Privacy policy

This English version is a translation provided for information. In case of any discrepancy, the German version is authoritative.

This privacy policy explains which personal data is processed when you visit chrismachts.ch, book an appointment, send an enquiry or work with chrismachts, for what purpose, and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP). For people in the European Economic Area (EEA), for example in Liechtenstein or Austria, it contains additional information under the EU General Data Protection Regulation (GDPR).

Controller

The controller responsible for processing personal data is:

Christian Ördög
chrismachts
Balgacherstrasse 9a
9445 Rebstein
Switzerland
Email: hallo@chrismachts.ch

In this privacy policy, ‘chrismachts’ refers to Christian Ördög as the controller.

Summary

• The website does not set any cookies.
• Audience measurement works without cookies and evaluates visits only in aggregate.
• There is no newsletter, no advertising tracker and no social media plug-in.
• Information from appointment bookings and forms is used only for the conversation or enquiry and is stored with Hostpoint AG in Switzerland.
• Video calls take place via Google Meet. Nothing is recorded, and notes are only taken with the consent of all participants.
• Personal data is not sold and not passed on to third parties for advertising.

What data is processed and why

Visiting the website

When you open the website, the hosting provider Vercel automatically processes technical data that every browser transmits (server log data):

• IP address
• date and time of access
• page or file requested
• information about the browser and operating system

This data is needed to deliver the website, to keep it stable and secure, and to detect and prevent misuse such as attacks. It is not combined with other data and is kept only for a short time, unless it is needed for longer to investigate a security incident.

To protect the forms and the appointment booking from misuse, the website counts how often an IP address submits them. For this, the IP address is held in the server's memory for at most one hour and is not stored permanently.

Emails from chrismachts show a logo and a portrait photo that are loaded from the website when the email is opened. This produces the same server log data. The emails contain no tracking pixels, and opening them is not analysed.

Audience measurement

The website uses Vercel Web Analytics to see which pages are visited and how often, and to improve the website. It does not set cookies. It records information such as the page visited, the referring page, the country, and the device type, operating system and browser. Visits are evaluated only in aggregate. No user profiles are created, and visitors are not tracked across different devices or websites.

Cookies and storage in your browser

The website does not set any cookies. If you switch between the light and dark theme, your browser stores this choice locally (local storage) so that it is kept for your next visit. This setting is not transmitted to chrismachts or to third parties, and you can delete it at any time in your browser settings.

Fonts are loaded directly from chrismachts.ch; there is no connection to Google Fonts or other font providers. The website does not embed any social media plug-ins, maps or third-party videos.

Appointment booking

You can book a call directly on the website. The booking tool is chrismachts’ own application and does not embed any third-party widget. A booking involves the following information:

• name and email address
• business or website
• topic of the conversation
• chosen time slot and type of meeting
• message (optional)
• how you found chrismachts (optional)
• phone number (optional, required for a phone call)
• address, if the meeting takes place on site

This information is transmitted via the website’s servers to the chrismachts calendar at Hostpoint AG in Switzerland and stored there. It is not stored permanently on the website’s servers. Confirmations and reminders are sent by email via Hostpoint AG. The information is used to prepare and hold the conversation. A booking is not possible without the required fields.

Appointment data is deleted no later than 12 months after the appointment unless it leads to an engagement.

Video calls

Video calls take place via Google Meet. The link is included in the booking confirmation. You don't need a Google account to take part: after opening the link you enter a name and chrismachts admits you to the call. During the call, Google processes the data needed for it, in particular the name you enter, video and audio, your IP address and technical information about your device. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be transferred to Google LLC in the USA.

Calls are not recorded. chrismachts only creates written notes (a transcript using automatic speech recognition) if all participants expressly agree at the start of the call; the service used for this is named at that point. The notes are used only to prepare a quote and, like appointment data, are deleted no later than 12 months after the appointment unless it leads to an engagement.

Free website check

The form processes the following information: address of the website to be checked, email address, industry (optional) and how you found chrismachts (optional).

The information is sent via the website’s servers by email to the chrismachts mailbox at Hostpoint AG. A confirmation of receipt is sent to the email address you provide, also via Hostpoint AG. So that the same address does not receive any number of confirmations, it is kept in the server's memory for this purpose for at most 24 hours and is not stored there permanently. The information is used only to handle your enquiry. For the website check, the website you name is reviewed as it is publicly accessible. Your email address is not used for a newsletter or for advertising.

Enquiries that do not lead to an engagement are deleted no later than 12 months after they have been dealt with.

Contact by email

If you write to hallo@chrismachts.ch, your email address, the content of your message and any attachments are processed in order to reply. The mailbox is hosted by Hostpoint AG in Switzerland. The same retention rules apply as for enquiries sent via the forms.

