Privacy Policy

 

1. Controller

Eleganza Group Sàrl, a Swiss limited liability company with its registered seat in Geneva, UID CHE-179.849.929, operates https://www.eleganzaboats.com as Eleganza Boats.

Address: Avenue de la Gare des Eaux-Vives 26, 1208 Genève, Switzerland. Privacy contact: info@eleganzaboats.com, +41 79 544 6098, or post to this address.

This policy covers visitors and enquiries about boat sales, private rental and private cruises on Lake Geneva. It is based on the revised Swiss FADP, effective since 1 September 2023, and its ordinance. Section 9 covers additional rules where the GDPR applies.

 

2. Data and sources

The Wix “Contact us 1” form on /contact contains optional first name, last name and phone fields, a required email address and message, and a second optional email field. Contact details are mapped to Wix Contacts: submission is configured to create or update a contact. Submissions are accessible to the owner and authorised collaborators. Wix advanced spam protection is enabled. No separate marketing-consent checkbox was identified in the schema.

We also receive information you provide through email, phone or WhatsApp, such as boat or cruise preferences, dates and participants. A contractual relationship may require billing information. No online ordering or payment was presented on the pages examined.

Wix infrastructure processes technical data (IP address, browser, device, pages and visit times, error and performance logs). The HTML contains Wix BI technical measurement functions, performance calls towards frog.wix.com, Panorama and Sentry diagnostic components. This does not establish separate marketing analytics. Fonts are served from static.wixstatic.com and website assets from Wix/Parastorage domains.

Instagram @eleganzaboats and WhatsApp are ordinary outbound links on the examined pages, not identified embedded feeds or messaging widgets. If you open them or contact us there, we may receive usernames and messages and their operators perform their own processing.

Please provide only necessary information and avoid sensitive data. If you provide others’ information, ensure you are entitled to do so and inform them. Providing data is voluntary; without necessary details, we may be unable to answer or arrange the service.

 

3. Purposes and legal framework

We use information to answer enquiries, prepare quotations and appointments, prepare and perform contracts, provide follow-up and handle complaints; operate and secure the website and prevent abuse; diagnose technical errors and performance; comply with accounting and legal duties and protect legal claims.

Swiss law requires lawful, transparent, proportionate, purpose-limited and secure processing; unlike the GDPR it does not require every private-sector operation to rely on a listed GDPR legal basis. Where justification is required, it may be consent, an overriding private or public interest, or the law. An enquiry is not blanket marketing consent. Marketing requiring consent is subject to a separate choice and can be refused at any time.

 

4. Recipients

Access is limited to authorised people and necessary recipients:

• Wix.com Ltd. and its subprocessors: hosting, assets and fonts, forms and contacts, security, logging and technical performance measurement. Wix is a processor for data processed on our behalf; some processing for its own purposes is its responsibility.

• Cloudflare, in the website’s delivery and protection chain: a bot-protection cookie was identified in HTTP responses.

• Sentry, for diagnostic components integrated with Wix: HTML loads a browser.sentry-cdn.com script and configures reporting towards Wix infrastructure. The final recipient of each event and actual payloads require network verification.

• Meta / WhatsApp / Instagram, when you use external links and channels: no embedded widget was identified. Email and phone are alternatives.

• Email and telephone providers, accounting and legal advisers; boating partners where needed for your request, including Di Domenico for a Cranchi enquiry, limited to relevant details. The partner involved is identified during follow-up.

• Authorities and others where required by law or protection of legal rights.

External links take you to the relevant platforms; no embedded Google Maps or chat widget was identified on the examined pages. Google Business Profile is a separate channel declared by the company, not an integration detected on these pages. If you contact us through that listing, Google and we process the interaction according to our respective roles.

Policies: [Wix](https://www.wix.com/about/privacy), [Wix processing agreement](https://www.wix.com/about/privacy-dpa-users), [Cloudflare](https://www.cloudflare.com/privacypolicy/), [Sentry](https://sentry.io/privacy/), [WhatsApp](https://www.whatsapp.com/legal/privacy-policy), [Meta](https://www.facebook.com/privacy/policy/), [Google, for its external platform](https://policies.google.com/privacy).

 

5. International transfers

Depending on services, data may be processed in Switzerland, the EU/EEA, Israel (notably Wix) and the United States, including by support teams and subprocessors. Actual destination countries must be confirmed against enabled services. You may request details and applicable safeguards.

