Polluants.ch
Privacy policy
This policy explains how GNAC Sàrl processes your data when you use polluants.ch: quote or callback requests, documents and the customer portal. We use the information needed to respond to your request, provide our services and keep the service secure.
1. Data controller
GNAC Sàrl, rue de la Chapelle 17, 2035 Corcelles NE, Switzerland, represented by Robert Gaisch.
For questions about your data: info@polluants.ch or 076 567 18 50.
This policy covers processing carried out by this site. A link to stop-radon.ch or another site does not automatically make this policy applicable to that external service.
2. Data we process
Quotes and projects. We process your contact details, company and role, chosen languages, building information and address, project, deadline and messages. You may add other participants’ contact details and plans, photos or reports. Inform anyone whose details you provide to us. Your contact details and choice are recorded when you confirm the first step. Additional information is then saved progressively. We retain the date of your agreement to be contacted, the notice version and the language used.
Documents. Files may contain faces, private information and metadata such as a date or GPS location. Attach only relevant information. Once your contact details have been confirmed, files are uploaded to your private request as soon as you add them to the form. You can remove them before finalising.
Callbacks. We use your phone number to call you back and your email address to confirm your enquiry.
Address suggestions. If you enable them, text entered in the street field is sent to geo.admin.ch (swisstopo), with the data needed for the connection, including your IP address. No other quote field is sent to this service. You can disable suggestions and enter the address manually.
Customer portal. Your email address and login and session information identify you and protect your files. The portal lets you view and complete requests associated with your email address.
Browsing. Hosting providers may process technical data such as IP address, browser, time, requested page and errors to operate and protect the service. Before you confirm your contact details, they remain in the page’s memory. After confirmation, your progress is saved in your private request; resuming it from a link requires verification of your access.
3. Purposes
We use your data to:
- respond to your request, contact you and prepare an offer;
- organise and carry out the assignment, write the report and invoice;
- send confirmations, login links and messages related to your request;
- let you track your request and add documents;
- operate and secure the site and prevent abuse;
- meet our legal obligations and defend our rights where necessary.
The form checkbox records your agreement to be contacted about your request and confirms that you have read this policy. For an unfinished quote request, one confirmation email inviting you to complete it may be sent after 30 minutes without progress, unless the request has been finalised or is already being handled. It does not constitute consent to advertising. We do not sell your data or use your contact details for advertising without your consent.
4. Recipients and service providers
Robert Gaisch and expressly authorised persons access the information necessary for their tasks. Hosting, email and maintenance providers may process the data necessary for their services.
| Provider | Role and processing location |
|---|---|
| Supabase | Database, authentication and private files; project region: Zurich, Switzerland. Support services and subprocessors may operate from abroad. |
| BeMyTalent (BMT) | Contact, next-action and commercial communication management. Contact details and useful request information are transferred; files remain in Polluants. |
| Google Drive (Google) | Private copies of contact details, project information and documents for case management, plus separate encrypted backups. Google One does not guarantee storage in Switzerland. |
| Vercel Inc. | Website hosting; application functions in Frankfurt and delivery over a worldwide network. Company established in the United States. |
| AhaSend | Automated emails; data stored in Germany and Finland, email routing infrastructure in the European Economic Area. |
| Federal Office of Topography (swisstopo) | Address suggestions through geo.admin.ch, Switzerland. |
| Ekylibr SA | Website development and maintenance, Switzerland; access limited to the needs of this assignment. |
Email exchanges are also processed by the correspondents’ email providers.
For an assignment, a specialist laboratory may receive sample references and information necessary for analysis, including their location. Other partners receive only information relevant to their work. We disclose information to an authority where required by law or as part of your request, for example for a permit application.
Commercial follow-up may be managed in BeMyTalent. Messages concerning your request are sent on behalf of Polluants.ch. This does not constitute consent to marketing campaigns. Erasure requests are reviewed across the tools, including BeMyTalent; quotes and invoices are not deleted automatically.
5. Processing outside Switzerland
Requests and their files are stored in Supabase’s Zurich region. This does not exclude processing abroad related to web hosting, emails, support or subprocessors, particularly in the European Union, the European Economic Area and the United States.
Copies are also stored in Google Drive, which may process data outside Switzerland, including in the United States, under its privacy policy. Working copies remain readable by authorised persons; separate backups are encrypted before upload, with a key kept outside Drive.
Where the recipient country does not provide an adequate level of protection, appropriate safeguards are required. The processing agreements published by Vercel and Supabase provide, in particular, for standard contractual clauses and provisions applicable to transfers from Switzerland. You can contact us to learn which safeguards apply to your situation.
