DE
Menu
DE

Legal

Privacy policy

This policy describes which personal data is processed when you visit pahldigital.ch or send an enquiry – in accordance with the revised Swiss Federal Act on Data Protection (FADP) and, for visitors from the European Economic Area, the GDPR.

Pahl Digital Art Owner: Adrian Pahl Seestrasse 34 8802 Kilchberg ZH Switzerland Email: hallo@pahldigital.ch Phone: +41 79 868 75 16 Web: pahldigital.ch
  • No cookies, no tracking, no analytics or advertising tools.
  • No resources from third-party servers: fonts, graphics and scripts come from our own server.
  • A single value in your browser storage: your light/dark choice, which we cannot read.
  • Your contact details are used to answer your enquiry; technical checks protect the form against spam and abuse.
  • Servers in Switzerland, administered and hardened by us.

Form protection also operates without cookies or external CAPTCHA services. The details follow in the next sections.

The controller within the meaning of Art. 5 let. j FADP and Art. 4 no. 7 GDPR for the processing of personal data on this website is the sole proprietorship Pahl Digital Art, owner Adrian Pahl, Seestrasse 34, 8802 Kilchberg ZH, Switzerland. For privacy enquiries, contact the owner via the email address given above with the subject “Privacy”.

We process as little personal data as possible, for as short a time as necessary and only for the purposes stated here (data minimisation, storage limitation, purpose limitation, good faith). Sensitive personal data within the meaning of Art. 5 let. c FADP is not processed on this website – please do not submit such information through the contact form either.

When you visit, your browser transmits technically necessary details, in particular the IP address, the time, the requested path and browser and TLS connection data. Without these details the server cannot deliver the page. We do not use them for audience measurement, profiling or advertising.

The website is designed for data-minimising logging: the web server keeps no access logs containing personal data. The operating system, firewall, abuse protection and the hosting provider's infrastructure may nevertheless process error or connection data for availability and security. To protect the contact form against automated mass submissions, we use the network address for time-limited access counters in the server's memory. It is neither stored permanently for this purpose nor linked to the stored enquiry.

This website sets no cookies. Your browser stores your appearance choice, “pda-theme-v1” (light or dark), and language, “pda-language-v1”, in LocalStorage. The Launchpad page also retains the previous “lang” preference. This keeps your choice when you move between pages. Links between our pages and the Pahl shop may carry the language and appearance as URL parameters, which also sends these preferences to the server being visited. They are used for presentation, not advertising. You can delete the values at any time through your browser's storage settings. The shop's separate privacy information covers its own access and preference cookies.

When you use the contact form, we process the details you enter: name, company (optional), email address, project type and message. To handle enquiries, we use a protected area on our server and the Pahl Digital Art email mailbox. The website server sends messages over encrypted connections wherever the receiving mail server supports them.

We use these details to answer your enquiry, for any collaboration that may follow, and to protect against spam and abuse. If you write to us directly by email, we receive the details contained in your message and use them for the same purposes.

If you contact us via WhatsApp, the conversation runs through the service of WhatsApp Ireland Limited (Meta). WhatsApp processes your phone number, timestamps and other metadata under its own privacy policy; message contents are end-to-end encrypted. We use WhatsApp only for the conversation you start yourself, keep no contact lists and do not pass your number on. If you prefer not to use WhatsApp, the form and email reach us just as well.

To protect against automated enquiries, we use the open-source software ALTCHA. Your browser performs a short computation and sends the resulting proof to our server. The required files are served by our server, which also verifies the proof.

Our integration sets no cookies and records no mouse, touch or keyboard movements. No data is transmitted to ALTCHA or an external CAPTCHA provider. The protected form requires JavaScript; you can alternatively contact us directly by email.

We also check the domain of your email address through DNS. Only the domain part is sent for name resolution, not your full email address or message. We automatically check enquiry content on our own server for spam and identical duplicate submissions.

  • Providing the website, securing the infrastructure and protecting against spam and abuse – Art. 31 para. 1 FADP (overriding private interest) and Art. 6 para. 1 let. f GDPR (legitimate interest).
  • Answering enquiries and initiating an engagement – Art. 6 para. 1 let. b GDPR (pre-contractual measures); under the FADP the principles of Art. 6 FADP apply.
  • Meeting statutory retention obligations, for instance under Art. 958f of the Swiss Code of Obligations – Art. 6 para. 1 let. c GDPR.

The website runs on a server operated by FireStorm ISP GmbH, Kirchenrainstrasse 27, 8632 Tann ZH, Switzerland. The hosting provider supplies the underlying infrastructure and therefore has technical access to the machine; to that extent it is a processor within the meaning of Art. 9 FADP. We are responsible for the operating system, web server and configuration ourselves. The domain and name servers of pahldigital.ch are also held with FireStorm ISP GmbH; the technical query data arising there is neither received nor evaluated by us.

The email notification for an enquiry is delivered to the Pahl Digital Art mailbox, where it is stored on our behalf by the mailbox's email provider. Personal data is not passed on to any other third parties unless we are legally obliged to do so.

We obtain hosting, domain and name resolution from a Swiss provider, and the website loads no resources from third-party servers. When you open an external link – such as the WhatsApp link – your browser connects to the respective provider. If you contact us via WhatsApp, data may reach Meta in the USA; Meta is certified under the Swiss-U.S. Data Privacy Framework. Where a provider's technical subcontractors transfer data to a country without an adequate level of data protection, the safeguards required under Art. 16 FADP and Art. 46 GDPR apply.

  • Enquiries: until they have been dealt with conclusively and for at most twelve months thereafter, unless a business relationship arises. Business-relevant correspondence is retained for ten years in accordance with Art. 958f of the Swiss Code of Obligations.
  • Form protection: hashes derived from the content of accepted enquiries are used for at most 24 hours to recognise identical duplicate submissions. This period applies to duplicate detection; the enquiry itself is subject to the retention rules above.
  • Technical operating and security data: only as long as required for operation, fault analysis or abuse protection.
  • Browser storage: remains in your browser until you delete it.

You have the right to information (Art. 25 FADP / Art. 15 GDPR), rectification (Art. 32 FADP / Art. 16 GDPR), erasure (Art. 32 FADP / Art. 17 GDPR) and data portability (Art. 28 FADP / Art. 20 GDPR) and – for data subjects in the European Economic Area – to restriction of processing and objection (Art. 18 and 21 GDPR). Please use the email address given above; we may request reasonable proof of identity (Art. 16 para. 5 DPO).

Complaints can be addressed to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. Data subjects residing in the EEA may additionally contact the supervisory authority of their country of residence.

All connections are encrypted with HTTPS (TLS 1.2 or newer) and enforced through HSTS. A strict Content Security Policy prevents third-party scripts from being loaded. The web service runs with minimal privileges in an isolated system environment; enquiries are stored in an area readable only by the service. We thereby take appropriate technical and organisational measures under Art. 8 FADP and Art. 32 GDPR.

This website performs neither profiling nor automated individual decision-making within the meaning of Art. 21 FADP or Art. 22 GDPR. All visitors receive the same content.

Swiss law applies. We update this privacy policy when the website or the legal requirements change; the version published here is authoritative.

Last updated: 20 September 2026