Privacy policy

Legal framework

Applicable laws

LensLab Genève is committed to protecting your personal data in compliance with the new Federal Act on Data Protection (nFADP, in force since 1 September 2023) and, for visitors residing in the European Union or France, the General Data Protection Regulation (GDPR, EU Regulation 2016/679).

The data controller is Clément Fournier, reachable at contact@lenslab.ch.

Data collected

What information do we collect?

We collect only the data strictly necessary for the proper functioning of the website and the management of requests:

• Contact form / priority list: first name, last name, email address, and any message you choose to send us.
• Member area: email address and password (encrypted) for account creation and management, processed via Supabase.
• Browsing data: anonymised IP address, pages visited, session duration, device and browser type — collected via Google Analytics.
• Cookies: analytical cookies placed by Google Analytics and Google Tag Manager (see dedicated section below).

We do not collect any health data through this website. Medical information about you is only gathered during an in-person consultation at the practice.

Purposes

Why do we use your data?

• To respond to your contact requests and manage the opening priority list.
• To create and manage your member account and grant you access to restricted content.
• To improve the content and usability of the website through anonymised statistics.
• To comply with our legal obligations.

Your data is never used for commercial purposes, nor sold or rented to third parties.

Third-party services

Service providers used

The website uses the following providers, each subject to their own privacy policies:

Google Analytics

Audience measurement — identifier G-NJ8CKQ2FRT. Data stored on Google servers (USA). IP anonymisation enabled.

Google Tag Manager

Tag management — identifier GTM-T7C8636H. No personal data collected directly.

Supabase

Member area database — hosted on AWS (EU region). Data encrypted in transit and at rest.

Infomaniak

Website host — servers located in Switzerland. ISO 27001 certified.

Cookies

Cookie management

This website uses analytical cookies placed by Google Analytics. They allow us to measure traffic and improve the website without personally identifying visitors.

Duration

Maximum 13 months for Google Analytics cookies.

Opt-out

You can refuse cookies via your browser settings or by installing the Google Analytics opt-out module linked above.

Retention

Data retention periods

Contact requests

3 years from the last interaction, then deleted.

Member accounts

Until account deletion, or 3 years of inactivity.

Analytics data

14 months (Google default), then anonymously aggregated.

Analytical cookies

Maximum 13 months.

Your rights

Access, rectification & deletion

Under the nFADP and GDPR, you have the following rights regarding your personal data:

• Access: obtain a copy of the data held about you.
• Rectification: have inaccurate or incomplete information corrected.
• Erasure: request deletion of your data ("right to be forgotten").
• Objection: object to certain processing, including for statistical purposes.
• Portability: receive your data in a structured, machine-readable format.

To exercise these rights, write to us at contact@lenslab.ch. We will respond within 30 days. If unsatisfied, you may contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

Security

Data protection

The website is hosted by Infomaniak (Geneva, Switzerland), ISO 27001 certified. All exchanges between your browser and the website are encrypted via HTTPS (TLS). Member area data is stored on Supabase with encryption at rest. Access to personal data is strictly limited to Clément Fournier.

Updates

Changes to this policy

This privacy policy may be updated to reflect legal or technical developments. We invite you to consult it regularly.

Last updated: To complete on the date of publication.