Data protection notice

Last updated: 26 July 2026

1. Scope of this notice

This notice describes how Amodeo Design collects and processes personal data:

• through the website amodeo.ch;
• through the client portal pk.amodeo.ch;
• in connection with contact enquiries, quotations, professional assignments and contractual relationships;
• in communications with clients, prospective clients, suppliers and partners.

Processing is carried out in accordance with the Swiss Federal Act on Data Protection (FADP) and its Ordinance. Where applicable, the provisions of the European General Data Protection Regulation (GDPR) are also taken into account.

2. Data controller

The data controller is:

Amodeo Design – Domenico Amodeo
Via in Gradisceta 1
6986 Curio – Switzerland
CHE-449.126.041
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data protection enquiries can be sent to the address above.

3. Data processed

3.1 Browsing and technical data

When our websites are visited, technical systems may record:

• IP address;
• date and time of access;
• page or resource requested;
• browser, operating system and device type;
• referring website or page;
• technical connection information;
• session identifiers and data generated by cookies or similar technologies.

These data are processed to enable the websites to operate, maintain system security, detect anomalies and prevent misuse.

3.2 Contact enquiries

When a contact form is used or communications are sent, we may process:

• first and last name;
• company or organisation;
• email address;
• telephone number;
• content of the enquiry;
• any documents and information provided voluntarily.

The data are used to respond to the enquiry, assess a potential assignment and continue the communication requested by the data subject.

3.3 Professional and contractual relationships

In the course of a professional relationship, we may process:

• contact details of clients and their representatives;
• data relating to the company or organisation;
• quotations, contracts and orders;
• activities performed and project documentation;
• invoices, payments and accounting information;
• correspondence and agreements reached;
• information required to manage and safeguard the contractual relationship.

3.4 PK Dashboard client portal

The portal pk.amodeo.ch is a private area for Amodeo Design clients.

The following data are processed to manage the portal:

• first name, last name and email address of the contact person;
• associated company or client;
• data required for authentication;
• date of last access;
• assigned packages and hour credit lines;
• duration, status, expiry date, slots and available, used and remaining hours;
• descriptions, categories and dates of activities;
• complimentary allocations, offsets and adjustments;
• reasons for official adjustments;
• messages and requests sent through the portal;
• application events relevant to security, support and traceability;
• reports and backups generated through administrative functions.

The Dashboard does not request health data, payment card details or other sensitive information that is not necessary to manage the professional relationship.

4. Purposes of processing

Personal data are processed to:

• make the websites and digital services available and protect them;
• identify and authenticate Dashboard users;
• respond to contact enquiries;
• prepare quotations and establish professional relationships;
• perform assignments and fulfil contractual obligations;
• document activities, hour credits, adjustments and communications;
• generate reports for clients;
• manage invoicing, accounting and legal obligations;
• prevent misuse and unauthorised access;
• establish, exercise or defend any claims;
• analyse the use of the public website statistically, subject to consent.

The data are not sold and are not used for unsolicited advertising or automated decisions that produce legal effects on the data subject.

5. Grounds for processing

Depending on the circumstances, processing takes place:

• to respond to a request from the data subject;
• to prepare or perform a contract;
• to comply with legal and accounting obligations;
• on the basis of the legitimate interest in managing the business, ensuring system security and protecting our rights;
• on the basis of consent where required, particularly for activating non-essential statistical tools.

Consent may be withdrawn at any time, without affecting processing already carried out.

6. Recipients and technical service providers

Data are made accessible only to the extent necessary to authorised parties and providers supporting the delivery of services.

In particular, these may include:

• Infomaniak Network SA, for hosting, web infrastructure and services associated with amodeo.ch;
• OpenAI Ireland Ltd and its subprocessors, for hosting and operating the Dashboard through ChatGPT Sites;
• Clerk, Inc., for authentication, account management and access security;
• Plus Five Five, Inc., trading as Resend, for sending email communications generated by the portal;
• Cloudflare, Inc. and other infrastructure providers, for security, content delivery and protection against automated access;
• Google Ireland Limited and Google LLC, for Google Analytics, only when authorised through cookie preferences;
• accounting, legal or technical advisers, where necessary and subject to confidentiality obligations;
• public authorities, where disclosure is required by law or a binding order.

Providers process the data in accordance with their respective contractual agreements and only to the extent necessary to deliver the services.

7. Processing and transfers abroad

Data may be processed in Switzerland, the European Union, the European Economic Area, the United States and countries where the providers and their subprocessors operate.

ChatGPT Sites does not currently offer a specific geographical location for data.

Where data are transferred to countries that do not ensure a level of protection recognised as adequate, appropriate contractual safeguards, such as standard data protection clauses, or other mechanisms provided for by applicable law are used where necessary.

8. Retention period

Data are retained according to the following criteria:

• contact enquiries with no follow-up: up to six months from the last communication;
• contractual and accounting data and business-relevant documentation: generally ten years from the end of the relationship or the financial year concerned;
• data relating to packages, activities and adjustments: for the duration of the relationship and subsequently for the period needed for contractual and accounting documentation;
• Dashboard accounts: for the duration of the client relationship, and deactivated when access is no longer needed;
• Dashboard access and interaction logs: up to 24 months, unless longer retention is necessary for security, support or the protection of rights;
• Google Analytics statistical data: up to 14 months, depending on the configuration adopted;
• backups: retained according to rotation cycles and used exclusively for continuity, security and recovery.

Data may be retained for longer where required by legal obligations, ongoing proceedings or the need to establish or defend claims.

9. Security

We adopt technical and organisational measures proportionate to the risk, including:

• encrypted connections;
• authentication using a temporary code;
• separation of access between clients;
• control of administrative roles;
• logging of relevant application events;
• data backups and export;
• periodic updates to technical components;
• restriction of data access to authorised persons only.

However, no system can guarantee absolute security.

10. Cookies and similar technologies

10.1 Public website amodeo.ch

The public website uses technically necessary cookies to:

• maintain the session;
• protect forms and requests;
• ensure security and stability;
• store the preferences expressed in the cookie manager.

These cookies cannot be disabled through the cookie manager, as they are necessary for the website to operate.

The website also uses Google Analytics to obtain aggregate statistics on page usage. Google Analytics must only be activated after the user has given consent.

Preferences can be changed or withdrawn at any time using the “Cookie preferences” control available on the website.

We do not currently use cookies for behavioural advertising or commercial profiling.

10.2 Portal pk.amodeo.ch

The Dashboard uses only technically necessary cookies and technologies to:

• authenticate the user;
• maintain the session;
• prevent unauthorised access;
• distinguish legitimate users from automated systems;
• distribute traffic correctly;
• ensure the security and operation of the service.

The Dashboard does not currently use statistical, advertising or profiling cookies.

Disabling technical cookies through browser settings may prevent access to the portal or its proper operation.

11. Rights of data subjects

Within the limits of applicable law, the data subject may request:

• information on the data processed;
• access to their data;
• correction of inaccurate data;
• deletion of data that are no longer necessary;
• restriction of or objection to certain processing;
• withdrawal of consent;
• delivery or transmission of data in an electronic format, where provided for;
• closure of the Dashboard account.

To exercise these rights, write to This email address is being protected from spambots. You need JavaScript enabled to view it.. Identity verification may be requested.

The data subject may also contact the Federal Data Protection and Information Commissioner: www.edoeb.admin.ch.

12. External links and services

Our websites may contain links to websites or services operated by third parties. Processing that takes place after opening those services is governed by their respective operators’ privacy notices.

13. Changes to this notice

This notice may be updated following changes to services, providers or legislation. The applicable version is the one published on the website, showing the date of the latest update.