6. Retention
| Category | Retention period or criterion |
|---|---|
| Requests not followed by an assignment, callback requests and related documents | 24 months after the last relevant exchange, then deletion, unless required by law or necessary to defend a right. |
| Completed assignment files, reports and exchanges | As long as needed to carry out and follow up the assignment, then according to legal obligations and needs relating to warranties or defending rights. |
| Accounting books and records | 10 years from the end of the financial year, in accordance with Swiss accounting law. |
| Technical and security data | According to operational and security needs and providers’ retention periods; no single period applies to every log. |
The criteria above also apply to working copies and encrypted backups in Google Drive. Deleting a case must therefore include these copies; they are not automatically deleted when a file is removed from the form.
Backup copies may remain for their renewal cycle. Deletion does not always allow immediate removal from all backups. Contact us to find out how long a specific file is retained or to request deletion.
7. Cookies and storage on your device
- protected login cookies for the customer and administration portals, with a session lasting up to 8 hours and renewable during use;
- your appearance preference, stored locally until you change it or clear the site’s data;
- temporary identifiers in the browser tab to resume an interrupted submission and avoid duplicates: up to 24 hours for a request and 1 hour for adding documents to a file.
These temporary identifiers do not save form text or attachment contents. You can clear the site’s data in your browser; doing so may log you out or prevent resuming a submission.
AlpiStats audience measurement. This site uses AlpiStats, a Swiss visitor statistics service. Traffic data is collected, stored, backed up and processed in Switzerland. Measurement takes place only after you consent in our banner. If you refuse, withdraw consent or let your choice expire, AlpiStats does not measure your visit. Your choice, whether acceptance or refusal, is stored for 180 days (approximately six months). You can change or withdraw it at any time using “Privacy choices” in the footer.
This measurement does not store a persistent audience identifier in your browser. It uses AlpiStats’ essential mode. We measure public pages viewed, clicks to other sites, public downloads, form actions and completion confirmed by the server, and page loading performance. Submission attempts are not counted as completed requests.
We do not send form fields, email addresses, names, phone numbers, documents, client identifiers or case references to AlpiStats. Measured addresses are limited to public page paths, without query parameters or fragments. Private areas and resume links are excluded.
Detailed data is retained for six months. Only genuinely anonymous daily totals, such as page views and visits, may be retained longer, for up to 25 months. Consent to AlpiStats is separate from Google Ads consent and consent to be contacted.
On public pages, Google Tag Manager may load Google Ads after you consent to advertising measurement. Advertising click identifiers, public pages visited, clicks on our contact details and an opaque identifier for a completed quote request help measure advertising results. A phone click is not a completed call. For eligible visits, Google may display a forwarding number to measure calls.
We do not send form fields, prospective clients’ contact details, documents or case references to these tools. Private areas and resume links are excluded. Ad personalisation and automatic collection of entered data are disabled. Google Analytics is not used.
Google Ireland Limited and Google LLC may process technical and measurement data, including in the United States, under their privacy policy and applicable transfer safeguards. Google’s _gcl_ attribution cookies last 90 days according to Google’s documentation; the advertising action may have a different attribution window. Your choice is stored on this device for 180 days.
You can refuse all, choose purposes separately or change consent using “Privacy choices”. Refusing does not block the form. Withdrawal stops future transmissions, deletes measurement cookies accessible to the site and reloads the page; it does not retroactively delete data already sent to Google. Consent to be contacted in the form is separate.
8. Security
The form uses Vercel BotID Basic to verify requests and limit bots and spam. This check processes technical browser and connection information without sending the content of your enquiry to the verification service.
Communications with the site use HTTPS. Requests and attachments are stored in private areas with access controls. Files are viewed through temporary links. Administration access is protected and restricted to authorised persons.
No system guarantees absolute security. If a data breach occurs, we take the measures and make the notifications required by law, including informing affected individuals where necessary.
9. Your rights
Under the conditions set by Swiss data protection law, you may request access to your data and a copy, correction of inaccurate information, deletion of data or object to certain processing. Where processing relies on your consent, you may withdraw it for the future. These rights may be limited, in particular by retention obligations or overriding interests provided for by law.
Write to info@polluants.ch. We may request the information needed to verify your identity. Access requests are normally answered within 30 days; we will inform you if additional time is needed.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
10. External links and WhatsApp
External sites apply their own privacy rules. The WhatsApp button opens WhatsApp’s service, part of the Meta group; communications there are subject to that provider’s rules. For plans or sensitive documents, prefer the form or your secure customer portal.
11. Changes
We update this policy when our services, tools or the legal framework change. The version published on this page is the current version.
Last updated: 23 October 2026.