Controller and contact
AD Voyages Langues & Cultures Sàrl (ADVLC), Rue Abbé-Bovet 2, 1636 Broc, Switzerland, is responsible for the processing described here. Questions and rights requests: info@advlc.com. Swiss law applies alongside any mandatory European provisions applicable to your circumstances.
Enquiries and student records
We use contact details, student age, programme interest and the context you provide to answer your enquiry and prepare advice. Family information identifies the appropriate contacts and their authority. Do not send passports, medical records or financial information through the public form.
Further application information is requested separately through the secure portal. Depending on the purpose and applicable law, processing relies on requested pre-contractual steps, the contract, a legal obligation, our legitimate interest in service security, or specific consent. Consent to analytics is never required to receive a response.
Children and sensitive information
For minors, ADVLC checks with the family who may provide information and authorise the relevant steps. Supply health data and sensitive documents only following a justified request, using the secure channel and the required authorisations. They are separated from ordinary operational information; access is restricted by role and stronger authentication requirements.
Optional audience measurement
Google Analytics is available only after you consent. No Google analytics script or measurement request is loaded before that consent; refusal or withdrawal blocks measurement. Cookieless measurement is not used to bypass your choice.
Measurement is limited to allowlisted public pages, assessment starts, successful enquiry receipts and contact clicks. Form answers, names, emails, family or health information, private records and sensitive URL parameters are not transmitted. Advertising, Google Signals and user-provided-data collection are excluded from this configuration. Initial Analytics user/event retention is planned at two months; this setting does not determine the lifetime of aggregated reports.
Providers and international transfers
Vercel hosts the website; Supabase provides the database, authentication and record storage. The current Supabase project is hosted in the United States, not Switzerland. Infrastructure providers and subprocessors may process data abroad. Google provides audience measurement only when it is enabled and consented to.
Processing countries, processor agreements and transfer mechanisms must be documented for each provider: an applicable adequacy decision or appropriate contractual safeguards, with supplementary measures where needed. A consent banner alone does not establish lawful transfers. Contact us for information about the recipients and safeguards relevant to your record.
Retention and security
Enquiries and records are retained according to their purpose, necessary follow-up, legal obligations and any disputes. The detailed retention schedule requires validation; we therefore do not promise one retention period for every record. You may ask us to review whether your information still needs to be retained.
Private-record access is controlled; sensitive documents have additional protections and access logging. No system can guarantee zero risk. Technical security logs are separate from optional audience measurement.
Your rights
Contact info@advlc.com to request, subject to applicable conditions, access, correction, erasure, restriction, portability, objection or withdrawal of consent. We may verify identity proportionately. Withdrawal does not affect previously lawful processing. You may also contact the Swiss FDPIC or the competent EU supervisory authority.
Technical notice updated on 30 September 2026. Children’s data, transfers and European obligations require separate legal review; publication is not a compliance certification.