Privacy

Controller and contact

maske.majamogg@gmail.com
+41 79 931 43 84

You can also use these contact details for privacy enquiries.

Website operation and server logs

The website is hosted on a server in Switzerland. When the website is accessed, technically necessary connection data is processed, in particular the IP address, time, requested path, HTTP method, response status and amount of data transferred. This is used to deliver the website, analyse errors and protect against abuse. The people entrusted with its technical operation have access to this data.

The web server logs the URL path without query parameters. Logs are rotated daily when they contain entries; no more than 14 archive files are kept. If there are no visits, a file may be kept for longer. The number of archives therefore does not equate to a guaranteed deletion period of 14 days.

Where the GDPR applies, operating the website in this way is based on the legitimate interest in a secure and available website (Article 6(1)(f) GDPR). The connection to the website is encrypted using HTTPS.

Images, fonts and external links

Fonts, images and galleries are loaded from this website. No Google Fonts, social media feeds, maps or external video players are embedded. Links to Instagram, Facebook, Crew United and other reference sites are ordinary links. Your browser only connects to the external website when you open such a link. The respective provider’s information applies there.

Contact form, email and telephone

The contact form requires your name, email address and message. Phone number, occasion, preferred date, location or country, package and budget are optional. I process these details to answer your enquiry and, where relevant, to prepare an offer or booking. