✦ Primeira chamada gratuita — sem compromissoAgendar chamada →

Privacy Policy

Last updated: 2026-03-24

1. Who we are

The data controller responsible for this website is:

formaDigital
Lugano, Ticino, Switzerland
Email: privacy@formadigital.ch

We take your privacy seriously and are committed to protecting your personal data. This policy explains what data we collect, why we collect it, and what rights you have — in plain language.

2. What personal data we collect

We collect only the data we need to run our website and serve you well. Here is what we may collect:

  • Contact form submissions — your name, email address, phone number (if provided), and your message.
  • Quote request forms — project details, budget range, and contact information you choose to share.
  • Analytics data — anonymised usage data such as pages visited, time on site, device type, and approximate location (city-level). Collected via Google Analytics with IP anonymisation enabled.
  • Cookies — small text files stored on your device. See our Cookie Policy for full details.
  • reCAPTCHA data — Google reCAPTCHA may collect hardware and software information (such as device and application data) to verify you are not a bot.

3. Why we process your data

We process your personal data for the following purposes:

  • To respond to your enquiries — when you fill out a contact or quote request form, we use your data to reply to you.
  • To improve our website — analytics data helps us understand which pages are useful and where we can improve.
  • To prevent spam and abuse — reCAPTCHA helps us ensure that form submissions come from real people.
  • To send transactional emails — we use email services to deliver confirmations and replies to your messages.
  • To comply with legal obligations — we may retain certain data as required by Swiss law.

4. Legal basis for processing

We process your personal data based on the following legal grounds under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR):

  • Your consent (Art. 6(1)(a) GDPR / Art. 31(1) FADP) — for analytics cookies and marketing cookies. You can withdraw consent at any time via our cookie settings.
  • Legitimate interest (Art. 6(1)(f) GDPR / Art. 31(1) FADP) — for essential website functionality, spam prevention, and website security.
  • Contract performance (Art. 6(1)(b) GDPR) — when you request a quote or engage our services.
  • Legal obligation (Art. 6(1)(c) GDPR / Art. 31(1) FADP) — where we are required to retain data by law.

5. How long we keep your data

We keep your data only as long as necessary for the purposes described above:

  • Contact form data — up to 12 months after your last enquiry, unless a business relationship is established.
  • Client project data — for the duration of the business relationship plus the legally required retention period (typically 10 years under Swiss law).
  • Analytics data — automatically deleted after 14 months (Google Analytics default with our configuration).
  • Cookie consent preferences — stored for 12 months on your device.

6. Third-party data processors

We share your data with a limited number of trusted service providers who help us operate this website. Each has their own privacy policy and processes data on our behalf:

Google Analytics (Google LLC)

Web analytics service. We have enabled IP anonymisation and use Google Consent Mode v2, which means analytics data is only collected after you give consent. Data may be transferred to the US under Google's standard contractual clauses.

SendGrid (Twilio Inc.)

Transactional email delivery. When you submit a contact form, your message is delivered via SendGrid. Data may be processed in the US under Twilio's data processing agreement.

Google reCAPTCHA (Google LLC)

Spam prevention service. reCAPTCHA analyses your browsing behaviour to distinguish humans from bots. See Google's Privacy Policy.

Vercel Inc.

Website hosting and content delivery. Your requests are processed by Vercel's infrastructure. See Vercel's Privacy Policy.

7. International data transfers

Some of our third-party processors are based in the United States. Where data is transferred outside Switzerland or the EU/EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or the processor's participation in recognised data protection frameworks.

8. Your rights

Under the Swiss FADP and the EU GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to deletion — you can ask us to delete your personal data, subject to legal retention requirements.
  • Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
  • Right to object — you can object to the processing of your data based on legitimate interests.
  • Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time (e.g. via cookie settings).

9. How to exercise your rights

To exercise any of the rights listed above, please contact us at:

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

10. Cookies

Our website uses cookies — small text files stored on your device. We use essential cookies for the website to function, and optional cookies for analytics and marketing (only with your consent).

For detailed information about each cookie we use and how to manage your preferences, please see our Cookie Policy.

11. Google Analytics configuration

We use Google Analytics 4 (GA4) to understand how visitors use our website. We have configured it with the following privacy safeguards:

  • IP anonymisation — your IP address is truncated before being processed, so we never see your full IP.
  • Google Consent Mode v2 — analytics scripts only activate after you grant consent via our cookie banner. If you decline, no analytics data is collected.
  • No cross-site tracking — we do not enable Google Signals or advertising features.
  • Data retention — set to 14 months, the minimum available in GA4.

12. Right to lodge a complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

In Switzerland

Federal Data Protection and Information Commissioner (FDPIC)
www.edoeb.admin.ch

In the EU/EEA

You may also contact the data protection authority in your country of residence.

13. Changes to this policy

We may update this privacy policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically.

Conversar no WhatsApp