Privacy Policy
Effective Date: July 14, 2026 · Last Updated: July 15, 2026
1. Scope and Controller
This Privacy Policy explains how Apollo 8 SA ("Apollo 8", "we", "us", or "our") handles personal information when you visit apollo-8.ch or contact us through the website. It applies alongside the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Data Controller:
Apollo 8 SA
Rue du Petit-Chêne 19 bis
1003 Lausanne, Switzerland
Email: info@apollo-8.ch
2. Information We Process
2.1 Contact form
If you send us an inquiry, we collect the information you enter: your first name, optional last name, email address, and optional message. We also record limited service information, such as the submission time and its handling status, so that we can manage and respond to the inquiry.
To protect the form from automated misuse, the server derives a one-way identifier from the request's public IP address and keeps short-lived submission counts for that pseudonymous identifier. The raw IP address is not stored with the inquiry, and the identifier is used only to enforce the short abuse-prevention window.
2.2 Website delivery and security
When you access the website, our hosting provider, Vercel, processes technical request information needed to deliver and protect the site. This may include your IP address, browser or user-agent information, requested URL, referring page, request time, and request and response metadata. Vercel may retain operational and security logs under its own service retention settings.
2.3 Audience analytics
We use a self-hosted instance of Umami to understand aggregate website use and improve our content. The analytics service runs on Apollo 8-controlled infrastructure hosted by Amazon Web Services in Frankfurt, Germany. It is enabled only on the Production website.
The analytics request may process the page path and title, referring page, browser language, screen dimensions, request time, browser, operating system, device type, and approximate country. Umami processes the requesting IP address and user-agent information to derive a pseudonymous session identifier and the approximate country; the raw IP address is not stored in the analytics records. URL search parameters and fragments are excluded before collection.
We do not use Umami's visitor identification, custom session data, session replay, heatmaps, or performance monitoring. We do not send contact-form contents or contact details to Umami.
2.4 What this site does not collect
The website does not currently offer newsletter registration. We do not use Google Analytics, advertising trackers, marketing pixels, or cross-site advertising profiles. We do not use website or contact data for automated decisions.
3. Purposes and Legal Bases
| Purpose | Legal basis where the GDPR applies |
|---|---|
| Respond to and manage your inquiry | Steps at your request before a contract and our legitimate interest in business communications |
| Deliver, troubleshoot, and protect the website and contact form | Our legitimate interest in operating a reliable and secure website |
| Understand aggregate website use and improve our content | Our legitimate interest in measuring and improving the website in a data-minimal way |
| Meet legal requirements and establish, exercise, or defend legal claims | Legal obligation and our legitimate interests |
Where we rely on legitimate interests, we consider the purpose, necessity, and impact on your rights. We do not sell your personal information.
4. Service Providers and Disclosures
We use service providers that process information on our behalf only to provide, secure, and measure the website:
- Vercel provides website hosting, delivery, and operational security services.
- Supabase provides the database used to store contact form submissions.
- Amazon Web Services provides Frankfurt-based infrastructure on which Apollo 8 operates its self-hosted Umami audience analytics service.
These providers may use subprocessors to deliver their services. We may also disclose information when required by law or where necessary to protect legal rights, prevent misuse, or maintain the security of the website.
5. Cookies and Similar Technologies
Umami's audience tracker does not set analytics cookies or store a visitor identifier on your device. It performs cookie-free audience measurement and respects a browser's Do Not Track signal. We do not use advertising or marketing cookies or behavioural profiling. Vercel or other infrastructure may use strictly necessary technical mechanisms when needed to deliver or protect the site. Blocking essential technologies in your browser may affect website functionality.
If your browser submits the contact form without JavaScript, the website sets a strictly necessary, HTTP-only status cookie for up to one minute so the contact page can display the genuine submission result after redirecting. It contains only the values "stored" or "preview" and is not used to track you.
You can disable or re-enable Umami analytics for this browser below. The control stores only the opt-out preference in your browser's local storage. If we introduce other non-essential analytics or marketing technologies later, we will update this policy and implement any controls required by applicable law before using them.
Reading this browser's analytics preference…
6. Data Retention
| Data type | Retention |
|---|---|
| Contact form submissions | Deleted no later than two years after submission, and earlier when no longer needed |
| Operational and security logs | Kept only as long as needed for delivery, troubleshooting, security, and legal requirements, subject to provider settings |
| Audience analytics records | Deleted no later than 13 months after collection |
After deletion from an active database, encrypted or access-restricted copies may remain temporarily in infrastructure backups until they are overwritten or expire under the applicable backup lifecycle. Backup copies are not used for ordinary business purposes.
7. International Data Transfers
The active Supabase database and Apollo 8's self-hosted Umami service run in Frankfurt, Germany. Vercel, Supabase, Amazon Web Services, or their subprocessors may nevertheless process information outside Switzerland or the European Economic Area, including in the United States. Where applicable law requires it, we use a recognized transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, which may include standard contractual clauses adapted for Swiss data protection law.
8. Data Security
We use proportionate technical and organizational measures intended to protect personal information, including encrypted transmission, access controls, and restricted server-side credentials. No transmission or storage system can be guaranteed completely secure.
9. Your Rights
Depending on the law that applies to you and the circumstances, you may have rights to:
- Request access to your personal information and information about how it is processed
- Request correction of inaccurate or incomplete information
- Request deletion or restriction of processing
- Object to processing based on legitimate interests
- Receive certain information in a portable format
- Withdraw consent at any time where processing is based on consent
To exercise a right, contact us at info@apollo-8.ch. We may need to verify your identity and will respond within the period required by applicable law. Rights may be subject to legal conditions and exceptions.
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, the competent data protection authority.
10. Third-Party Links
The website may link to third-party sites. Their operators are responsible for their own privacy practices, and we encourage you to review their privacy notices.
11. Children's Privacy
This website is not directed to children under 16, and we do not knowingly collect their personal information. Please contact us if you believe a child has submitted information.
12. Changes to This Policy
We may update this policy when our website, providers, or legal obligations change. The latest version and its effective date will be published on this page.
13. Contact Us
Apollo 8 SA
Rue du Petit-Chêne 19 bis
1003 Lausanne, Switzerland
Email: info@apollo-8.ch