Privacy policy

Data controller

• Cédric Daul
• Studio Faber, sole trader
• Rue des Longs-Prés 25, 3960 Sierre
• bonjour@studiofaber.ch

Data collected

This site never asks who you are in order to browse it: no account, no sign-up. Two forms of processing do exist, however. Audience and journey measurement (detailed under “Cookies and trackers”) records browsing data tied to a random technical identifier, without your name and without your IP address. The contact form collects what you write into it: name, email address, type of service requested and message, transmitted with your explicit consent.

Purpose

Form data is used solely to respond to your enquiry. It is not used for commercial or advertising purposes and is not sold.

Legal basis

Processing is based on your consent (Art. 6 para. 6 nFADP; Art. 6(1)(a) GDPR for visitors from the European Union), given via the consent checkbox in the form.

Processors and recipients

Your data passes through the following services, which are required for the site and its contact form to operate:

• Amplitude (European infrastructure)

  Measures the browsing journey and records masked sessions, to understand what blocks visitors on the site and fix it

  Amplitude Inc.; account opened on the European infrastructure, event data stored in the European Union. No email address and no IP address transmitted; anything you type into a field is masked before recording

  amplitude.com/privacy

• Brevo (formerly Sendinblue)

  Sending and receiving emails submitted through the contact form

  Headquartered in France (EU); data processed within the European Union

  www.brevo.com/legal/privacypolicy/

• Cloudflare Turnstile

  Bot protection for the form (server-side verification, no visible CAPTCHA)

  Cloudflare Inc., United States: challenge data is limited to bot detection only, no advertising tracking

  www.cloudflare.com/privacypolicy/

• Upstash

  Rate-limiting to prevent form abuse

  Count data held in memory; no personal data stored

  upstash.com/trust/privacy.pdf

• Vercel

  Hosting the site and server functions (European region, fra1)

  Vercel Inc., United States: functions pinned to EU region; no form data is stored on Vercel

  vercel.com/legal/privacy-notice

Retention

Emails received via the form are kept in the Brevo inbox for the time needed to handle your enquiry, then deleted or archived. No contact database is maintained.

Processing location

Data is processed in Switzerland and within the European Union. No personal data from the form is transferred to third countries without appropriate safeguards.

Cookies and trackers

This site uses no advertising cookies and does not track you across sites. Three measurements coexist. Vercel Web Analytics and Speed Insights count page views and measure loading speed, anonymously and without cookies. Amplitude measures the browsing journey in order to improve the site: pages viewed, sections read, buttons clicked, plus a session recording (scrolling, pointer movement, clicks). This measurement relies on a random technical identifier stored in your browser's local storage, never on your identity: no IP address is transmitted to us, and anything you type into a field is replaced by asterisks before recording, so the content of your entries is never visible. Finally, a functional cookie (NEXT_LOCALE) remembers the language you choose; that is all it does. None of these measurements serves advertising, high-risk profiling or data resale: for processing of this kind, the Swiss nFADP requires transparent information and a right to object, not prior consent, which is why no banner is forced upon you. You may object at any time by blocking trackers in your browser or via an extension, or by writing to bonjour@studiofaber.ch: data concerning you will then be deleted.

Your rights

You have the right to access, correct, delete and object to the processing of your personal data. To exercise these rights, write to bonjour@studiofaber.ch and describe your request. You will receive a response as soon as possible, and within 30 days at the latest.

Supervisory authority

If a dispute cannot be resolved directly, you may contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch. Visitors from the European Union may contact the data protection authority of their member state.

Security

The site is served over HTTPS with hardened security headers (HSTS, CSP, X-Frame-Options). The form is protected against automated submissions (Turnstile, rate-limit). No passwords or sensitive data are stored.

Updates

This policy may be updated to reflect changes to the site or applicable regulations. The date of the last revision appears at the bottom of this page.