Privacy Policy
Updated 2026-09-03
This policy explains what personal data is processed when you visit this website or contact us, and what your rights are. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for this website is:
Space 8 Sàrl
Route des Flumeaux 46, 1008 Prilly, Switzerland
Email: the address in the site footer
Space 8 Sàrl has not appointed a data protection officer; requests can be addressed to the email above.
2. What we deliberately do not do
• We set no cookies — neither our own nor third-party.
• We use no advertising technology, tracking pixels, tag managers, or cross-site profiling. Traffic is measured with a cookie-free, first-party tool that does not identify you (see 3.3).
• We embed no third-party content (no external fonts, videos, maps, or social widgets). Fonts are served from our own domain.
• We do not sell, rent, or share personal data for marketing.
3. Data processed when you visit the site
3.1 Hosting and server logs
This website is served by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, through its global edge network, which includes locations in the EU and Switzerland. When you load a page, your browser transmits technical data that is necessary to deliver it: IP address, date and time, requested URL, referrer, browser and operating system identifiers. Vercel may retain such data in short-lived logs for security and operational purposes.
Legal basis: our legitimate interest in providing a secure, functioning website (Art. 31 FADP; Art. 6(1)(f) GDPR). Vercel acts as our processor under a data processing agreement; transfers to the USA rely on the EU–US Data Privacy Framework (Vercel is certified) and the Swiss–US Data Privacy Framework, supplemented by standard contractual clauses.
3.2 Language preference
When you choose a language, the code (en, de, or fr) is stored in your browser's local storage so the site opens in that language next time. This value never leaves your device, is not a cookie, and contains no personal data. You can remove it at any time by clearing your browser's site data.
3.3 Traffic and performance measurement
To understand which pages are read and how fast they load, we use Vercel Web Analytics and Vercel Speed Insights, provided by Vercel Inc. (see 3.1) and served from our own domain. These tools are cookie-free and store no persistent identifier on your device. For each page view they record: the page URL, the referring page, the country and region derived from your IP address, the browser, operating system and device type, screen size, and page-load performance metrics (Core Web Vitals). Your IP address is used to derive the location and to build a short-lived hash that groups page views of one visit; the address itself is not stored and the hash is discarded within 24 hours. The resulting statistics are aggregated and cannot be traced back to an individual.
Legal basis: our legitimate interest in measuring and improving the site (Art. 31 FADP; Art. 6(1)(f) GDPR). Because no cookies or comparable identifiers are used, no consent banner is required. If you nevertheless prefer not to be counted, most content blockers stop the measurement script (/vercel/insights/script.js) without affecting the site.
4. Data processed when you contact us
4.1 Contact form
The contact form on this site sends your entries — name, email address, company (optional), the service you selected (optional), your message, the interface language, and the page the form was submitted from — to our server, which forwards them to us by email. We process this data to answer you and, where relevant, to prepare or perform a contract.
To keep out automated spam, the form uses a hidden field that humans do not see and a minimum fill-in time; submissions that fail these checks are discarded without being stored. Our server also keeps a short-lived, in-memory count of submissions per IP address to limit abuse; it is not written to disk and disappears within minutes.
Email delivery is handled by Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, acting as our processor under a data processing agreement with standard contractual clauses. Resend transmits the message to our mailbox and retains delivery metadata for a limited period for operational purposes.
Where we use a customer-relationship or automation tool to keep track of enquiries, the same data may be forwarded to it as a further processor bound by a data processing agreement.
4.2 Email
You can also write to us directly. If you do, we process the data you provide (name, email address, company, and the content of your message) for the same purposes.
4.3 Legal basis and retention
Legal basis: pre-contractual measures or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling correspondence (Art. 31 FADP; Art. 6(1)(f) GDPR).
Retention: correspondence is kept for as long as needed to handle your request and, where it relates to a business relationship, for the statutory retention period of ten years under Swiss commercial law (Art. 958f CO). Unsolicited applications are deleted no later than six months after the process ends unless you agree to a longer retention.
Please do not send sensitive personal data through the form or by unencrypted email; ask us for a secure channel if needed.
5. Recipients
Personal data is disclosed only to the processors named above (hosting and measurement: Vercel; email delivery: Resend; where applicable, an enquiry-tracking tool), to professional advisers bound by confidentiality where necessary, and to authorities where we are legally required to do so. We do not transfer data to other third parties.
6. Your rights
Under the FADP and, where applicable, the GDPR you have the right to:
• obtain information about the personal data we hold about you (access);
• have inaccurate data corrected;
• have data deleted or its processing restricted, subject to statutory retention duties;
• receive the data you provided in a common electronic format (portability);
• object to processing based on our legitimate interests;
• withdraw consent at any time where processing is based on consent, with effect for the future.
To exercise these rights, email the address in the site footer. We may ask you to verify your identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies to you, with the supervisory authority of your habitual residence.
7. Security
The site is served exclusively over HTTPS. Form submissions are processed server-side so that no delivery address or credential is exposed in the browser. Contact details on this site are rendered in a way that resists automated harvesting. Internally, access to correspondence is restricted to the people who need it to respond.
8. Changes
We may update this policy when the site or the law changes. The date at the top indicates the current version; the version published here applies.