Privacy policy.

For this website and for the exchanges that follow from it, the controller of your personal data within the meaning of the FADP and the GDPR is:

AAA-ai SNC, a general partnership (société en nom collectif, SNC) entered in the commercial register of the canton of Geneva (UID: CHE-472.059.253)
Chemin des Hauts-Cornillons 3, 1292 Chambésy (municipality of Pregny-Chambésy, GE), Switzerland
Telephone: +41 78 220 83 71
Email: contact@aaa-ai.ch

For any question about data protection, write to us at contact@aaa-ai.ch with “Data protection” in the subject line.

The documents that firms upload to GeTax Pre-fill are not covered by this policy. For them, the roles are different: the firm remains the controller, AAA-ai SNC is its processor, and a data processing agreement within the meaning of Art. 9 FADP, signed before access is opened, sets the rules. Storage in Switzerland, with Infomaniak. Document reading is confined to the European Union. Nothing is retained there, and nothing is used to train a model. Documents and the bundle are purged 14 days after delivery. The XML file and the report remain available until the firm deletes the client file. The periods in section 6 do not apply to these documents.

The home page, the offer pages and the About us page each include a form. All forms are sent through the Web3Forms service (see sections 4 and 5). Depending on the form, we collect:

Request for a call, an audit, a training date or contact

• First name (required)
• Last name (required)
• Email address (required)
• Company (optional)
• Content of your message (required)

Request for GeTax trial access

• Firm (required)
• First name and last name (required)
• Work email address (required)
• Telephone (optional)
• Number of tax returns per year (optional)
• Current software (optional)
• Content of your message (optional)

Booking the complimentary hour (Calendly)

• Name and email address (required)
• Your company's website or name (required)
• Chosen slot
• Email address of a guest, if you add one (optional)

Each submission also indicates the page from which the request was sent, the display language of the website and your acceptance of this policy.

We ask you not to include sensitive data (health data, biometric data, political or religious opinions, etc.) in your message.

When you visit our website, certain data is collected automatically by our host for technical and security reasons:

• IP address (anonymised in the logs where technically possible)
• Browser type and operating system (User-Agent)
• Date, time and URL of requests
• Referring page

These server logs are kept for a short period by our host (Hostinger) to ensure the availability, security and technical diagnosis of the website.

The fonts are self-hosted: they are served with the website. No third-party service is called when pages load.

No behavioural analytics, advertising tracking or profiling tool is currently used on this website.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Your data is never sold to third parties. It may be disclosed to the following service providers, which act as processors on our behalf:

Each of these service providers is bound, by contract or by its standard terms, by obligations of confidentiality and security.

Submitting a form involves a transfer of your data to Web3Forms (United States).

The complimentary hour is booked through Calendly (United States). Calendly, LLC is self-certified under the Swiss-U.S. Data Privacy Framework, and its data processing agreement provides for the standard contractual clauses should that framework cease to apply.

To govern this transfer, we rely:

• on the standard contractual clauses of the European Commission (relevant modules) where the service provider has adopted them;
• where applicable, on the Swiss-US and EU-US Data Privacy Framework (DPF) for service providers that are self-certified under it;
• on the contractual and technical safeguards provided by the service provider (encryption in transit, access control, etc.).

• Form requests with no follow-up: 12 months after the last exchange.
• Prospects in active discussion: for the duration of the discussions, then 3 years after the last contact for direct marketing purposes.
• Clients: for the entire duration of the business relationship, then 10 years in accordance with Swiss accounting obligations (Art. 958f CO).
• Technical server logs: kept for a short period by our host, generally from a few weeks to a few months depending on its policy.

Our website uses no cookies and no trackers: no audience measurement, no advertising, no profiling. No consent banner is therefore displayed at present.

The only exception: the booking window. When you click a booking button, the Calendly window opens on our site (see sections 4 and 5). Its files are only loaded at that moment, and Calendly may then set its own cookies, governed by its own privacy policy. Without that click, nothing is loaded.

The website stores only the chosen theme and the chosen language in your browser (localStorage). These two items are strictly necessary for the interface to work properly:

These items remain stored only on your device and are never transmitted to AAA-ai SNC or to any third party. Under the FADP and the GDPR, they do not require prior consent because they are strictly necessary for a service you request (changing the language or the theme).

You can clear your browser's local storage at any time through its privacy settings (Chrome, Firefox, Safari, Edge). By default, private / incognito browsing prevents these items from being kept.

If we decide one day to add analytics, audience measurement or marketing tools (for example Google Analytics, Meta Pixel, etc.), we will put in place a consent banner that meets the requirements of the FDPIC (PFPDT) and the GDPR before any non-essential cookie is set, and we will update this policy.

In accordance with the FADP (Art. 25 to 30) and the GDPR (Art. 15 to 22), you have the following rights over your personal data:

• Right of access: to obtain confirmation that data concerning you is being processed and to receive a copy of it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”): to request the deletion of your data, subject to our statutory retention obligations.
• Right to restriction of processing.
• Right to object to processing, in particular for direct marketing.
• Right to portability of your data (GDPR).
• Right to withdraw your consent at any time, without affecting the lawfulness of earlier processing.

To exercise these rights, send your request to contact@aaa-ai.ch. For security reasons, we may ask you to prove your identity. We will reply within one month at most, in accordance with the GDPR.

No automated decision producing legal effects and no profiling within the meaning of Art. 22 GDPR or Art. 21 FADP is carried out on the basis of your data.

We implement reasonable technical and organisational measures to protect your data against loss, alteration, unauthorised disclosure or unlawful access, in particular:

• Encryption of exchanges over HTTPS (TLS) across the whole website;
• Selection of hosts and service providers subject to recognised security standards;
• Access to data limited to the persons who strictly need it;
• Regular backups and incident management procedures.

In the event of a data breach presenting a risk to your rights, we will notify the competent authorities and, if necessary, the persons concerned of the incident, within the time limits laid down by the FADP (Art. 24) and the GDPR (Art. 33 and 34).

Our website is intended for a professional audience and is not designed to collect data about minors. If you are a minor, please do not send us personal data without the consent of your legal representative.

We may update this policy to reflect legal, technical or organisational developments. The date at the top of this document indicates the last update. In the event of a substantial change, we will signal it clearly on the website.

For any question, request to exercise your rights or complaint:

AAA-ai SNC
Email: contact@aaa-ai.ch

If you consider that our practices do not comply with the applicable legislation, you have the right to lodge a complaint with:

• the Federal Data Protection and Information Commissioner (FDPIC / PFPDT), Feldeggweg 1, 3003 Bern, Switzerland, edoeb.admin.ch;
• or, if you reside in the European Union, the competent supervisory authority of your country of residence (for example, in France: the CNIL).