Privacy policy
This policy describes how Arkneys Agency collects, uses and protects the personal data of visitors to arkneysagency.ch and of its clients. We process your data in accordance with the revised Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023, and the European GDPR where applicable.
1. Data controller
The data controller within the meaning of the FADP and the GDPR is:
Arkneys Agency, sole proprietorship
Founder: ibrahim Ghommiss
Zurich, Switzerland
Email: contact@arkneysagency.ch
Arkneys Agency has not appointed a data protection officer, not being legally required to do so. For any question about your data, write to the address above.
2. Data we collect
2.1 Data you provide directly
- Email contact: name, email address, company, role, content of your message.
- WhatsApp contact: phone number and content of the exchange, if you choose that channel.
- Contractual relationship: billing details and data needed to perform the mandate (contact persons, technical access, business content).
2.2 Data collected automatically
- Host technical logs: IP address, browser type, pages visited, date and time — processed by our hosting provider for security and content delivery.
- The site uses no audience measurement tool (no analytics) and sets no advertising or tracking cookies.
2.3 Data we do not collect
We do not collect sensitive data within the meaning of art. 5 let. c FADP through this site. If a service required such processing, a specific contractual framework (DPA) would be put in place beforehand.
3. Purposes and legal bases
- Responding to your requests (contact, audit, quote) — pre-contractual measures and legitimate interest (art. 6 §1 let. b and f GDPR).
- Performing our services (audit, design, deployment and operation of AI agents) — performance of the contract.
- Invoicing and accounting — compliance with legal obligations (Swiss Code of Obligations).
- Site security and abuse prevention — legitimate interest.
We send no marketing communication without your prior consent, revocable at any time.
4. Data recipients
Your data is processed by the founder of Arkneys Agency, who is bound by confidentiality. It may be shared with the following processors (art. 9 FADP / art. 28 GDPR):
- Vercel Inc. (USA) — hosting and delivery of the marketing site, technical logs.
- Infomaniak Network SA (Geneva, Switzerland) — hosting of data processed under client mandates. Data processed in Switzerland.
- WhatsApp / Meta Platforms — only if you choose to contact us via WhatsApp, under their own terms.
- AI model providers — under client mandates only, within the scope contractually defined in the DPA. No data is used to train third-party models.
We never sell or rent your personal data.
5. Transfers outside Switzerland / EU
Our website host (Vercel) is based in the United States. This transfer is covered by appropriate safeguards: standard contractual clauses recognised by Switzerland and the EU, and additional technical measures (encryption in transit).
Client mandate data, by contrast, remains exclusively in Switzerland (Infomaniak) — a contractual commitment documented in the DPA.
7. Retention periods
- Contact requests without a subsequent contract: 24 months after the last exchange.
- Contractual and accounting data: 10 years (art. 958f Swiss Code of Obligations).
- Technical logs: 12 months at most.
After these periods, data is deleted or irreversibly anonymised.
8. Security
Arkneys Agency implements technical and organisational measures proportionate to the risk: encryption in transit (TLS), access control, Swiss hosting for mandate data, logging, backups and minimisation of the data collected.
9. Your rights
Under the FADP and the GDPR, you have the following rights:
- Access: know what data we process about you and obtain a copy.
- Rectification of inaccurate or incomplete data.
- Erasure, subject to conflicting legal obligations.
- Restriction of processing and objection to processing based on legitimate interest.
- Portability: receive your data in a structured format.
- Withdrawal of consent at any time.
- Complaint to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or the authority of your EU member state of residence.
To exercise your rights: contact@arkneysagency.ch. Response within 30 days at most; proof of identity may be requested in case of reasonable doubt.
10. Minors
The site and services of Arkneys Agency are aimed at a professional audience and are not intended for minors. We do not knowingly collect data concerning them.
11. Changes
This policy may be updated to reflect changes in our practices or in regulation. The applicable version is the one published on this page.
12. Contact
For any question about this policy or your data: contact@arkneysagency.ch.