Privacy Policy — Last updated: October 18, 2025. This policy explains how Novara SA, 1A Parc du Loup, 1018 Lausanne (Switzerland) (“Novara”, “we”) collects, uses, and protects your personal data when you use our website and online forms. For any questions: contact@novara-sa.ch.
1) Who is the controller? Controller: Novara SA, 1A Parc du Loup, 1018 Lausanne (Switzerland). Privacy contact: contact@novara-sa.ch.
2) What data do we collect? Browsing: IP address, server logs, pages viewed, date/time, user agent; Contact form: name, email, phone, city/ZIP, subject, message; Quote form: name, email, phone, city/ZIP, project info (building type, materials, surfaces, planned dates, message), attachments (JPG/PNG/PDF); Recruitment form: identity (name, email, phone), postal details, availability, target position, permits (driving/residence), nationality if applicable, LinkedIn link, message, CV (PDF); Security anti-bot: reCAPTCHA response (Google), IP address. “*” fields are required to process your request.
3) Purposes and legal bases Respond to contact/quote requests (pre-contractual measures / legitimate interest); Manage applications (pre-contractual measures / legitimate interest); Create and track leads in our CRM (Odoo) (legitimate interest); Website security and anti-spam/bot via reCAPTCHA (legitimate interest); Compliance with legal obligations; Marketing with your consent (withdrawable at any time).
4) Recipients and processors Limited access for authorised Novara staff; technical providers (hosting, maintenance, security, backups); Odoo (CRM); email/anti-spam providers; Google reCAPTCHA. These recipients act as processors or, where applicable, joint controllers under agreements compliant with applicable law.
5) International transfers Some providers may be located outside Switzerland and/or the EU/EEA; appropriate safeguards are implemented (e.g., Standard Contractual Clauses, adequacy decisions); otherwise, no transfer.
6) Retention periods Contact/quotes: up to 24 months after last interaction (unless a longer obligation applies); Applications: 12 months after closure (up to 24 months with your consent for a talent pool); Quote attachments: kept for processing then deleted if unnecessary; CV (PDF): uploaded for processing then deleted from the server after notification; Technical logs: limited duration for security. Afterwards, deletion or anonymisation unless otherwise required by law.
7) Cookies and similar technologies Necessary technical cookies (operation, security, anti-bot); reCAPTCHA may set cookies and collect usage data; any other cookies (analytics/marketing) are set only with your consent via a banner/manager.
8) Security Technical and organisational measures: HTTPS, access control, WordPress hardening, security logs, upload limits, server-side validation, data minimisation.
9) Your rights Under Swiss nFADP and, where applicable, the GDPR: access, rectification, erasure, restriction, objection, portability (where applicable), withdrawal of consent. Exercise your rights: webmaster@novara-sa.ch. You may lodge a complaint with the competent authority (Switzerland: FDPIC).
10) Odoo (CRM) and emails For contact/quotes, a lead may be created in Odoo (identity, contact details, message content, project information) to ensure follow-up; for recruitment, an internal email is sent to the relevant team and an acknowledgement to the applicant.
11) reCAPTCHA This site is protected by reCAPTCHA; Google’s Privacy Policy and Terms of Service apply. The service analyses certain usage information (e.g., IP address, interactions) to distinguish humans from bots.
12) Updates This policy may change; the update date appears at the top. In case of material changes, we may inform you via an appropriate notice. Contact: Novara SA, 1A Parc du Loup, 1018 Lausanne (Switzerland) — webmaster@novara-sa.ch.