Privacy Policy
Pursuant to the Swiss FADP (in force since 1 September 2023) and EU Regulation 2016/679 (GDPR)
1. Data controller
MCR Web Design
Ticino (Mendrisio area), Switzerland
Email: info@mcrwebdesign.ch
WhatsApp: +41 77 997 90 83
2. Categories of data collected
a) Navigation data
The hosting server automatically collects standard technical data: IP address (anonymised), browser type, pages visited, date and time of access. These data are necessary for the proper operation and security of the website.
b) Voluntarily provided data
Via the contact form, we collect: name, email address, business name (optional) and message. These data are provided voluntarily by the user when submitting the form.
c) Analytical data (only with consent)
With the user's consent, we collect statistical data via Google Analytics 4 (website usage, pages visited, visit duration). IP addresses are anonymised. No data are used for advertising profiling.
3. Purposes of processing
- Responding to contact requests submitted via the form
- Improving the website based on aggregated usage data (only with consent)
- Ensuring the security and proper functioning of the website
4. Legal basis
- Consent (Art. 6(1)(a) GDPR / Art. 31 FADP): for Google Analytics analytical cookies
- Legitimate interest (Art. 6(1)(f) GDPR): for website security and technical access logs
- Performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR): for responding to contact requests
5. Third-party services
| Service | Purpose | Location | Safeguards |
|---|---|---|---|
| Web3Forms | Processing contact form submissions | USA | GDPR compliance, Standard Contractual Clauses (SCC) |
| Google Analytics 4 | Anonymised statistics (only with consent) | USA (Google LLC) | IP anonymisation, SCC, Google Ads Data Processing Terms |
| Infomaniak | Website hosting | Switzerland | Servers in Switzerland, FADP compliant |
| Google Fonts / Fontshare | Loading typographic fonts | USA / Global | No personal data collected for profiling purposes |
6. Retention periods
- Data submitted via contact form: retained for 24 months from receipt, then deleted
- Google Analytics data: retained for 14 months (reduced default setting)
- Technical server logs: retained for 30 days
- Cookie preferences (localStorage): until manually deleted by the user
7. User rights
Pursuant to Art. 25 FADP (Switzerland) and Arts. 15–22 GDPR (EU), users have the right to:
- Access: receive a copy of their personal data
- Rectification: correct inaccurate or incomplete data
- Erasure ("right to be forgotten"): request deletion of their data
- Objection: object to processing based on legitimate interest
- Portability: receive their data in a structured, machine-readable format
- Withdrawal of consent: at any time, without prejudice to processing carried out prior to withdrawal
To exercise these rights: info@mcrwebdesign.ch
8. International data transfers
Google LLC (Analytics) and Web3Forms are based in the USA. Transfers are made on the basis of Standard Contractual Clauses (SCC) approved by the European Commission and, for Switzerland, on the basis of safeguards recognised by the FDPIC pursuant to Art. 16 FADP.
9. Complaints
Users have the right to lodge a complaint with the competent supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
- EU: Data protection authority of the user's country of residence
10. Changes to this policy
MCR Web Design reserves the right to update this policy at any time. Material changes will be communicated via a notice on the website. We encourage you to consult this page periodically.