Privacy Policy

Last updated: 15 August 2026

2. Scope and legal basis

This policy describes how personal data is processed when you visit and use this website. In particular, the Swiss Federal Act on Data Protection (FADP) applies. We process personal data in accordance with the principles of lawfulness, proportionality, purpose limitation, transparency and data security.

3. Hosting and technical log data

The website is hosted on Netlify. When a page is requested, technically necessary connection data may be processed, including IP address, date and time, requested URL, browser/device information and technical status data. This processing supports secure and reliable delivery, troubleshooting and protection against abuse. Netlify may process data outside Switzerland and states that, among other mechanisms, it uses the Swiss-U.S. Data Privacy Framework for transfers from Switzerland.

4. Unique visitor counter

We use our own Netlify Function to maintain an accumulated count of unique visitors. The function technically receives the visitor IP address, but our application does not store the raw IP address in the visitor data store. Instead, a pseudonymous hash is created server-side using HMAC-SHA-256 and a protected secret. The hash is stored as the visitor identifier together with a timestamp. It is retained for as long as the cumulative visitor counter is operated. The counter itself does not set a cookie.

5. Feedback and testimonial forms (Formspree)

On testimonial pages, users may voluntarily submit a name, feedback text and rating. These forms are technically processed by Formspree. Formspree states that its services are hosted on Amazon Web Services in the United States and that it relies on Standard Contractual Clauses (SCCs) as a processor. Please do not submit sensitive personal data through these forms. Submissions are used for moderation, necessary follow-up and, where appropriate, publication of the testimonial.

6. YouTube

Our video pages contain embedded YouTube content. When embedded content loads, your browser may send data such as your IP address and the URL of the page you visited to Google/YouTube. Google may process data internationally and publishes its own privacy and international transfer mechanisms.

7. WhatsApp and Google Maps

Links to WhatsApp and Google Maps are external links. A connection to those services is initiated when you click the link. From that point, the privacy rules of the relevant provider apply. Messages sent through WhatsApp are processed by WhatsApp. We recommend not sending particularly sensitive personal data through messaging services.

8. Cookies and similar technologies

We currently do not intentionally set our own advertising or analytics cookies. Our own visitor counter works without a cookie. Embedded third-party services or services opened after a click may use their own cookies or similar technologies.

9. Recipients and international transfers

As part of the services described above, personal data may be disclosed to technical providers, in particular Netlify, Formspree and, for embedded video content, Google/YouTube. Processing may occur in the United States or other countries. Where required, transfers rely on adequacy decisions, recognised privacy frameworks, standard contractual clauses or other safeguards permitted under Swiss law.

10. Retention

Personal data is retained only for as long as necessary for the relevant purpose, service security, handling a request or complying with legal obligations. Technical provider logs are also subject to the provider's technical and contractual retention rules. The pseudonymous visitor hash is retained while the cumulative visitor counter remains in operation.

11. Your rights

Under applicable Swiss data protection law, you may in particular request information about personal data processed about you and, where the legal requirements are met, request correction, deletion, disclosure or transfer and object to certain processing. To exercise your rights, contact us using the postal or email address above. We may request reasonable additional information where necessary to verify identity.

12. Data security

We use reasonable technical and organisational measures to protect personal data, including HTTPS, access restrictions, protected environment variables for sensitive configuration values and the reduction of unnecessary third-party resources. No system can guarantee absolute security.

13. External information

Further information is available from the Swiss Federal Data Protection and Information Commissioner (FDPIC), Netlify, Formspree and Google.

14. Changes

We may update this policy if the website, the services used or the applicable legal framework changes. The version published on this website is the current version.

← Back to the home page