Privacy Policy.

Data Controller

The controller responsible for data processing on this website is:

What Data Is Collected?

This website processes personal data only to the extent necessary to operate the site and provide the services offered.

• Contact form: name, email address, project type, and the message you send.
• Server logs: IP address, browser, time of access. These are processed by the hosting provider for technical purposes and to prevent abuse.
• No cookies for tracking or advertising. Only a technical storage (localStorage) is used to remember your dark/light mode and language preference.

Purpose of Processing

Your data is processed exclusively to respond to your inquiry and to deliver any resulting services. Data is not passed to third parties for advertising purposes.

Third-Party Services

Certain features rely on third-party providers. Where this is the case, their privacy policies apply in addition. Some of these providers (Calendly, Vercel) are based in the United States; data transfers rely on appropriate safeguards, including Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

• Web3Forms — contact-form delivery — privacy policy
• Calendly — discovery-call scheduling — privacy notice
• Vercel — hosting — privacy policy
• Google Fonts — typography — fonts are self-hosted at build time via next/font; no runtime requests are made to Google.

Your Rights

You have the right at any time to access the data stored about you, to have it corrected, deleted, or restricted in processing, as well as the right to object to processing and the right to data portability. Contact janis@hiestanddigital.ch.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) or, if you reside in the EU, with the data protection authority competent for your country.

Data Security

This website uses HTTPS to encrypt the transmission of your data. Data is not kept longer than necessary for the respective purpose. Contact data from inquiries that do not lead to an engagement is typically deleted within 12 months; server logs are retained by the hosting provider according to its own policy. This website does not use automated decision-making or profiling.