Contents
Which cookies does this site use?
The avepto.ch website uses cookies that are necessary for it to function and, for audience measurement and session recording, cookies whose regime depends on where you are visiting from. From the European Economic Area and the United Kingdom, those wait for your consent. From Switzerland and the rest of the world, they are active by default and one click on the “Cookies” link in the footer is enough to refuse them. The Meta Pixel, used for advertising measurement, requires your explicit consent in every region.
What is a cookie?
A cookie is a small text file saved on your device when you visit a website. It is used in particular to remember your preferences, keep the site working correctly, or measure how it is used.
This policy supplements Avepto Sàrl’s Privacy policy and applies to the avepto.ch domain as well as to the subdomains operated by Avepto.
Which cookies cannot be disabled?
These cookies are essential for the site to function and cannot be disabled. They are used in particular to remember your privacy preferences and to keep the site secure.
Necessary cookies
Always activeThe consent cookie remembers your choice so that you are not asked for your preferences again on every visit. It is not used to measure your browsing.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie __av_c / __av_e | Provider Avepto | Purpose Store your consent preferences (choice and banner state) | Duration 12 months |
| Cookie __av_v | Provider Avepto | Purpose Remembers which version of the site your browser has loaded, keeping the site consistent during an update | Duration 7 days |
| Cookie __cf_bm | Provider Cloudflare | Purpose Bot and abuse protection | Duration 30 minutes |
| Cookie cf_clearance | Provider Cloudflare | Purpose Records that a security challenge was passed; set only when Cloudflare has challenged the visitor | Duration 30 minutes |
How do we measure site usage?
Avepto measures use of the site in two ways. Its own first-party analytics infrastructure, operated on the site’s Cloudflare hosting, stores no cookie: the data is sent directly to our server. Google Analytics, for its part, runs in your browser for every visitor, in one of two modes. As long as audience measurement is not active for you, it runs cookieless, with no identifier: it sends Google only aggregate signals (page viewed, timestamp, browser, referring page, consent state), from which Google statistically estimates traffic. When it is active, by default from Switzerland and the rest of the world, after your consent from the European Economic Area and the United Kingdom, it sets the _ga and _ga_GKWPDWF0XT cookies (13 months), uses your IP address to infer your approximate city, and tells us where visits come from and what they do on the site. In addition, we use Microsoft Clarity for session recording (see below), which also stores cookies in your browser and is loaded only when that measurement is active for you.
Two measurement levels coexist: an anonymous level, active by default for all visitors, and an enriched level, whose activation depends on where you are visiting from. From the European Economic Area and the United Kingdom, it waits for your explicit consent. From Switzerland and the rest of the world, it is active by default and you can refuse it at any time. Until you decide either way, nothing about that choice is stored in your browser.
Data collected server-side
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie _ga | Provider Google Analytics | Purpose Browser identifier assigned by Google Analytics to link visits from the same browser | Duration 13 months |
| Cookie _ga_GKWPDWF0XT | Provider Google Analytics | Purpose Keeps the state of the current Google Analytics session (start, session count, engagement) | Duration 13 months |
| Data | Tier | Purpose | Duration |
|---|---|---|---|
| Data Tab identifier | Tier Anonymous | Purpose A random value generated by your browser for the current tab, forgotten when it closes | Duration About 90 days |
| Data Session identifier | Tier Enriched | Purpose A technical fingerprint computed in your browser, sent to our server and transformed with HMAC-SHA256 before any storage. The raw value is not kept | Duration About 90 days |
| Data Approximate country and city | Tier Anonymous | Purpose Inferred by Cloudflare from your connection (cf-ipcountry and cf-ipcity headers) | Duration About 90 days |
| Data IP address | Tier Both | Purpose Truncated at the anonymous level (network, not machine), full at the enriched level. Used to tell apart visits from one site or one company and to spot abuse | Duration About 90 days |
| Data Network organisation | Tier Both | Purpose Name of the organisation operating the network you connect from (access provider or company), as reported by Cloudflare | Duration About 90 days |
| Data Browser and operating system | Tier Anonymous | Purpose Browser name and operating system, inferred from the User-Agent header | Duration About 90 days |
| Data Language and referring site | Tier Anonymous | Purpose Display language and the referring site’s domain, without the full address | Duration About 90 days |
| Data Traffic source (UTM) | Tier Anonymous | Purpose utm_source, utm_medium and utm_campaign parameters from the landing URL | Duration About 90 days |
| Data Navigation events | Tier Both | Purpose Pages viewed, clicks, form submissions, video playback, scrolling | Duration About 90 days |
Anonymous level.
