Privacy

Controller and contact

maske.majamogg@gmail.com
+41 79 931 43 84

You can also use these contact details for privacy enquiries.

Website operation and server logs

The website is hosted on a server in Switzerland. Visits involve processing technically necessary connection data, particularly the IP address, time, requested path, HTTP method, response status and amount of data transferred. This serves website delivery, error analysis and protection against abuse. People responsible for technical operation have access to it.

The web server logs the URL path without query parameters. Logs with entries are rotated daily; no more than 14 archive files are retained. When there are no visits, a file may remain for longer. The number of archives therefore does not guarantee deletion after 14 days.

Where the GDPR applies, this operation is based on the legitimate interest in a secure, accessible website (Article 6(1)(f) GDPR). The connection to the website is encrypted using HTTPS.

Images, fonts and external links

Fonts, images and galleries are loaded from this website. No Google Fonts, social media feeds, maps or external video players are embedded for this purpose. Links to Instagram, Facebook, Crew United and other reference sites are ordinary links. Your browser connects to an external website only when you open its link. That provider’s information then applies.

Contact form, email and telephone

The contact form requires a name, email address and message. Telephone, occasion, preferred date, place or country, package and budget are optional. I process these details to answer your enquiry and, where relevant, prepare an offer or booking. Please provide only the information needed. File attachments are not supported.

When submitted, your details are sent via HTTPS to the website’s own web server in Switzerland. If form delivery is enabled, the server forwards the enquiry through the configured SMTP service exclusively to my fixed Gmail mailbox. If delivery is disabled, the form displays a notice; you can then reach me directly by email or telephone. No automatic confirmation email is sent.

The contact address is a Gmail mailbox, so email communication uses Google Gmail. Messages and connection data may also be processed outside Switzerland and the European Economic Area. Information about the service is provided in Google’s privacy policy. Clicking the email link opens your email application; that action does not send a message from the website.

Where the GDPR applies, enquiries about a potential booking serve pre-contractual steps or performance of a contract (Article 6(1)(b) GDPR); other correspondence serves the legitimate interest in handling it (Article 6(1)(f) GDPR). Details are retained for as long as necessary to handle the enquiry and any booking, meet legal retention obligations or protect legal claims. There is no single deletion period for all messages.

The necessary session cookie maja_session is set only when you use the form and delivery is enabled. It is HttpOnly, SameSite=Strict and also Secure over HTTPS. It protects the form against unauthorised submissions and limits abuse. The cookie and server session are valid for no more than one hour. The session and attempt counters are held in server memory; expired sessions are cleaned up when new sessions are created. This form protection is not used for advertising.

Browser storage

No optional advertising or analytics services are currently configured. No consent banner therefore appears during a visit, and no new consent choice is stored.

If optional services are configured and you make a choice, the website stores it in your browser’s local storage under maja_privacy_v1. The entry contains the choice version, configured service identifiers, your consent or rejection for each service, the time and expiry date. It contains no visitor identifier or IP address and is not sent to a consent server. The choice is valid for no more than 180 days; this is a technical setting. You are asked again after expiry, deletion of browser storage or a change in service configuration.

This storage is used solely to respect and document your privacy choice locally. Where the GDPR applies, the basis is the legitimate interest in respecting and documenting that choice (Article 6(1)(f) GDPR). Optional advertising processing instead requires your consent (Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG).

Change and withdraw your choice

Privacy settings are always available through the footer link. Withdrawal takes effect for the future. If you deselect a service that has already loaded, the website saves your new choice, removes its own accessible marketing cookies and reloads the page to stop the loaded code. It cannot delete cookies from other domains or inaccessible cookies. Withdrawal does not retrieve data already lawfully transmitted.

Your rights

Under applicable data protection law, you may in particular request access and correction and, where the relevant conditions are met, deletion, restriction or delivery or transfer of your data. You may withdraw consent for the future. Where the GDPR applies, you may object to processing based on legitimate interests for reasons relating to your particular situation; you may object to direct marketing processing at any time.

Please use the contact details above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) with privacy concerns. Where the GDPR applies, you have the right to lodge a complaint with a competent supervisory authority in the EU, particularly where you habitually live, work or where the alleged infringement occurred.