Privacy

This website works without cookies and embeds no advertising networks. Visits are evaluated with Matomo, Cloudflare Web Analytics and Ahrefs Web Analytics, all three working without cookies and without an identifier in your browser that would recognise you. With Ahrefs the details leave my own systems; you will find more on that below.

Apart from the server logs that arise with every request for technical reasons, personal data only arises once you actively send me some, through the enquiry form or by email. What happens in each case is set out in detail below.

The owner named in the legal notice is the controller for the processing of personal data under the Swiss Data Protection Act (FADP) and, where applicable, the European General Data Protection Regulation (GDPR). No data protection officer has been appointed; this is not required for a business of this size.

For any question about data protection, an email to the address in the legal notice is enough.

What follows holds regardless of which tools are used to run the site:

• No advertising networks. There is no retargeting, no audience list is built, and no data is passed to advertising platforms.
• No social network embeds. There are no buttons or tracking pixels from Facebook, Instagram, LinkedIn or comparable services, not even ones that load after a click.
• No profiling and no automated individual decision-making. Your behaviour on this site is not turned into a profile, and no decision about your enquiry is taken automatically.
• No sale and no exchange of data. What you send me goes to no one else, apart from the service providers named in this policy.

This website is built without cookies. It does not need them to work, and it does not set any to recognise you.

To see which pages are read and how visitors find their way here, Matomo is used. The software runs on a server of my own at seo.printerking.ch; the data does not leave that server and goes to no other provider. Matomo is set up here without cookies: it places no identifier in your browser and does not recognise you across visits. What is counted are page views, the page a visit came from, the country and the kind of device used.

In addition, Cloudflare Web Analytics is used, the tool provided by my hosting provider. It likewise works without cookies and without an identifier in your browser, and records the same details. This evaluation, too, shows totals only, never individual people.

A third tool is Ahrefs Web Analytics. It belongs to the service I use to follow what this website is found for in search engines. This tool sets no cookies either, and it leaves no identifier in your browser.

It does record a little more than the other two, and that belongs here: the page called up, the referring page, operating system, device and browser, your browser language setting, and the location down to city level. It also counts two kinds of clicks without my setting that up: when you follow a link that leads away from this website, and when you submit a form. For the enquiry form that means the act of sending, not what you wrote.

Your IP address serves two purposes here: the location, and the question of whether several visits on the same day come from the same person. For that it is converted, together with your browser identification, into a check value whose salt changes daily. The address itself is discarded and not stored, according to the provider, and from the next day on the check value leads back to no one.

One difference belongs here explicitly: Matomo runs on a server of my own, and Cloudflare is the provider that delivers this website. With Ahrefs the details leave that circle. They go to a company outside Switzerland and the EU, Ahrefs Pte. Ltd., based in Singapore.

All three evaluations show totals only, never individual people.

Because no information is stored on or read from your device in the process, no consent is required, which is why you will not find a consent banner here. The legal basis is my overriding interest in knowing whether the content of this website serves its purpose (Art. 31 FADP; Art. 6(1)(f) GDPR). The transfer to Ahrefs in Singapore rests on the same basis. If that does not sit well with you: a content blocker in your browser holds the script back, and the website works just the same.

Should a tool be added in future that sets cookies or recognises you, it will be described here, and your consent will be asked for beforehand.

The website runs on Cloudflare. Retrieving a page produces log data for technical reasons, as with any web server:

• truncated or full IP address
• date and time of the request
• the address requested and the response status code
• volume of data transferred
• browser identification and, if sent by the browser, the referring page

This data is necessary to operate and secure the site, in particular to fend off overload and abuse attempts. It is not combined with other data and is not used to recognise individual people. The legal basis is the overriding interest in secure, functioning operation (Art. 31 FADP; Art. 6(1)(f) GDPR).

Cloudflare acts as a processor. Cloudflare operates a worldwide network, so for this log data processing outside Switzerland and the European Economic Area cannot be ruled out. The contractual basis for this is in place. This expressly does not apply to your uploaded files, see the section on design data.

Running the site also involves Cloudflare’s diagnostic and reporting tools: they show me error rates, response times and blocked attacks. They draw on the same log data described above and serve to detect and fix faults.

