Data controller
The controller responsible for personal data processed through the website is:
Requests concerning personal data may be submitted through the contact form or by post to the address above.
Principles and purposes
AR Support processes only the data needed to operate the website, secure the form, respond to inquiries, prepare and provide services, and meet legal obligations.
Data is not sold or used for advertising profiling. As of this policy, the website uses no Google Analytics, Meta Pixel or other marketing tracking tools.
Contact form
When someone uses the form, AR Support processes the information they provide: name, email address, inquiry type and message content, together with the technical information needed to secure the submission.
This data is used only to understand and answer the inquiry and, if the person wishes, prepare a potential service relationship. The form does not store messages in a website database: they are sent to AR Support’s business mailbox.
Please keep your first message brief. Do not include identity documents, bank details, medical records or other particularly sensitive documents.
The form language is also included to help with the reply. If an error occurs, your entries are temporarily kept in the technical session so you do not have to retype them. They can be restored for 15 minutes and are removed from the session when displayed again.
Form security measures
The form uses a technical session to protect against forged requests (CSRF), a hidden anti-spam field, an attempt limit and an anti-bot check.
The technical session is necessary for the secure operation of the form and is not used to track visitor behavior for advertising purposes.
Cloudflare Turnstile
AR Support uses Cloudflare Turnstile to distinguish human users from automated submissions. According to Cloudflare, Turnstile processes minimal technical signals such as IP address, TLS fingerprint, User-Agent, site key and associated origin. Turnstile does not access the message content or other form fields.
Cloudflare, Inc. is based in the United States. Cloudflare states that information may be stored mainly in the United States and the European Economic Area and accessed as part of its international operations. For transfers from Switzerland to the United States, Cloudflare states that it relies in particular on the Swiss-U.S. Data Privacy Framework and, where necessary, standard contractual clauses and supplementary measures.
Turnstile’s signals are used to detect and block bots, not to build an advertising profile of visitors.
Infomaniak: hosting and email
The website and business email are hosted byInfomaniak Network SA in Geneva. Infomaniak acts as the technical provider for hosting and email transmission and storage. Its service terms state that entrusted data is stored and hosted exclusively in Swiss data centers.
Data relating to services
If a service relationship is established, AR Support may process the data needed to arrange appointments, issue invoices, follow up on support and carry out the assignment.
Some administrative tasks may require more confidential information. It is processed only as needed for the agreed assignment. Documentation for a reduced rate may be requested solely to check eligibility.
Retention periods
- Inquiries that do not lead to a service: prospect correspondence may be retained for up to 12 months after the last contact to allow a conversation to resume and document the inquiry.
- Client relationships: operational data is kept for as long as needed to provide the service and defend any legal rights.
- Accounting records and documents subject to statutory retention: these may be retained for 10 years in accordance with applicable Swiss obligations.
- Technical security data: retention depends on the technical function and provider concerned and is limited to what is necessary for operation and security.
Your rights
Within the limits of the Swiss Federal Act on Data Protection (FADP), individuals may in particular ask whether AR Support processes data about them, obtain the information provided for by law and, depending on the circumstances, request correction or deletion of inaccurate data or data no longer needed.
Requests may be made using the contact form or by post. Reasonable identity verification may be required before personal data is disclosed.
Updates to this policy
This policy is updated when processing activities, providers or legal requirements change. The date at the top identifies the applicable version.