Privacy policy

This privacy policy explains which personal data is processed when you visit repual.ch or we’re in touch, and why. It is based on the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

In short

• This website sets no cookies and uses no tracking or analytics tools.
• Fonts and scripts are served from this website itself. Your browser doesn’t contact Google Fonts or similar services.
• I only process personal data when we’re in touch, and only for that purpose.

Who is responsible

The person responsible for processing your data is named in the contact details at the top of this page. For any questions about data protection, just write to the email address listed there.

Hosting and server logs

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare automatically processes the technical data needed to deliver the website and protect it from attacks: your IP address, date and time of the request, the page requested, your browser and operating system, and the referring page. This data is used solely to run the website securely and isn’t combined with other data.

Depending on the security settings in use, Cloudflare may set a strictly necessary security cookie (for example __cf_bm) to tell people and bots apart. It is not used for tracking.

Cloudflare runs a worldwide network, so data may also be processed outside Switzerland, including in the USA. Cloudflare is certified under the Swiss-U.S. Data Privacy Framework, which Switzerland recognises as providing adequate data protection. In addition, Cloudflare uses standard contractual clauses. More information: cloudflare.com/privacypolicy.

Contact form and email

When you send the contact form, the information you enter (name, company, email address, project type and message) is passed through Cloudflare to the email delivery service Resend and delivered to my mailbox. Basic, privacy-friendly spam protection runs in the background. It doesn’t use tracking or third-party CAPTCHAs.

My mailbox is hosted by Hostpoint AG in Switzerland. Resend (Plus Five Five, Inc.) is based in the USA. Transfers there are based on the standard contractual clauses in Resend’s data processing agreement, adapted for Switzerland.

I use this information only to process and answer your inquiry and for any project communication that follows. If you email me directly, the same applies. Inquiries that don’t lead to a project are deleted after 12 months at the latest, unless legal retention obligations apply. I back up my business records in a private repository at GitLab in the USA (certified under the Swiss-U.S. Data Privacy Framework).

The same applies to the project briefing, a more detailed form I send you as a link when we work on a project together.

More about Resend: resend.com/legal/privacy-policy.

When I contact you

Now and then, I introduce my work to businesses in the region by email. For this I use publicly available business contact details, for example from the company’s website. If you don’t reply, I delete them after 12 months at the latest. If you’d rather not hear from me again, a short reply is enough.

Website check

When you use the website check, my server fetches the website you enter once and has its speed measured by Google PageSpeed Insights (Google LLC, USA, certified under the Swiss-U.S. Data Privacy Framework). Google only receives the address, not your IP address. I keep the checked address and the result at Cloudflare for up to 12 months, without any details about who ran the check.

Local storage in your browser

To remember your preferred language, the website stores a small value in your browser’s local storage. If you switch on the layout grid, that setting is kept for the current session. These values never leave your device and are not used for tracking. In the project briefing, your answers are also saved as a draft as you go, so nothing gets lost. They’re only transmitted when you send the briefing, and the draft is deleted afterwards. You can delete all of this at any time in your browser settings or in the briefing itself.

Links to other websites

This website links to other websites, for example social media profiles. Once you follow such a link, the privacy policy of that website applies.

Your rights

You have the right to request information about your personal data, and to have it corrected or deleted. You can also object to its processing and ask for your data in a common format. Where the GDPR applies, you have the right to restrict processing and to lodge a complaint with your local supervisory authority.

In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

Changes

This privacy policy may be updated when the website or the legal situation changes. The version published here applies.