Privacy Policy

David Sigg Fotografie · Lächelwerk.ch, Muttenzerstrasse 105, 4133 Pratteln BL, Switzerland. Contact:

info@laechelwerk.ch · +41 79 943 54 77

When you enquire or contact us, we process your contact details, event dates and venue, guest count, selected booth, package and extras, and your message. Where applicable, this includes photography/support times, separate event days, layout preferences, company name, invoice recipient/address and order number/PO.

These details are used for advice, quotes, availability checks, booking, event services and invoicing. The internal customer records may also contain contact history, notes, follow-up tasks, offers, invoice numbers/items and payment status. Booking enquiries also include the detected IP address and, where available, an approximate location for security and traceability.

For enquiry acknowledgements, offers, booking confirmations and invoices, your email address and the necessary booking details are passed to the email delivery provider. Customer emails are sent in German or English according to the language of the enquiry.

Personal booking and layout links contain an access key. Treat these links as confidential and share them only with people who should have access to your booking.

Private online deposits and expressly offered online final payments are processed through Stripe. Stripe and the technical payment connection through Lovable receive the necessary booking, amount and payment details. Payment details are entered in the Stripe checkout interface; full card numbers are not stored in the booking records. Available payment methods depend on the device and payment service.

Business customers pay exclusively by invoice without a deposit. For bank transfers using Swiss QR invoices or payments on site, the participating banks or services such as TWINT and SumUp process the necessary payment data under their own privacy policies.

The following providers are used for hosting, the database, email delivery, galleries and payments. They receive data only as required for their service. Data is not sold or shared for other companies’ advertising.

• Lovable Cloud (Lovable, Sweden): website hosting, database, email delivery and live view · processing in the EU and the USA
• Stripe (Stripe Payments Europe Ltd., Ireland): online payments · processing in the EU and the USA
• Scrappbook (Photostore24.online GmbH, Düsseldorf, Germany): password-protected online gallery · stored mainly in the EU, some subprocessors (e.g. Heroku, AWS, Cloudflare) also in the USA
• Google Fonts (Google, USA): fonts, see section 8
• WhatsApp and Meta ads (Meta Platforms Ireland Ltd., Ireland): see section 9 · processing in the EU and the USA

The Swiss Federal Council recognises EU countries as providing adequate data protection. For transfers to the USA, the providers rely on certification under the Swiss-U.S. Data Privacy Framework or on standard contractual clauses.

Access to internal customer, booking and invoice records is limited to authorised people; admin access requires two-factor authentication. Enquiries and business records are retained for handling requests, fulfilling contracts and documentation. Accounting records are generally subject to a statutory retention period of ten years.

In the visit statistics, IP address and location (city) are deleted automatically after 24 hours; the remaining counts are kept without personal reference. No automatic deletion period is configured for enquiries without a booking; they remain stored until manually deleted. Deletion requests are assessed taking statutory retention duties and legitimate documentation purposes into account.

Booth photographs are provided free of charge for one year in a password-protected online gallery after the event. Delivery of event photography follows the agreed offer. Gallery credentials should be shared only with intended recipients.

Advertising use of booth or event photos, including the 50% advertising promotion, requires separate, explicit consent from identifiable individuals. The organiser’s approval does not replace guests’ consent. For minors, consent from the legal representative is required. Consent may be withdrawn for future use.

Ordinary connection data is processed to operate and secure the website. Browser storage includes the selected language, whether the promotion dialog has already appeared and session information. Browsers marked as the provider’s own devices retain an exclusion from visitor counting. Internal statistics do not use analytics cookies. Third-party statistics and advertising services (section 9a) only load with your consent.

Page views record the time, page path, IP address, device type, source channel and, where available, country/city. A daily identifier is also derived from the date, IP address and browser information to recognise repeat views within a day. Because IP addresses are stored, these statistics are not anonymous; IP address and city are deleted after 24 hours, only the country is kept. They are used for internal analysis, not personalised advertising, and are accessible only in the protected admin area.

The last recorded page may be shown in the statistics; it does not reliably prove the page on which a visit actually ended. Known bots, preview traffic and the provider’s own visits are filtered where technically identifiable.

The live display transmits an encrypted IP value with the current page and device type through a real-time service. Decryption requires a server-side admin check. This live transmission is separate from the stored visit statistics described above.

Visit and enquiry attribution: browser session storage keeps the entry page, referring website and campaign details such as UTM parameters or a Google Ads click ID. Source information is processed for internal statistics on every page view; the complete stored campaign details are additionally transmitted with a submitted enquiry. These details are not reported back to Google Ads for advertising tracking.

The website loads fonts through Google Fonts. This establishes a connection to Google servers and transmits your IP address. Google’s privacy information also applies to this processing.

Links to Google reviews, WhatsApp, social networks and other external services lead to those providers’ services. When you click, the respective operators’ privacy policies apply, including WhatsApp/Meta for WhatsApp.

You can contact David via WhatsApp Business, including through links on this website or the “Chat on WhatsApp” button in his ads. WhatsApp (Meta Platforms Ireland Ltd.) processes your phone number, profile name and message content under its own privacy policy; transfers to the USA are possible. New contacts automatically receive a greeting message. Messages relating to an enquiry or booking may be added to the internal customer records. If you prefer not to use WhatsApp, you can reach David by email or phone.

David runs ads on Facebook, Instagram and WhatsApp. Meta processes data about your interactions with an ad under its own terms; David only receives aggregated statistics (e.g. reach or number of conversations started). The Meta Pixel on this website only loads with your consent (see section 9a).

These services only load after you agree in the cookie banner. Without consent no data is sent to them (Google Consent Mode v2, default “denied”). They are never active on admin, login or personal booking and payment pages. Your choice is stored in your browser with the time and text version.

Statistics – Google Analytics (Google Ireland Ltd. / Google LLC, USA): analysis of how pages are used; processes e.g. device and browser data, shortened IP address, pages viewed and cookie identifiers.

Marketing – Google Ads (Google) and Meta Pixel (Meta Platforms Ireland Ltd. / Meta Platforms Inc., USA): measuring whether an ad leads to an enquiry. A successfully submitted enquiry is reported as an event (“lead”) – without name, email or form content.

Transfers to the USA: Google and Meta may transfer data to the USA. Both are certified under the Swiss-U.S. Data Privacy Framework; standard contractual clauses also apply. Access by US authorities cannot be ruled out.

Withdrawal: Use “Cookie settings” in the footer to change or withdraw your consent at any time; the page then reloads so no services remain active.

The protected admin area provides internal AI assistance through Lovable and a connected AI provider. The messages entered by the operator are transmitted; visitor or booking data is not automatically transferred into the chat. Chat history is saved locally in the operator’s browser.

You may request access to your stored personal data, its correction or deletion, and a copy of your data in a common electronic format, and withdraw consent for future use. Statutory retention duties and other lawful grounds may prevent immediate deletion. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) about privacy concerns. Contact for requests:

info@laechelwerk.ch · +41 79 943 54 77

Please also see the Terms and Conditions.