Privacy policy

This is a translation. The German version is the legally binding one; if the two differ, the German text prevails: Datenschutzerklärung.

The protection of your personal data matters to me. In this privacy policy I inform you about how personal data is processed when you use this website. It complies with the revised Swiss Federal Act on Data Protection (revFADP/nFADP, in German revDSG/nDSG), in force since 1 September 2023.

1. Controller

The controller responsible for data processing on this website is:

WEBDESIGN-DAVOS
Daniel Krähenbühl
Bobbahnstrasse 5a, 7270 Davos, Switzerland
E-mail: info@webdesign-davos.ch

2. General information

I treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy. You can usually use this website without giving any personal data. Where personal data (for example name, address or e-mail) is collected, this is always on a voluntary basis wherever possible.

No disclosure to third parties: This website uses no third-party tools or services that could collect or pass on your data. All technical resources (fonts, images, scripts) are served from the site's own server. No data is passed on to companies in the USA or other countries.

3. Hosting

This website is hosted by:

hosttech GmbH
Seestrasse 15a, 8805 Richterswil, Switzerland
www.hosttech.ch

The hosting provider processes server log files (IP addresses, browser information and the like) on my behalf. This processing serves exclusively the technical provision and security of the website, on the basis of a data processing agreement under Art. 9 FADP. The website runs in the DATAROCK data centre in Nottwil (canton of Lucerne, Switzerland).

4. Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not combined with other data sources and serves exclusively technical operation and security. The legal basis is Art. 31 para. 1 FADP (legitimate interest in a fault-free presentation). The logs are deleted after 90 days at most.

5. Contact via form and e-mail

The contact form on this website sends your details to a script (formular.php) on this website's server at hosttech GmbH. The script sends them as an e-mail to info@webdesign-davos.ch. It does not store the details, not even in a database. You do not receive a copy.

The form asks for name, e-mail address, phone number and message. Name, e-mail address, message and a tick box are required: by ticking the box you confirm that you have read this privacy policy and that your details may be used to handle your enquiry. The phone number is optional. If sending fails, the form offers to send the message from your own e-mail program instead.

Against spam, the script checks a field that people do not see, and whether at least a few seconds have passed since the form was opened. Against abuse, it counts submissions per IP address and accepts at most 5 per hour. For this, the IP address is stored only as a salted hash, a value from which the address cannot be recovered, in a temporary counter file. After one hour an entry no longer counts. The script deletes old counter files, as a rule after two days.

When you send me an enquiry by e-mail or via the form, I process the details you provide (name, e-mail address, phone number if given, message) exclusively to handle your enquiry and for any follow-up questions. The legal basis is Art. 31 para. 2 let. a FADP (pre-contractual measures at your request) and Art. 31 para. 1 FADP (legitimate interest in answering your enquiry). No data is passed on to third parties.

Retention: Your enquiry stays with me until you ask me to delete it or the purpose no longer applies, as a rule 12 months after the project is completed or the enquiry did not lead to a project, unless statutory retention obligations apply (retention under commercial and tax law: 10 years under Art. 958f CO).

6. Cookies and tracking

This website uses no tracking cookies, no analytics tools and no third-party services for monitoring users. I deliberately do without Google Analytics and other web analytics tools, social media tracking pixels, advertising and remarketing services and third-party cookies of any kind.

The website sets no cookies. It stores one setting in your browser's local storage (localStorage), and only when you pause the animation of the construction crew (key “wd-bautrupp-pause”). Resuming the animation removes the entry. The entry contains no personal data and is not transmitted. It serves a function that you trigger yourself. No consent under Art. 45c TCA is therefore required.

7. Self-hosted fonts

This website uses self-hosted fonts (Schibsted Grotesk and Source Serif 4), which are loaded directly from the site's own server. There is no connection to Google Fonts or other external font services. Your data stays entirely on the site's own server and is not passed on to third parties.

8. Your rights

With regard to the personal data I hold about you, you have the following rights:

• Right of access (Art. 25 FADP)
• Right to have incorrect data corrected (Art. 32 para. 1 FADP)
• Right to erasure, unless statutory retention obligations apply (Art. 32 para. 2 FADP)
• Right to restriction of processing
• Right to data portability (Art. 28 FADP)
• Right to object (Art. 30 para. 2 FADP)
• Right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch (Art. 49 FADP)

To exercise any of these rights, write to me at info@webdesign-davos.ch. I answer your request within 30 days; for complex requests this period can be extended to 60 days, in which case I will let you know. To prevent misuse of data, I may ask for proof of identity before giving information.

9. Further information

Data breaches: In the event of a data breach likely to result in a high risk to your rights and freedoms, I will inform you without delay under Art. 24 FADP; in serious cases the FDPIC is notified as well.

No automated decision-making: This website uses no automated individual decisions or profiling within the meaning of Art. 21 FADP. Every enquiry is handled in person.

Objection to advertising e-mails: The use of the contact details published under the legal notice obligation for sending advertising that was not expressly requested is hereby objected to.

10. Data security

I use technical and organisational security measures to protect your data against manipulation, loss, destruction or unauthorised access (Art. 8 FADP). This site uses SSL or TLS encryption, recognisable by “https://” in the address bar. Further measures: hosting with hosttech GmbH, regular backups, access restrictions, doing without third-party tools and self-hosted resources.

11. Changes to this privacy policy

I reserve the right to adapt this privacy policy so that it always meets the current legal requirements, or to reflect changes to my services.