Privacy Policy
Version in force as of May 22, 2026
Introduction
This privacy policy describes how Eurasia Trading Sàrl (hereinafter « we », « our » or the « Data Controller ») collects, uses and protects the personal data of users of its website eurasiatrading.ch and of persons entering into a relationship with it.
As a company established in Switzerland, Eurasia Trading Sàrl is subject to the Federal Act on Data Protection (FADP / nLPD), which entered into force on September 1, 2023. For users located in the European Union, the General Data Protection Regulation (GDPR, EU 2016/679) also applies.
1. Data Controller
Eurasia Trading Sàrl
Rue du Collège 16
1325 Vaulion, Switzerland
UID: CHE-148.614.767
For any question regarding data protection:
- Email: [email protected]
- WhatsApp: +41 76 231 44 62
2. Data collected
We only collect data strictly necessary for the purposes described below.
2.1 Data collected via the contact form
When you contact us via the form on the site, we collect:
- Your name (as you enter it)
- Your email address
- The content of your message
- The date and time of submission
2.2 Data collected via WhatsApp
If you choose to contact us via WhatsApp, the data exchanged is governed by WhatsApp's terms of use and privacy policy (Meta Platforms Ireland Limited). We only retain conversations and contact details shared in the context of the relationship.
2.3 Data collected as part of business relationships
When a business relationship is established, we may process:
- Professional contact details (name, position, email, phone, address)
- Data necessary for invoicing (company name, address, tax identifiers)
- Project-related technical data, depending on its nature
2.4 Data collected via audience measurement tools
Our site uses Google Analytics 4 (GA4), deployed via Google Tag Manager (GTM), to understand site usage and improve its content.
Data collected by GA4 includes in particular:
- Pages visited and visit duration
- Device type, operating system, browser
- Country of origin (derived from the IP address, which is anonymised)
- Traffic source (search engine, direct link, referrer)
- Interactions with site elements (clicks, form submissions)
This data does not allow you to be directly identified. No personal nominative data is transmitted to Google by this means.
2.5 Technical and browsing data
Our host may retain, for security and abuse prevention purposes, technical logs (server logs) containing in particular IP addresses. This data is kept for a maximum period of thirty (30) days and is not used for commercial or statistical purposes.
3. Cookies and similar technologies
3.1 Strictly necessary cookies
These cookies are essential for the operation of the site (for example, remembering the chosen language). They do not require prior consent under the ePrivacy Directive.
3.2 Audience measurement cookies (Google Analytics 4)
Our site deploys Google Analytics 4 using Google Consent Mode v2. Concretely:
- By default, without explicit consent, Google Analytics operates in degraded mode: no persistent cookies are placed on your device, and only anonymous and aggregated signals are transmitted to Google (« cookieless pings »). These signals do not allow you to be identified or tracked from one session to another.
- If you give your consent (via a future cookie management banner), Google Analytics will switch to full mode and place persistent cookies (in particular
_ga,_ga_*) allowing more precise statistics on recurring visits.
You can object to the placement of analytics cookies at any time by:
- Configuring your browser to block third-party cookies
- Installing the official Google Analytics opt-out extension: tools.google.com/dlpage/gaoptout
- Activating the « Do Not Track » mode of your browser
3.3 No advertising cookies
We deploy no advertising cookies, no remarketing pixels, no marketing profiling tools (Meta Pixel, LinkedIn Insight Tag, Hotjar, etc.).
3.4 Detailed list of cookies in use
List of cookies deposited by the site, refreshed automatically every week by a headless-browser scan. Last scan : never (initial catalogue)
Strictly necessary
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
eurasia_consent_v1 | Eurasia Trading | Stores your cookie consent preferences. | 1 year |
_dc_gtm_<container-id> | Google Tag Manager | Throttles the request rate sent by Google Tag Manager. | 1 minute |
Audience measurement
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
_ga | Google Analytics | Unique visitor identifier, used to distinguish users. | 13 months |
_ga_<container-id> | Google Analytics | Session state persistence for a GA4 property. | 13 months |
4. Purposes of processing
We process your personal data for the following purposes:
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Respond to contact requests | Name, email, message | Legitimate interest / pre-contractual measures |
| Establish and perform business relationships | Contact details, project data | Contract performance |
| Issue and manage invoicing | Billing data | Legal obligation (accounting, art. 957 CO) |
| Comply with legal obligations | All relevant data | Legal obligation |
| Site security (logs) | IP address, technical data | Legitimate interest |
| Anonymous audience measurement (default) | GA4 data without cookies | Legitimate interest |
| Full audience measurement (on consent) | GA4 data with cookies | Consent |
5. Data recipients
Your data is neither sold, rented nor transferred to third parties for commercial purposes.
It may be transmitted to the following recipients, strictly to the extent necessary to perform the described purposes:
5.1 Site technical subcontractors
- Resend Inc. (United States): transactional email service (contact form notification). Resend is bound by a Data Processing Agreement (DPA) compliant with GDPR requirements and uses Standard Contractual Clauses (SCC) for transfers outside the EU/EEA.
- Site host: web hosting provider, whose details are available on request at [email protected].
5.2 Audience measurement tools
- Google Ireland Limited (Ireland) and Google LLC (United States): for the operation of Google Tag Manager and Google Analytics 4. Google acts as a processor for the audience measurement data we collect. For any transfers to the United States, Google adheres to the EU–US Data Privacy Framework (DPF), recognised as adequate by the European Commission. See Google's privacy policy and the Google Analytics privacy centre.
5.3 Competent authorities
Your data may be communicated to Swiss or foreign administrative or judicial authorities, strictly within the framework of applicable legal obligations.
5.4 Professional advisors
Your data may be communicated to our professional advisors (lawyers, accountants, auditors) bound by professional secrecy, strictly to the extent necessary for their missions.
6. International transfers
As Eurasia Trading Sàrl is established in Switzerland, your data is by default processed in Switzerland, a country benefiting from an adequacy decision from the European Commission (Article 45 GDPR).
Some technical subcontractors may be established outside Switzerland or the EEA (including the United States). In these cases, transfers are governed by:
- Standard Contractual Clauses (SCC) approved by the European Commission
- And/or the Data Privacy Framework (DPF) for certified US subcontractors (in particular Google LLC)
7. Retention periods
| Type of data | Retention period |
|---|---|
| Contact form data (no commercial follow-up) | 12 months |
| Active client data | Duration of relationship + 3 years |
| Billing data | 10 years (art. 958f CO) |
| Server logs | 30 days maximum |
| WhatsApp conversations | Duration of relationship + 12 months |
| Google Analytics data (active cookies) | 14 months maximum (configured at GA4 property level) |
| Google Analytics data (cookieless pings) | Aggregated, non-identifying retention |
Upon expiry of the periods indicated, data is irreversibly deleted or anonymised.
8. Data security
We implement appropriate technical and organisational measures to protect your personal data against destruction, loss, alteration, unauthorised disclosure or access. These measures include in particular:
- Encryption of communications via HTTPS/TLS
- Secure storage of data with recognised providers
- Strict access controls (strong authentication)
- Regular and encrypted backups
- Robust password policy
- Awareness of contributors to data protection issues
9. Your rights
In accordance with the Swiss FADP and the European GDPR, you have the following rights over your personal data:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy of it
- Right of rectification: have inaccurate or incomplete data corrected
- Right to erasure (« right to be forgotten »): obtain the deletion of your data, subject to legal retention obligations
- Right to restriction of processing
- Right to object to processing based on legitimate interest, including audience measurement
- Right to portability: receive your data in a structured and commonly used format
- Right to withdraw your consent at any time, where processing is based on it
- Right not to be subject to an automated decision producing legal effects
How to exercise your rights
Any request to exercise rights must be sent by email to [email protected]. We may ask you to justify your identity before responding to your request.
We undertake to respond within a maximum of thirty (30) days from receipt of your request.
Right to lodge a complaint
If you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority:
- In Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch
- In the European Union: supervisory authority of your country of residence
10. Minors
Our site and services are not intended for persons under sixteen (16) years of age. We do not knowingly collect personal data concerning minors.
11. Policy changes
We reserve the right to modify this privacy policy at any time, in particular to take into account legal, regulatory or technical developments. Any modification will take effect upon its publication on the site. The date of the last update is indicated at the top of this document.
We invite you to consult this page regularly.
12. Contact
For any question regarding this policy or the processing of your data:
- Email: [email protected]
- Postal address: Eurasia Trading Sàrl, Rue du Collège 16, 1325 Vaulion, Switzerland
Eurasia Trading Sàrl · Rue du Collège 16, 1325 Vaulion (Switzerland) · CHE-148.614.767
Version: May 22, 2026