Information Security Essential

Our Commitment to Privacy

Privacy and Data Protection Statement

Privacy Policy

This privacy policy aims to explain to you why we collect your data and how we are committed to protecting it.

Défi Expansion is committed to the protection of your personal data and your privacy.

As such, and in application of the General Data Protection Regulation (hereinafter referred to as “GDPR”), we hereby communicate to you the conditions under which your personal data will be processed by us.

What personal data do we process?


We may collect and store your personal data, in particular for:

Receive/Process and respond to your messages from the contact form.

Data categories:

Contact details (e.g. name, first name, telephone number, email), Technical and location information generated as part of the use of our services, No sensitive data is collected or processed

Legal basis for processing

The processing of personal data implemented is based:

  • Either with the consent of the person concerned (Article 6.1.a of the GDPR) for all processing operations which require the prior collection of consent. In online forms, required fields are marked with an asterisk. If the mandatory questions are not answered, we will not be able to provide you with the requested services.
  • Either for the execution of a contract or the execution of pre-contractual measures,
  • Or for the pursuit of a legitimate interest (Article 6.1.e of the GDPR).
  • Either for compliance with a legal or regulatory obligation;

Your data is kept for the duration necessary to achieve the purposes mentioned above.

The retention period for personal data is 30 days. In this context, Customers' personal data is kept for the time necessary for completion.
of their request. In the absence of any achievement, personal data is deleted within the time limits recommended by the Commission Nationale Informatique et Libertés (CNIL), at the end of a period of three years from their collection, subject to: – the possibilities and legal obligations regarding archiving,
– obligations to retain certain data, for evidentiary purposes, and/or anonymization of
The Customer's personal data collected and processed, for the purposes of executing offers, are kept
for the duration necessary for the management of the contractual relationship.
By way of derogation, the personal data required to establish proof of a right or a contract are archived in accordance with legal provisions (5 or 10 years after the end of the commercial relationship depending on the case).

Who are the recipients of your data?

Your personal data is intended for Défi Expansion only.

Our internal services: They are handled by the staff of our various departments such as the sales department or management.

How does Défi Expansion preserve the security of your data?

We put in place all organizational and technical measures to ensure an appropriate level of security for your personal data, and in particular to avoid any loss of confidentiality, integrity or accessibility.

We frequently back up data, We encrypt your data to protect it during transfer, Where possible, we limit access to personal information to only those who need to process it, Implements technical and organizational measures to ensure that the storage of Customers' personal data is secure and for the period necessary to achieve the purposes pursued.

What are your rights over your personal data?

In accordance with the Applicable Regulations, you have the following rights:
A right of rectification : you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you, by providing a supplementary declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your data,
A right of erasure : in certain cases, you have the right to obtain the erasure of your data. However, this is not an absolute right and we may for legal or legitimate reasons retain this data. To do this, write to us:
A right to restriction of processing : in certain cases, you have the right to obtain limitation of the processing of your data,
A right to data portability : you have the right to receive your data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing of your data is based on your consent, on a contract or when this processing is carried out by automated means,
A right to object to processing : you have the right to object at any time to the processing of your data for processing based on our legitimate interest, a mission of public interest and those for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons refuse your opposition request,
The right to withdraw your consent at any time : you can withdraw your consent to the processing of your data when the processing is based on your consent. Withdrawal of consent does not compromise the lawfulness of processing based on consent given before such withdrawal,
The right to lodge a complaint with a supervisory authority : you have the right to contact your data protection authority to complain about our personal data protection practices,

In application of the GDPR, the conditions for exercising these rights may vary depending on the basis of lawfulness of the processing mentioned in the first paragraph.
We will respond to any exercise of rights as quickly as possible and in any event within 30 days of receipt of the request.

We reserve the right:

  • To request proof of the identity of the applicant in the event of reasonable doubt regarding the latter, in order to respect its obligation of confidentiality,
  • To extend the response deadline by two months, then informing the applicant of this extension and the reasons for the postponement within one month of receipt of the request,
  • To refuse to respond to an exercise of rights if it was considered abusive (given their number, their repetitive or systematic nature).

Who to contact for all GDPR-related inquiries?

To exercise your rights, you can contact us:

Défi Expansion
Head office: Road of Jeunes 47, 1227 Carouge, Switzerland
Phone : +41 22 307 78 78
E-mail :    

If, despite our efforts and commitments, you believe that your rights concerning your personal data have not been respected, you can send a complaint to the Commission Nationale Informatique et Libertés.

Reservation of modification of the Data Protection Policy

This Personal Data Protection Policy may be subject to change. They were developed from a free model which can be downloaded from the site. As we are constantly developing our services, we reserve the right to modify this Privacy Policy, in accordance with current legal provisions. Any changes are posted to this document in a timely manner. We advise you to regularly consult this page to be aware of any modifications or updates made to our confidentiality policy.

Cookies Policy

What is a cookie ?

Cookies are small text files that a website saves on your computer or mobile device when you visit the site.

They make your online experience easier by saving browsing information. Using cookies, sites can keep you logged in, remember your site preferences, and serve you personalized content. Cookies can also be used to compile browsing experience statistics and to show targeted advertisements.

In general, cookies can be classified by:

Domain :

– First-party cookies are issued by a website that a user visits directly.

– Third-party cookies are not created by the website visited, but by a third party such as Google Analytics, DoubleClick, Facebook, Twitter, LinkedIn, Youtube, Vimеo, etc.

Objective :

– Strictly necessary cookies are required for the website to function properly.

– Preference cookies allow a website to remember choices you have made in the past.

– Statistics cookies help the website owner to collect statistical data and understand how visitors interact with the website.

– Marketing cookies track user online activity to help advertisers deliver more relevant ads.

– Session cookies which are deleted when the user closes the browser.

– Persistent cookies that remain on the user’s device for a certain period of time.

Your cookie preferences

When you arrive on the site for the first time, a cookie banner asks you to accept or refuse Cookies which are not essential to the operation of the site. You can refuse/deactivate Cookies at any time, with the exception of Cookies necessary for the stable operation of the site. You can change your preferences relating to cookie management at any time.