Privacy policy

Last updated: 26.10.2026

The protection of your personal data is important to us. In this privacy policy, we explain which personal data we process on this website and when in contact with you, for what purpose, for how long, and what rights you have. We comply with the Swiss Federal Act on Data Protection (FADP).

Personal data is any information relating to an identified or identifiable person, for example name, email address, phone number or IP address.

1. Controller

The controller responsible for processing your personal data is:

For all questions about data protection and to exercise your rights, you can reach us at this address.

2. What data we process and why

We only process the data we need for the respective purpose:

We do not sell personal data and do not use it for advertising by third parties.

3. Visiting the website and server log files

When you access this website, your browser automatically transmits technical information to the server (see the table in section 2). This information is technically necessary for the website to be displayed and serves security and stability (for example defence against attacks). We do not use it to identify you personally and have no access to these log files ourselves. They are stored by the host (section 4). How long they are kept depends on the host's privacy policy.

4. Hosting

This website is operated by Cloudflare, Inc., San Francisco, USA (Cloudflare Workers). Cloudflare delivers the website via a worldwide network of data centres, usually from a data centre near you. The host processes the data listed in section 3 in order to deliver and protect the website, for example against attacks. Your data may therefore also be processed outside Switzerland. Cloudflare is certified under the Swiss-U.S. Data Privacy Framework (see section 12). Further information: Cloudflare's privacy policy.

5. Contact by email or phone

If you contact us by email or phone, we process your details in order to answer your request. For email, we use Google's Gmail service. The provider for users in Switzerland is Google Ireland Limited, Dublin, Ireland. Google may also process data through Google LLC in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework. Google's terms and Google's privacy policy apply to the processing by Google.

6. Contact form

If you request a free draft from us via the form, we process the details you enter (business name, your name and email address, optionally your phone number, industry, the address of your current website or Instagram profile, and your message) in order to answer your request. Required fields are marked. The transmission is encrypted (HTTPS).

The form is transmitted via Formspree, Inc., USA. The service forwards your message to our email inbox and stores it in our Formspree account. To protect against spam, the form contains a field that is invisible to humans; no cookies are set for this.

Formspree is not listed under the Swiss-U.S. Data Privacy Framework. For the transfer to the USA, we have therefore agreed standard contractual clauses with Formspree that are recognised by the Federal Data Protection and Information Commissioner (FDPIC) (Art. 16 para. 2 let. d FADP).

You can also reach us directly by email or phone without using the form.

7. Fonts

The fonts of this website are stored directly on our server. When the website is accessed, no connection is made to external font providers (for example Google Fonts).

8. Visitor statistics

We do not compile visitor statistics and do not use any analytics or tracking tools.

9. Cookies and local storage

This website does not use cookies. If you change the appearance (light or dark) or the text size, your browser saves this choice locally on your device (localStorage) so that it applies on all pages. This information is not transmitted to us, and you can delete it at any time in your browser settings.

10. Links to other websites

If you click on a link to another website, for example to Cloudflare's privacy policy, the privacy provisions of the respective operator apply there.

11. Disclosure

We only disclose personal data if this is necessary for the purposes stated, you have given your consent, or we are legally required to do so. Recipients are:

• Service providers that we use for this website and for communicating with you: Cloudflare (hosting), Formspree (contact form) and Google (Gmail email service). Cloudflare and Formspree process the data on our behalf. For Gmail, Google's terms apply (see section 5).
• Authorities, if we are legally required to do so.

12. Transfer abroad

Some of these service providers have their registered office or servers outside Switzerland, namely in Ireland (EU) and in the USA. We transfer data to the EU because the Federal Council has recognised that these countries provide an adequate level of data protection. We transfer data to the USA to Cloudflare, Inc. and Google LLC, which are certified under the Swiss-U.S. Data Privacy Framework; since 15 September 2024, the Federal Council has recognised an adequate level of data protection for these companies. For the transfer to Formspree, see section 6.

13. How long we keep data

We only keep personal data for as long as is necessary for the purpose or required by law:

• Requests by email or form: until the request has been dealt with, then at most 12 months, unless it leads to an order
• Customer data: for as long as the customer relationship exists and then for up to 2 years
• Business records such as invoices and accounting documents: 10 years, as required by law (Art. 958f of the Swiss Code of Obligations)

After that, we delete or anonymise the data.

14. Data security

We protect your data against loss, misuse and unauthorised access with appropriate technical and organisational measures. These include encrypted transmission (HTTPS) across the whole website, access to accounts only with strong passwords and two-factor login, regular updates and the choice of service providers with high security standards. Nobody can guarantee completely secure transmission of data over the internet; a normal email, for example, is not encrypted. It is therefore better to send us sensitive information by phone.

15. Your rights

Under data protection law, you have the following rights:

• Access: You can find out whether we process personal data about you and which data.
• Rectification: You can ask for incorrect data to be corrected.
• Erasure: You can ask for your data to be deleted, unless we have to keep it for legal reasons.
• Objection: You can object to the processing of your data.
• Data portability: You can ask us to hand over data that you have given us in a common electronic format, or to transfer it to another party.
• Withdrawal: You can withdraw your consent at any time with effect for the future.

To do so, write to us at zuerichwebsitez@gmail.com or by post to the address in section 1. To make sure that we do not give your data to the wrong person, we may ask for proof of your identity. We usually reply within 30 days. Access to information is generally free of charge.

If you believe that we are not processing your data correctly, you can contact us at any time. You can also contact the competent supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

16. No automated decisions

We do not make any decisions that are based solely on automated processing and that have legal effects on you or significantly affect you. We do not carry out profiling, that is, no automated evaluation of your data to analyse or predict personal characteristics.

17. Changes

We update this privacy policy when the website, our processes or the law change. The current version on this page applies. The date of the last change is shown at the top.