Privacy Policy
Who we are
This privacy policy applies to the website comms-ai.com operated by
GMG Green Media Group Sàrl ("GMG", "we", "us"), a limited liability company registered
in Switzerland.
- Registered office: Tranchepied 3, 1278 La Rippe, Switzerland
- Commercial register (UID): CHE-114.987.555
- Contact for data protection queries: via our contact page
GMG is the data controller for personal data collected through this website.
Scope of this policy
This privacy policy covers personal data processed in connection with:
- Visitors to
comms-ai.com - Submitters of the contact form
- Lead records created in our customer relationship management (CRM) system (Odoo)
It does not cover personal data processed within the CommsAI SaaS product itself. If you become a customer of the CommsAI service, your use of that product is governed by a separate Master Service Agreement and an accompanying product-specific privacy notice provided to you at contract signing.
Legal basis for processing
- Under Swiss law (Federal Act on Data Protection — FADP, in force 1 September 2023): processing is based on our legitimate interest in operating a marketing website and responding to enquiries.
- Under EU law (General Data Protection Regulation — GDPR), where it applies: Art. 6(1)(b) (pre-contractual measures at your request) and Art. 6(1)(f) (legitimate interest).
Data we collect
From you, when you submit the contact form
When you submit the contact form, we collect:
- Your name
- Your email address
- Your company (optional)
- Your phone number (optional)
- The content of your message
We use this information solely to respond to your enquiry and, if relevant, to follow up on a potential business relationship.
Automatically, through site analytics
We use Umami Analytics, a privacy-friendly, self-hosted analytics tool. Umami does not set cookies and does not collect personal identifiers. It records aggregate data only:
- Page URL viewed
- Approximate country (derived from IP at request time; the IP address itself is not stored)
- Device type and browser family
This information is aggregated. We cannot identify individual visitors from analytics data.
Cookies
This website does not set any non-essential cookies. We do not use advertising cookies, tracking pixels, social media plug-ins that drop cookies, or third-party analytics with personal identifiers. Any cookies set during use are technically necessary for the site to operate.
Who has access to your data (sub-processors)
We use the following service providers to operate the website and CRM. Each is contractually bound to handle data only on our instructions and in compliance with applicable data protection law.
| Sub-processor | Service | Data location |
|---|---|---|
| Infomaniak Network SA | Web hosting, S3 storage, Postgres database, Umami analytics | Switzerland |
| Odoo SA | Customer relationship management (CRM) | European Union (Belgium) |
Cross-border data transfers
Contact-form submissions and lead records are transferred from Switzerland to Odoo's cloud in the European Union (Saint-Ghislain, Belgium).
The European Union is recognised by the Swiss Federal Council as providing an adequate level of data protection (Annex 1 of the Ordinance to the FADP). No additional safeguards are required.
We do not transfer your data to any country outside Switzerland or the European Union.
How long we keep your data
| Data category | Retention |
|---|---|
| Contact form submissions in our database | 24 months from submission, then automatically deleted |
| Lead records in Odoo CRM | Retained while the business relationship is active; deleted on request |
| Analytics data | Aggregated only; no individual records retained |
Your rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Deletion — ask us to delete your data (subject to legal retention obligations)
- Objection — object to our processing of your data
- Restriction of processing — ask us to limit how we use your data
- Data portability (GDPR only) — receive your data in a structured, machine-readable format
You also have the right to lodge a complaint with a supervisory authority:
- In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC) — www.edoeb.admin.ch
- In the EU: the supervisory authority of the EU member state where you reside
To exercise any of these rights, contact us via our contact page. We respond to all requests within 30 days.
Security
We take reasonable technical and organisational measures to protect your personal data: access controls, encryption in transit (HTTPS), and contractual safeguards with our sub-processors.
Changes to this policy
We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates the version in force.
Contact
- Contact page
- Post: GMG Green Media Group Sàrl, Tranchepied 3, 1278 La Rippe, Switzerland