Data Protection Statement
1. Scope
This privacy policy informs visitors to the website about how their personal data is collected and processed in connection with:
- visiting the website;
- using contact or enquiry forms;
- making an appointment;
- subscribing to newsletters or marketing communications;
- the provision of products or services, as well as contractual or pre-contractual relationships;
- the use of analytics, security and technical tools.
2. Data controller
The data controller is:
Elios Sàrl
Avenue Général-Guisan 44
1009 Pully
mobile : +41 79 401 10 11
e-mail : contact@nicolasleuba.ch
If you have any questions regarding data protection, please contact us using the details above.
3. Personal data processed
In particular, we process the data you provide to us directly, such as:
3.1 Data provided voluntarily
- surname, first name or company name;
- contact details (address, telephone number, email address);
- content submitted via forms;
- data relating to enquiries, bookings or orders;
- billing details and, where applicable, delivery details.
Unless explicitly requested, we recommend that you do not provide us with any sensitive personal data. If such data is provided, it will be processed in accordance with applicable legal requirements.
3.2 Technical and usage data
- IP address;
- browsing and interaction data;
- browser type, operating system, device used;
- security logs and data relating to the prevention of misuse;
- cookies and similar technologies.
This data helps, in particular, to ensure the security and proper functioning of the website.
4. Purposes of processing
Personal data is processed, in particular, for the following purposes:
- operation, functioning and security of the website;
- processing of enquiries submitted via forms;
- provision of services and performance of contracts;
- providing our products and services;
- management of orders, bookings or online sales;
- communication with customers and prospects;
- statistical analysis, improvement of services and optimisation of the user experience;
- compliance with legal and regulatory obligations.
5. Legal bases for processing
Processing is based, as appropriate, on:
- the performance of a contract or pre-contractual measures;
- compliance with legal obligations;
- the data subject’s consent, where required;
- the legitimate interests of the data controller, in particular for security, the proper functioning of the website and the improvement of services.
6. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google processes this data on our behalf and in accordance with our instructions
Google Analytics uses cookies to analyse website usage. The information generated (including the IP address, which is generally anonymised) may be transmitted to Google’s servers, particularly in the United States.
We use Google Analytics to:
- understand how visitors use our website;
- compile statistics;
- improve our content and services.
Where required, your consent is requested via the cookie management banner.
You can prevent cookies from being stored by configuring your browser or by using the tools provided by Google.
7. Cookies
The website uses cookies necessary for its operation as well as, where applicable, audience measurement or functionality cookies.
Strictly necessary cookies are based on our legitimate interest.
Other cookies are used only with your consent, which you may withdraw at any time.
8. Data transfer and processors
Personal data may be transferred to service providers involved in particular with:
- website hosting;
- technical maintenance;
- IT security;
- statistical analysis;
- communication services;
- payment processing, where applicable.
These recipients process the data solely within the scope of their tasks and in accordance with applicable legal requirements.
9. International transfers
Certain service providers may process data in countries outside Switzerland or the European Economic Area.
Where these countries do not guarantee an equivalent level of protection, we put in place appropriate safeguards, such as standard contractual clauses recognised by the competent authorities.
10. Retention period
Personal data is retained:
- for the period necessary to fulfil the intended purposes;
- for the duration of the contractual or commercial relationship;
- and then deleted in accordance with legal obligations.
Certain data may be retained for up to 10 years, in particular to comply with legal obligations relating to accounting and commercial matters.
11. Data security
Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration or disclosure.
We ensure that we process only the personal data necessary for the purposes pursued
12. Rights of data subjects
Data subjects have the following rights, within the limits provided for by law:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability, where applicable.
We invite you to contact us in the first instance so that we can respond to your request as soon as possible. You also have the rights provided for by applicable legislation and may, where appropriate, contact the competent supervisory authority.
13. Links to third-party websites
The website may contain links to third-party websites.
The data controller has no control over these websites and accepts no liability for their content or data protection practices.
14. Updates
This privacy policy may be amended at any time to reflect legal, regulatory or technical developments.
The version published on the website is the authoritative one.
The tools, services and technologies actually used may vary depending on the website’s configuration and the choices made by the data controller.
Version 01.01.2026