Before any consent, we count pages viewed together with, at most, the approximate country and city inferred by Cloudflare, your browser, the source through which you arrived and your truncated IP address (the first three groups of an IPv4 address, the first four of an IPv6 address): it identifies a network, not a machine. Legal basis: legitimate interest (anonymous audience measurement).
Enriched level.
At this level, the same events are tied to a stable session identifier: a technical fingerprint computed in your browser from its characteristics (graphics and audio rendering, fonts, screen), sent to our server over an encrypted connection and transformed with the HMAC-SHA256 cryptographic function before any storage. The raw value is not kept, and this identifier is used to reconstruct the path of your visits. If you send us a contact request, a job application, a briefing subscription or a meeting request, it is stored alongside your request so that path can be summarised for our team (see the Automated processing section of the privacy policy). At this level your full IP address is stored with each event, for the same window of about 90 days.
Legal basis.
In the European Economic Area and the United Kingdom: your consent. In Switzerland and the rest of the world we apply the Swiss regime of article 45c of the Telecommunications Act, which requires that you be informed and allowed to refuse: that is what this page is for, and refusing takes one click on the “Cookies” link in the footer.
One signal warrants a specific mention.
A heuristic detects whether your developer tools (browser DevTools) are open. This detection is imperfect (false positives are possible on Safari iOS and with certain extensions) and has no bearing on the service provided.
We do not keep the content you select or copy on the site: only the copy, cut and paste gestures are counted, without the text involved.
You can withdraw your consent at any time from the Cookies link in the footer, which opens this page and its management panel: enriched collection stops immediately.
Google Analytics cookies.
Google Analytics sets _ga and _ga_GKWPDWF0XT when audience measurement is active for you, for 13 months. If you refuse it, they are deleted and no longer set; Google Analytics then continues in cookieless mode with no identifier. An older _ga or _ga_* cookie inherited from our former site may remain in your browser: it is no longer read and will expire on its own; you can also delete it via your browser’s privacy settings.
International transfer.
Measurement events are sent to Google LLC (United States) in two ways. By your browser, in every case: without active audience measurement, cookieless signals with no identifier; when it is active for you, Google Analytics additionally uses your IP address for approximate geolocation, then anonymises it. By our server, via the Measurement Protocol API and without any IP address, at both levels: the requests sent through our forms, performance measurements and technical errors. Google LLC states that it is certified under the Swiss-U.S. Data Privacy Framework. For more information, see our Privacy policy.
Microsoft Clarity (session recording)
We use Microsoft Clarity to record, in pseudonymised form, how visitors use the site (movements, clicks, scrolling) and to produce heatmaps. From the European Economic Area and the United Kingdom, that recording waits for your explicit consent. From Switzerland and the rest of the world it is active by default, and one click on the “Cookies” link in the footer is enough to stop it. Unlike our first-party audience measurement, Clarity stores cookies in your browser, on this site and on Microsoft’s own domains, and transmits the data to Microsoft. When enriched measurement is active, the transformed session identifier described above is also passed to Clarity, so that the recording linked to a request you send us can be found.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie _clck | Provider Microsoft Clarity | Purpose Keeps a Clarity identifier to link sessions from the same browser | Duration 1 year |
| Cookie _clsk | Provider Microsoft Clarity | Purpose Links the pages viewed within a single session | Duration 1 day |
| Cookie CLID | Provider Microsoft Clarity | Purpose Third-party cookie set on the clarity.ms domain: records the first time Clarity saw this browser on any site using Clarity | Duration 1 year |
| Cookie MUID | Provider Microsoft Clarity | Purpose Third-party cookie set on Microsoft domains (clarity.ms, bing.com): a browser identifier shared across Microsoft sites. Microsoft states that Clarity does not pass it to its advertising cookies | Duration 1 year |
| Cookie MR | Provider Microsoft Clarity | Purpose Third-party cookie on Microsoft domains: indicates whether the MUID identifier should be refreshed | Duration 7 days |
| Cookie SM | Provider Microsoft Clarity | Purpose Third-party cookie on Microsoft domains: synchronises the MUID identifier across Microsoft domains | Duration Session |
| Cookie ANONCHK | Provider Microsoft Clarity | Purpose Third-party cookie on Microsoft domains: indicates whether the MUID identifier is passed to Microsoft’s advertising cookies. For Clarity, always 0 (not passed) | Duration 10 minutes |
International transfer.
Session recording data is transmitted to Microsoft Corporation (United States). Microsoft states that it is certified under the Swiss-U.S. Data Privacy Framework. You can withdraw your consent at any time via the cookie management panel; recording then stops and does not resume until you reactivate it.
Facebook and Instagram advertising (Meta Pixel)
The Meta Pixel requires your consent to “Meta advertising” in every region. It then measures page views, successful enquiries and confirmed bookings. These events measure our ads and build audiences. Our integration sends no form contents, email or phone number. You can withdraw consent in the preferences: Meta cookies are removed and new events stop.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie _fbp | Provider Meta | Purpose Links browser visits to measure Facebook and Instagram ads and build audiences, only with your explicit consent | Duration 3 months |
| Cookie _fbc | Provider Meta | Purpose Remembers an ad click when the link contains fbclid, only with your explicit consent | Duration 3 months |
Your browser sends Meta the pages visited, events, your IP address, browser information and advertising identifiers. Meta may associate these with your Facebook or Instagram account and process data outside Switzerland, including in the United States. Meta Platforms Ireland Limited is the recipient for this integration. See Meta’s privacy policy for its processing and your rights.
Enhanced Google advertising measurement
With your optional consent in the enquiry or booking form, Avepto sends your hashed email to Google LLC. This accompanies only a successfully confirmed enquiry or booking.
Our server normalises the email and transforms it using SHA-256 before transmission. This value remains pseudonymised personal data. Google can match it with its user data to attribute an enquiry to an advertisement, including across devices.
The checkbox is unchecked by default in every region. You can send your request without agreeing. Your choice and the wording version are recorded with the request. Each new submission offers a new choice.
This mechanism sends no name, phone number, postal address, message, job application or subscriber list. It adds no advertising cookie and is not used to personalise advertisements. Other audience measurement follows its own settings.
Google LLC may process this data outside Switzerland, including in the United States. Google Analytics retention is configured to 14 months. You can exercise the rights described in this policy by contacting us.
How can you manage your consent?
From the European Economic Area and the United Kingdom, a banner lets you accept or refuse enriched measurement and session recording on your first visit. From Switzerland and the rest of the world, those are active by default, with no banner, and one click refuses them. In every case you can change your preferences at any time from the “Cookies” link in the footer, which opens this page and its management panel below. The “Meta advertising” category stays off everywhere until you accept it.
Refusing cookies is as easy as accepting them: a single click from the management panel is enough. You can withdraw your consent at any time.
Browser settings
You can also configure your browser to block or delete cookies. The procedures vary depending on the browser you use. Blocking certain necessary cookies may affect how the site works.
How long are cookies kept?
Necessary cookies are kept only for as long as needed for their purpose. Analytics cookies are kept for the periods shown in the tables above and can be deleted at any time via your browser settings.
- Consent
- 12 months, renewed each time you change your preferences.
- Security (Cloudflare)
- 30 minutes, the length of a browsing session.
- Audience measurement (both levels)
- About 90 days. Measurement is kept in a rolling window and erases itself: there is no older archive on our side.
- Google Analytics
- According to the retention period configured in Google Analytics, currently 14 months. The _ga and _ga_GKWPDWF0XT cookies expire after 13 months. The copy sent by our server contains no IP address.
- Session recording (Clarity)
- Cookies _clck (1 year) and _clsk (1 day) on this site, plus Microsoft’s third-party cookies listed in the table (from 10 minutes to 1 year). With consent in the European Economic Area, refusable everywhere.
- Meta
- _fbp and _fbc cookies: 3 months. Only with your explicit consent, which you can withdraw at any time.
How does this policy change?
Avepto reserves the right to change this cookie management policy at any time. The version in force is the one published on this site, with the last-updated date shown at the top of this page.
Who can you contact with questions?
For any question about the use of cookies: by email at , by phone at +41 22 552 96 70, or by post at Avepto Sàrl, Chemin de l’Epinglier 4, 1242 Satigny, Switzerland.