Privacy policy

The party responsible for processing personal data on this website is:

Jonathan Lao is the contact person for data protection matters. You can reach him using the contact details above.

We process personal data under the revised Swiss Data Protection Act (DSG). Where visitors from the European Economic Area are concerned, we additionally comply with the General Data Protection Regulation (GDPR).

We collect only what we need for the purpose at hand. Simply visiting this website transmits no data to third parties: fonts and images are served from our own server and no external content is loaded. Further processing only occurs once you submit a form, click a link or consent to analytics.

3.1 Contact and quote forms

When you submit one of our forms, we process the following details:

• Name
• Email address
• Phone number (optional)
• Company name (optional)
• Selected services (optional)
• Your message
• Page language and time of the enquiry

The sole purpose is handling your enquiry and, where applicable, preparing a contract. The details are stored in a database in Frankfurt am Main and additionally sent to us by email. They are not passed on for advertising purposes.

3.2 Server log data

When the website is accessed, our hosting provider records the following data for technical reasons:

• Truncated IP address
• Date and time of access
• Page requested
• Browser type and operating system
• Referring page, where available

This data is necessary for operating and securing the website. It is not merged with other data sources and is deleted after 30 days at the latest.

3.3 Email, phone and WhatsApp

If you contact us directly, we process the details involved in order to answer your request. For WhatsApp, Meta's privacy policy applies in addition: as soon as you click the WhatsApp link on our site, a connection to Meta is established and your phone number is processed there. If you would rather avoid that, send us an email or call.

We use the following providers. All of them process data solely on our instructions and are contractually bound to confidentiality.

• Vercel Inc., USA – website hosting. Server functions run in the Frankfurt am Main region.
• Neon Inc., USA – database for contact enquiries. Server location Frankfurt am Main.
• Resend (Plus Five Five Inc.), USA – sending notification and confirmation emails.
• Hostinger International Ltd., Lithuania – operation of our email mailbox.
• Microsoft Corporation, USA – Outlook as the email client for accessing our mailbox.
• Dropbox Inc., USA – storage of project files where required for an assignment.
• Meta Platforms Ireland Ltd., Ireland – WhatsApp Business for communicating with customers.
• Google Ireland Ltd., Ireland – Google Analytics and Google Search Console, see sections 6 and 7.

This website manages with very few cookies. We distinguish two cases:

• Technically necessary: One cookie for signing in to the internal admin area. It is never set for ordinary visitors. Your analytics choice is stored locally in your browser so we don't have to ask on every visit.
• Analytics: Google Analytics sets cookies, but only after you have consented. If you decline or make no choice, Google Analytics is not loaded at all.

You can change your choice at any time via the "Cookie settings" link at the bottom of every page. You can also block cookies generally in your browser or have them deleted automatically on closing.

We use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand which pages get read and where visitors leave. The legal basis is your consent under Article 6 DSG and Article 6(1)(a) GDPR respectively.

We use Google Consent Mode. Until you agree, all storage options are set to "denied", no cookies are set and no identifying characteristics are transmitted. The IP address is truncated before evaluation. Advertising-related features and sharing with Google advertising services are permanently disabled.

We record pages visited, time on page, approximate region, device type and the source of the visit. The data is deleted automatically after 14 months. You can withdraw your consent at any time via the cookie settings; processing carried out until then remains unaffected.

Google Search Console shows us which search terms our pages appear for in the results. Google provides only aggregated evaluations. Individual people are not identifiable in them and we set no cookies for this purpose, so no consent is required.

Some of the providers listed above are based in the United States. Where data may reach them, we rely on the European Commission's standard contractual clauses and, where providers are certified, on the EU-U.S. Data Privacy Framework together with the Swiss extension.

Wherever possible we have chosen European locations: the website and the database run in Frankfurt am Main, and contact enquiries do not leave the European area in normal operation.

We retain personal data only for as long as the respective purpose requires:

• Enquiries without an assignment: 24 months after the last contact, then deleted.
• Enquiries with an assignment: ten years after the end of the financial year, in line with the retention obligation under Article 958f of the Swiss Code of Obligations.
• Server log data: 30 days at most.
• Google Analytics: 14 months.

Regardless of this, we delete your data earlier on request, provided no statutory retention obligation stands in the way.

Under the Swiss Data Protection Act and, where applicable, the GDPR, you have the following rights:

• Access: You can find out at any time which data we process about you. Access is free of charge.
• Rectification: We correct inaccurate data once notified.
• Erasure: We delete your data provided no statutory retention obligation applies.
• Data portability: You can receive your data in a common electronic format.
• Objection and withdrawal: You can object to processing and withdraw consent at any time with effect for the future.

An informal email to us is enough. If you believe we are not processing your data lawfully, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Transmission between your browser and our server is encrypted throughout with TLS, indicated by the padlock in the address bar. The admin area is password protected and blocked for search engines. We use technical and organisational measures to protect data against loss, misuse and unauthorised access, and adapt them in line with technical developments.

We adapt this policy when our services or the legal situation change. The version published on this page is the one that applies. The date of the last change is shown above.

For questions about data protection or to exercise your rights, please contact: