new category of data — we update this page and inform the people concerned, by e-mail where we hold their address (revFADP art. 19). Earlier versions may be requested at contact@e-devis.ch.