Privacy policy

Controller

The party responsible for processing personal data in connection with this website is:

Kazuvate Bajrami
Owner: Kasum Bajrami
Riehenstrasse 80
4058 Basel
Switzerland +41 78 670 79 73 kasumbajrami7@gmail.com

For questions about data protection and to exercise your rights, an informal email to the address above is sufficient. There is no obligation to appoint a data protection advisor, and none has been appointed. The owner himself is responsible.

Scope and legal basis

This policy describes which personal data arises when you visit this website, what it is processed for, who gets to see it and what rights you have.

The governing law is the Swiss Federal Act on Data Protection (FADP) in the version in force since 1 September 2023, together with the associated ordinance (DPO).

If you access this website from the European Economic Area, the General Data Protection Regulation (GDPR) may also apply. The data subject rights provided for there are treated in the same way as the rights under the FADP; no separate procedure is required.

No cookies, no tracking, no third-party scripts

This website stores nothing on your device. No cookies are set, and neither local storage nor session storage is used. That is also why there is no consent banner: there is nothing for you to consent to.

No analytics software is used. No Google Analytics, no Matomo, no comparable tool. Your behaviour on the site is not measured, recorded or analysed.

All components of the site, i.e. fonts, images, stylesheets and scripts, are delivered from the same server as the site itself. No Google Fonts, no third-party content delivery networks, no embedded maps, no video players and no social media buttons are loaded. Your visit is therefore not visible to third parties.

This is a deliberate decision, not an oversight. Third-party scripts cost loading time and hand over data that nobody needs to run this website.

Server logs

Every request for a website transmits technically necessary information to the server that delivers it. The hosting provider logs:

• the IP address of the requesting device
• date and time of the request
• the requested address and the status code returned
• the browser and operating system identifier (user agent)
• the referring page, if your browser transmits it

The sole purpose is technical operation: delivering the site, troubleshooting and defending against attacks and overload. This information is not combined with other data sources and is not used to recognise individual visitors. It is only analysed when there is a specific reason, i.e. a concrete malfunction or attack.

Contact form

You can send an enquiry via the form on the contact page. Only what you enter yourself is transmitted: first name, last name, email address, optionally your organisation, and your message. Required fields are marked as such. The form also sends the language of the page, so that we reply in your language, and the time the page was loaded for the spam check described below.

This information is used to answer your enquiry and to discuss any project. It is not used for advertising, not sold and not passed on, apart from the service providers named in section 7 that are needed for operation and delivery.

Two measures without a captcha protect against automated spam: a field that is invisible to you and that only machines fill in, and a check whether more than two seconds pass between loading and sending. No third-party service is involved and no user behaviour is analysed. A captcha would be more convenient for us and worse for you.

Enquiries by email and phone

If you write to us or call us, we process the resulting information, i.e. sender address, phone number and content of the message, to respond to your request.

On its way through the internet, an email is generally not protected against being read by others. Please do not send us particularly sensitive personal data unencrypted. For confidential matters, we will agree on another channel.

Service providers processing on our behalf

To keep the website available and make sure form messages arrive, we work with the following providers. They process personal data exclusively on our behalf and according to our instructions; corresponding contracts are in place.

No other service providers are involved. In particular, this website has no newsletter, no advertising network, no booking system and no payment provider.

Disclosure abroad

The providers named in section 7 have their registered office in the United States. Personal data is therefore disclosed abroad.

The disclosure is based on the Swiss-U.S. Data Privacy Framework, insofar as the provider concerned is certified under it, and otherwise on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (Art. 16 f. FADP). No other countries are involved.

How long data is kept

• Server logs: deleted by the hosting provider according to its own retention periods, usually within a few days to weeks.
• Enquiries not followed by an assignment: until dealt with, then for a maximum of 24 months, so that we can make the connection if you get in touch again.
• Documents on assignments awarded: ten years, because the business retention obligation under Art. 958f CO requires it.

Beyond that, personal data is deleted or anonymised as soon as the purpose of processing no longer applies.

Your rights

Within the scope of applicable law, you have the right to:

• request information on whether and which data about you is processed (Art. 25 FADP)
• have inaccurate data corrected (Art. 32 FADP)
• request the deletion or destruction of data
• object to processing
• obtain data you have provided to us in a common format or have it transferred to another party (Art. 28 FADP)

An informal email to the address above is sufficient. To prevent information reaching unauthorised persons, we may ask for proof of identity. You will usually receive a reply within 30 days; the information is free of charge.

If you disagree with the processing, you can contact the supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
Switzerland www.edoeb.admin.ch

Data security

The website is transmitted exclusively in encrypted form (TLS, recognisable by https and the padlock in the address bar). Your form entries are therefore protected in transit.

Only the controller has access to incoming enquiries. Access to the services used is secured with two-factor authentication. Nobody can guarantee absolute security for transmission over the internet.

No automated individual decisions, no profiling

No automated individual decision within the meaning of Art. 21 FADP takes place. No profile of you is created, and personal characteristics are not evaluated.

Changes to this policy

This policy is updated as soon as the website or the services used change. The version published on this page with the date stated above applies.

Details of the operator, legal form and place of jurisdiction can be found in the legal notice.