Privacy policy
As of 25 September 2026
This policy explains which personal data we process when you visit this website or contact us, and why. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR). If the versions differ, the German version prevails.
1. Controller
The controller for the data processing on this website is: Artacoana Omid Ghorbani Laubstrasse 14 6430 Schwyz Switzerland Email: [email protected]
You can reach us at this address with any question about data protection.
2. In brief
We process only the data needed to run the website and answer your enquiries. We do not use cookies for statistics, advertising or tracking, we use no analytics or advertising services, and we embed no social media plugins.
Personal data arises when you visit the website (section 3), when you write to us through the contact form or by email (section 4), and when the contact page loads the Cloudflare spam protection (section 5).
3. Hosting and server log files
The website runs on a virtual server operated by Contabo GmbH, München, in a data centre in Germany. The provider processes data on our behalf. A data processing agreement is in place with the provider.
On every visit the web server automatically records technical data in log files: the IP address, date and time, the page requested, the response status, the amount of data transferred, information about your browser and operating system (user agent) and, where applicable, the page you came from.
We process this data to deliver the website, to keep it secure and stable, and to fix errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Logs are as a rule deleted after 14 days at the latest.
4. Contact form and email
If you use the contact form, we process your name, email address, phone number (optional), the subject of your enquiry, your message and the language of the website. We also store a shortened value from which your IP address cannot be recovered, which lets us match an enquiry to the server logs in case of abuse.
We use this information to answer your enquiry and, where relevant, to prepare a sample or an offer. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries ((f)).
The enquiry is stored in a database on our servers. We also receive an email notification, which is sent through the email service of the artacoana.ch domain. If you write to us directly by email, we process your details in the same way. Please note that ordinary email can be read by third parties while in transit over the internet.
Providing your details is voluntary. Without a name, email address and message, however, we cannot answer your enquiry. We delete enquiries as soon as we no longer need them, and at the latest 24 months after receipt, unless a statutory retention duty applies.
5. Spam protection with Cloudflare Turnstile
To protect the contact form from automated requests and abuse, we use the Cloudflare Turnstile service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA on the contact page.
When you open the contact page, your browser loads a script from Cloudflare servers. Cloudflare receives technical data such as your IP address and information about your browser and device in order to decide whether the request comes from a human. When you submit the form, we send the result of the check and your IP address to Cloudflare to confirm it. Nothing from Cloudflare is loaded on any other page.
The legal basis is our legitimate interest in protecting against abuse (Art. 6(1)(f) GDPR). Cloudflare may process data in the USA. To our knowledge Cloudflare is certified under the EU-U.S. Data Privacy Framework (and the Swiss-U.S. Data Privacy Framework); standard contractual clauses apply in addition. More information: https://www.cloudflare.com/privacypolicy/
6. Cookies, local storage and the notice at the bottom of the page
This website does not set any cookies itself. If you confirm the notice at the bottom of the screen with “OK”, your browser remembers this locally (local storage) so the notice does not appear again. This information does not leave your device. Cloudflare Turnstile may store technically necessary data for the check in your browser.
7. Fonts, images and videos
Fonts, images and videos are delivered from our own server. No connection is made to font or media servers of third parties such as Google.
8. Recipients and transfers abroad
The only recipients of your data are the service providers named above: the hosting provider, the email service and Cloudflare. We do not sell personal data and do not pass it on for advertising purposes.
Our server is in Germany, that is, in the European Economic Area, which under both Swiss and EU law offers an adequate level of data protection. Cloudflare may transfer data to the USA (section 5).
9. Data security
We take appropriate technical and organisational measures to protect your data, for example encrypted transmission over HTTPS and protection of the form against abuse. Complete security on the internet cannot, however, be guaranteed.
10. Your rights
Within the limits of the applicable law you have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive or transfer it, to object to its processing and to withdraw any consent at any time. Write to us at [email protected] for this. We may ask for proof of your identity.
You may also lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU with the data protection authority where you live.
11. Changes
We may amend this policy at any time, for example when the website or the law changes. The version published here applies.