When you submit the enquiry form, the server writes one further line into the same log: the reference of the enquiry, the language, the number and size of the files, and whether the form was submitted with or without JavaScript. It contains neither your name nor your address nor anything from your message. It serves me as a count of the enquiries received and is subject to the same retention period as the other logs.

If you use the enquiry form, exactly the following details are processed:

Required

First name, surname, email address, your postal address (street, postcode and town) and your description.

Optional

Type of enquiry, company name, phone number, quantity, preferred material, colour preference along with any note on it, and target date. You may leave these fields empty; the enquiry can be submitted without them.

Attachments

Design or drawing files you upload.

The sole purpose is to answer your enquiry and prepare a contract. The legal basis is the performance of pre-contractual measures at your request (Art. 31(2)(a) FADP; Art. 6(1)(b) GDPR). Data is not passed to third parties for advertising purposes.

Uploaded files are stored in Cloudflare object storage (R2) and used solely to process your enquiry. They are not publicly accessible and cannot be found through search engines. That storage is bound to the jurisdiction of the European Union: your files are held there and do not leave it. This is not a location preference but a technically enforced constraint on the storage itself.

Access runs through cryptographically signed links that expire after fourteen days. Such a link can neither be guessed nor altered after the fact.

Your design data is treated confidentially, is not passed to third parties and is not evaluated for my own purposes, in particular not as a reference or example, unless you expressly agree.

The notification to me and the acknowledgement to you are sent through Microsoft’s business service (Microsoft 365). Microsoft acts as a processor. Processing outside Switzerland and the European Economic Area cannot be ruled out; the contractual basis for this is in place.

Please note: unencrypted email is an open medium. If you need to send particularly sensitive documents, get in touch and I will find another route.

Bulk automated submissions are fended off. This uses an extra field invisible to humans, a plausibility check on the time taken, a per-sender rate limit at server level, and a bot detection from Cloudflare called Turnstile.

Turnstile checks in the background whether the enquiry comes from a person. As a rule you have to do nothing for this, neither click images nor decipher characters; only in doubtful cases does a box appear for you to confirm. Technical characteristics of your browser are transmitted to Cloudflare in the process, the same provider that serves this website. Cloudflare sets no advertising cookies for this and builds no profile for advertising purposes.

The legal basis is my legitimate interest in a working means of contact (Art. 31(1) FADP; Art. 6(1)(f) GDPR). Without this protection the enquiry form would be open to automated bulk submissions, and your enquiry would be lost among them.

Turnstile requires JavaScript. If it is switched off in your browser, the form cannot be submitted. You will not get a silent error in that case, but a note that you are just as welcome to call me or write to me directly; both are given alongside.

Server logs

Deleted automatically by the hosting provider. Cloudflare sets that period, not I; it is a matter of days. I do not export these logs and keep no copy of my own. I can view them in the provider’s dashboard for as long as they are held there.

Enquiries without an order

Uploaded files are deleted automatically ninety days after arrival, enforced by a rule on the object storage, not by anyone remembering. The corresponding message in the mailbox I delete manually within the same period; there is no technical automation for that.

Enquiries leading to an order

Documents belonging to an order are subject to the statutory ten-year retention obligation for business records (Art. 958f Swiss Code of Obligations). They are moved into a separate order archive before the ninety days elapse, and that archive is not subject to automatic deletion. Design files are covered only to the extent required to keep the order traceable.

You may request deletion of your data at any time. Anything that must be retained by law is excepted; in that case processing is restricted rather than deleted.

You have the following rights in relation to the controller:

• information about whether and which data concerning you is processed
• rectification of inaccurate data
• deletion or destruction of data
• release of your data in a common electronic format
• objection to processing based on an overriding interest

An informal email is enough. I answer such requests within thirty days. If you are not satisfied with my reply, you may contact the Swiss Federal Data Protection and Information Commissioner; within the European Union you may additionally lodge a complaint with your competent supervisory authority.

This policy describes the state of the website as of the date given above. If anything about the processing changes, it will be updated. The version available at the time of your visit applies.