Transfers rely on an applicable adequacy decision or appropriate safeguards, notably standard contractual clauses recognised by the FDPIC and adapted to Swiss law, with assessment and supplementary measures where needed, or an applicable statutory exception. The Swiss–US Data Privacy Framework covers only recipients actually certified for the relevant data; the EU–US framework applies within its own scope. We do not assume every US provider is certified. You may request details or a copy of relevant safeguards, subject to protected confidentiality.

 

6. Observed cookies and technical components

GET and HEAD responses for all five examined pages set:

Cookie | Identified technical function | Lifetime observed in headers

ssr-caching | Wix rendering/cache indication | 20 seconds (Max-Age=20)

sec-fetch-unsupported | Technical compatibility / request-information handling | Session; no persistent expiry supplied

__cf_bm | Cloudflare bot protection | Approximately 30 minutes; Secure, HttpOnly, SameSite=None, Partitioned

These names and lifetimes describe observed responses, not an exhaustive inventory of cookies potentially created after JavaScript execution or interaction.

As of 7 November 2026, no Google Analytics/GA4, Google Tag Manager, Meta Pixel or Hotjar tag was identified in the five HTML documents, and Wix’s marketing-tag list was empty. Wix’s generic siteTags.bundle.min.js is present: it is not a Google Tag Manager container. No direct Google Fonts load, Google reCAPTCHA or embedded Google Maps was identified. A generic Wix captcha module exists and the form has advanced spam protection, without evidence of the captcha provider actually loaded.

No consent banner or “Cookie settings” control was identified in examined HTML; Wix’s banner API reports “no application found”. We therefore do not describe an accept/reject mechanism as already available. Browser controls let you manage cookies; blocking may affect functionality. Contact us by email with data questions or objections. Article 45c of the Swiss Telecommunications Act and the FADP notably require transparent information and an opportunity to object; any added optional tracking or processing requiring consent must have the necessary controls. These technical findings do not establish website compliance by themselves.

 

7. Retention and security

Enquiry data is retained only as long as necessary for the purposes for which it was collected, within the periods permitted or required by Swiss law. Business and accounting records subject to statutory retention are kept for the applicable period, including up to 10 years where that obligation applies. Retention may be extended where legally justified to establish, exercise or defend legal claims. Once the necessary or legally applicable retention period ends, data is deleted or anonymised. Technical cookies follow the lifetimes stated above; backup copies remain protected until deletion on their scheduled cycle.

Risk-appropriate technical and organisational measures protect data, including access restrictions and protection of communications and systems. Absolute security is impossible. Backup copies remain protected and are purged on their scheduled cycle.

 

8. Swiss rights

Subject to legal conditions and limits, you may request access, correction, deletion or cessation of certain processing, and delivery or transfer in a commonly used electronic format where statutory conditions are met. You may withdraw consent going forward. Legal duties and protection of claims may restrict requests.

Write to info@eleganzaboats.com. We may request proportionate identity-verification information. Access requests are normally answered within 30 days; extensions or restrictions are explained as required by law. You may contact the FDPIC: https://www.edoeb.admin.ch.

 

9. GDPR note

Mere access from the EU does not automatically make the GDPR applicable. Where it applies, notably for targeted EU/EEA services or behavioural monitoring, bases are steps you request before a contract and contract performance (Article 6(1)(b)); legal duties within Article 6(1)(c); legitimate interests in answering, security and defending claims, subject to balancing (Article 6(1)(f)); and consent for any separate processing that requires it (Article 6(1)(a)). Swiss-law obligations may also support legitimate interests where Article 6(1)(c) does not apply.

Subject to legal conditions, you have rights of access, correction, erasure, restriction, portability and objection, and may withdraw consent without affecting earlier lawful processing. You may object to direct marketing at any time; for legitimate-interest processing, on grounds relating to your particular situation. You may complain to the competent supervisory authority, notably where you live or work. We normally respond within one month, with a reasoned extension where permitted.

No solely automated decision with legal or similarly significant effects is envisaged in the enquiry process described. Any new use must be disclosed. If an EU representative is legally required, its details must be added before the relevant processing starts.

 

10. Changes

This policy evolves with our processing and states its update date. Fresh consent is obtained where necessary; continuing to browse is not blanket consent.