Quotes and engagements

For quotes, engagements and support plans, chrismachts processes the contact and contract data of the client and its contact persons, such as name, business, address, email address, phone number, correspondence and billing and payment details. This data is used to perform the contract. It is kept for as long as the engagement requires and statutory retention obligations apply, in particular for accounting and tax records.

Where chrismachts processes personal data on behalf of a client as part of an engagement, for example customer data on a website, the client is the controller for that data. The terms and conditions of chrismachts and any separate agreements apply.

Legal bases

chrismachts processes personal data in line with the principles of the FADP: lawfully, in good faith, proportionately, only for recognisable purposes and transparently.

Where the GDPR applies, processing is based on the following legal bases:

• contract and pre-contractual steps (Art. 6(1)(b) GDPR): appointment bookings, website checks, quotes, engagements and support
• legal obligation (Art. 6(1)(c) GDPR): retention of accounting and tax records
• legitimate interests (Art. 6(1)(f) GDPR): secure and stable provision of the website (server log data), cookie-free audience measurement to improve the website, replies to general enquiries
• consent (Art. 6(1)(a) GDPR): where consent is obtained in an individual case; it can be withdrawn at any time with effect for the future

Recipients and processors

chrismachts passes on personal data only where this is necessary for the purposes described. The following service providers process data on behalf of chrismachts:

• Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA: hosting and delivery of the website via a global network, server-side functions in the EU (Frankfurt), server log data and audience measurement (Vercel Web Analytics)
• Hostpoint AG, Rapperswil-Jona, Switzerland: email mailbox, appointment calendar and sending of confirmations and reminders

For video calls, Google also receives the data needed for the call (see “Video calls”). Google processes it under its own responsibility in accordance with Google’s privacy policy.

Partners and subcontractors may be involved in engagements. They receive data only to the extent they need it for their work and are bound by confidentiality. Authorities receive data only where there is a legal obligation to provide it.

Transfers abroad

Hostpoint AG stores data in Switzerland. The website’s server-side functions, which handle appointment bookings and forms, run in the EU (Frankfurt, Germany); under Swiss law, Germany provides an adequate level of data protection.

Vercel Inc. is based in the USA and delivers the website via data centres in various countries. Server log data and audience measurement data may therefore also be processed in the USA or in other countries. The USA is considered to provide an adequate level of data protection only for companies certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework. Transfers to Vercel are based on the Data Privacy Framework, insofar as Vercel is certified under it, or on standard contractual clauses. The same applies to video calls via Google Meet: Google LLC is certified under the Data Privacy Framework. Transfers to other countries without an adequate level of data protection are likewise based on standard contractual clauses or other safeguards provided for by law.

For people in the EEA, Switzerland is recognised as providing an adequate level of data protection under an adequacy decision of the European Commission.

Retention

chrismachts keeps personal data only for as long as necessary for the purpose or required by law:

• server log data: for a short time, according to the hosting provider’s settings
• audience measurement: aggregated reports, according to Vercel’s specifications
• appointment data and call notes: no later than 12 months after the appointment, unless it leads to an engagement
• enquiries via forms or email: no later than 12 months after they have been dealt with, unless they lead to an engagement
• engagement data: for the duration of the engagement and the statutory retention periods
• theme setting in your browser: until you delete it in your browser

Your rights

Within the scope of the applicable law, you have in particular the following rights:

• access to information on whether and which personal data about you is processed
• rectification of inaccurate data
• erasure of data, unless a retention obligation applies
• restriction of processing
• objection to processing, in particular where it is based on legitimate interests
• receipt or transfer of the data you have provided in a common electronic format
• withdrawal of consent with effect for the future

An email to hallo@chrismachts.ch is sufficient to make a request. chrismachts may ask for proof of identity to prevent misuse and usually replies within 30 days. Exercising your rights is free of charge, except in the cases provided for by law.

People in Switzerland can contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch. People in the EEA have the right to lodge a complaint with a data protection supervisory authority, in particular in their country of residence, for example the Liechtenstein Data Protection Authority, Datenschutzstelle (www.datenschutzstelle.li), or the Austrian Data Protection Authority, Datenschutzbehörde (www.dsb.gv.at).

No automated decisions

chrismachts does not make automated individual decisions and does not carry out profiling.

Data security

chrismachts protects personal data with appropriate technical and organisational measures. These include encrypted delivery of the website (HTTPS), protected access to hosting, mailbox and calendar, and access only by people who need the data for their tasks. Transmission over the internet, in particular by email, is never completely secure. A different way of sending confidential documents can be agreed.

Links to other websites

The website contains links to third-party websites. Their operators are responsible for how they process data.

Changes

chrismachts may update this privacy policy if the website, the services used or the legal situation change. The version published on this page applies.

Contact

Questions about data protection and requests concerning your own data can be sent to hallo@chrismachts.ch or by post to Christian Ördög, chrismachts, Balgacherstrasse 9a, 9445 Rebstein, Switzerland.