Data Protection Notice

Contents

  1. What I do
  2. Data collection and purposes
  3. Data controller
  4. Data protection contacts
  5. Updates to this notice
  6. General principles and rights
  7. Disclosure of data to third parties
  8. Data retention
  9. Data security
  10. Data in development environments
  11. Specific processing activities

1. What I do

Based in Switzerland, I design and manage professional websites with Swiss hosting, develop custom web software, build tailor-made mobile apps and provide ongoing technical management of projects.

2. Data collection and purposes

Personal data processed includes:

  • Technical data: IP address, browser type, operating system, browsing information collected automatically.
  • Voluntarily provided data: first name, surname, email, phone number, message content.
  • Contractual data: business correspondence, orders, quotes, invoices and operational project documentation.

Purposes and, where applicable, justification grounds (Art. 31 FADP) or legal bases (Art. 6 GDPR):

  • Managing enquiries submitted via the contact form or email (pre-contractual measures at the request of the data subject).
  • Planning, developing and maintaining commissioned websites, software and apps (performance of a contract).
  • Ensuring the technical operation of the infrastructure (hosting, security, backups) and documenting any anomalies (legitimate interest).
  • Publishing descriptions of completed projects in the online portfolio, unless otherwise agreed in writing with the client (objection possible at any time).
  • Analysing aggregated site usage to improve performance and content via Google Analytics, with opt-out available through the cookie banner, browser settings or the official add-on (consent or legitimate interest).
  • Fulfilling legal and tax obligations or protecting the controller's rights in the event of disputes (legal obligation/legitimate interest).

3. Data controller

Dennys Stauffer
Contrada Mondrigo 24, 6616 Losone, Switzerland
Email: info@dennys-stauffer.ch
Phone: +41 76 307 50 87

4. Data protection contacts

For questions or to exercise your data protection rights, please write to info@dennys-stauffer.ch. The competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), available at edoeb.admin.ch.

5. Updates to this notice

I reserve the right to amend this notice at any time. The version published on this page is always the current one; significant updates may be communicated through the usual channels.

6. General principles and rights

I process data lawfully, proportionately and transparently. I limit collection to the strict minimum, retain data only for the stated purposes and allow withdrawal of consent without retroactive effect on processing already carried out.

As a data subject you may:

  • Obtain confirmation of and access to your personal data.
  • Request rectification, updating or deletion within the limits of the law.
  • Object to or request restriction of processing.
  • Request portability of the data you have provided.
  • Withdraw consent at any time.
  • Lodge a complaint with the FDPIC or, where applicable, a competent EU authority.

Withdrawal may be exercised by writing to info@dennys-stauffer.ch; should automated communications be sent in the future, each message will include a direct unsubscribe link.

7. Disclosure of data to third parties

I share data only when it is essential to deliver the requested services or to fulfil legal obligations:

  • Infrastructure and hosting: providers with data centres located in Switzerland that host websites and databases.
  • Web3Forms: an external service that forwards contact forms via encrypted connections and may use data centres located outside Switzerland/the EU; appropriate contractual and technical measures are in place, as described in the Web3Forms privacy policy.
  • Google Analytics: Google Ireland Ltd. processes aggregated statistical data; any transfer to the United States is covered by standard contractual clauses and appropriate technical measures. Further details are available in the Google Analytics privacy policy, which also describes the official opt-out add-on.
  • Authorities: cantonal offices and social insurance institutions where required by tax or administrative regulations.

8. Data retention

  • Contact data and preliminary communications: retained for as long as necessary to manage the enquiry and related activities.
  • Contractual data, projects and accounting documents: retained for up to 10 years in accordance with the Swiss Code of Obligations and tax regulations.
  • Technical configurations and operational credentials: maintained for the duration of the contractual relationship and deleted or anonymised upon project closure.

Data is stored on servers located in Switzerland; any paper archives are kept in secured premises.

9. Data security

I apply appropriate technical and organisational measures, including HTTPS connections, regular backups, monitoring systems and access controls based on named accounts. Website and database backups are stored on servers located in Switzerland and made available only to authorised personnel. No electronic transmission or storage can be considered 100% secure, but I monitor the infrastructure to minimise residual risks. In the event of significant breaches posing high risks, I will inform those affected as required by applicable law.

10. Data in development environments

During development, testing and debugging activities, I prioritise the use of fictitious or anonymised data. Should it be temporarily necessary to work with snapshots, logs or database copies containing real client data, such information is limited to the strict minimum and deleted immediately upon completion of the checks. No real data is transferred to uncontrolled development environments; all operations are logged and relate exclusively to commissioned projects, not to simple website browsing.

11. Specific processing activities

a) Website and cookies

The website uses:

  • Strictly necessary/functional cookies (mainly session cookies): essential to ensure session security, remember the language and keep contact forms operational. Disabling them via browser settings may limit or prevent use of the website.
  • Analytical cookies (Google Analytics): measure visits in aggregated form. They are loaded only with prior consent and can be disabled via the banner, browser settings or the official add-on.
  • Marketing/third-party cookies: not currently used. Should advertising or remarketing tools be introduced in the future, they will only be activated with explicit consent and detailed information will be provided in the cookie banner.
  • Browser local storage (localStorage): the choice made in the banner is saved on your device under the key stauffer_cookie_preferences, so the request is not shown again at every visit. It is not a cookie and is never sent to any server; you can delete it by clearing the site data in your browser, or change it at any time via the "Cookie preferences" link in the footer.

b) Contact forms

The website form relies on the Web3Forms service, which transmits the submitted data via encrypted connections and forwards it to the dedicated email inbox. The information is used exclusively to respond or initiate a collaboration and is deleted when no longer necessary or upon conclusion of the initiated discussions.

c) Portfolio and case studies

Developed websites may be cited in the portfolio or described as case studies, including company name, URL and project features, unless otherwise agreed in writing with the client. Sensitive data or confidential information is never published. The client may request removal or updating of such references at any time.


Last updated: August 2026