Privacy Policy

Fotowaschbaer, Franz Robert Berger, Feldstrasse 32, 9445 Rebstein, Switzerland
Data Protection Contact: [email protected]

We are committed to protecting your personal data in accordance with the Swiss Federal Act on Data Protection (DSG/nDSG) and, for EU/EEA customers, the General Data Protection Regulation (GDPR). This privacy policy explains what data we collect, why we collect it, and how we protect it.

• Performance of a contract (Art. 6(1)(b) GDPR): Processing your orders, bookings, and delivering photography services.
• Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, e.g. for marketing communications.
• Legitimate interest (Art. 6(1)(f) GDPR): Website functionality, fraud prevention, and improving our services.
• Legal obligation (Art. 6(1)(c) GDPR): Tax and accounting record-keeping as required by Swiss law.

• Contact information (name, email, phone number, postal address) when you place an order, make a booking, or contact us
• Order and payment information (items purchased, amounts, billing address, payment method via Stripe)
• Booking information (service selected, dates, event location, messages)
• Photography session information (event details, location data for travel calculation)
• Technical data (IP address, browser type, device information, pages visited) collected automatically when you visit our website

• Providing our photography services and fulfilling bookings
• Processing orders, payments, and generating invoices
• Communication about bookings, orders, and customer support
• Improving our services and website functionality
• Compliance with legal obligations (tax records, accounting)

We share data with the following service providers, each acting as a data processor under appropriate data processing agreements (DPAs):

• Stripe, Inc. (USA) — Payment processing and tax calculation. Stripe is certified under the EU-US Data Privacy Framework. Privacy policy: https://stripe.com/privacy
• Supabase, Inc. (USA) — Database hosting, file storage, and authentication. Servers located in the EU (Frankfurt). Privacy policy: https://supabase.com/privacy
• Resend, Inc. (USA) — Transactional email delivery (order confirmations, booking confirmations, download links). Privacy policy: https://resend.com/legal/privacy-policy
• Google LLC (USA) — Google Maps API for location geocoding and travel distance calculation during the booking process. Privacy policy: https://policies.google.com/privacy
• Vercel, Inc. (USA) — Website hosting and deployment. Privacy policy: https://vercel.com/legal/privacy-policy

We never sell your personal data to third parties.

Some of our service providers are based in the United States. Data transfers to the US are protected by the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), or the Swiss-US Data Privacy Framework, as applicable. Switzerland is recognized by the EU as providing an adequate level of data protection.

We use cookies that are essential for website functionality. For detailed information about specific cookies, please see our Cookie Policy. Cookie Policy

• Order and invoice data: 10 years (required by Swiss law, Art. 958f OR — Swiss Code of Obligations)
• Booking data: retained for the duration of the business relationship and up to 10 years thereafter for legal compliance
• Contact form submissions: deleted after 12 months unless related to an order or booking
• Technical/server logs: automatically deleted after 30 days
• All other personal data is deleted upon your request, unless retention is required by law.

• Right of access to your personal data (Art. 15 GDPR / Art. 25 DSG)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure — 'right to be forgotten' (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Swiss residents: You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), Feldeggweg 1, 3003 Bern, Switzerland (https://www.edoeb.admin.ch).

EU/EEA residents: You have the right to lodge a complaint with your national data protection authority (e.g., BfDI in Germany, DSB in Austria).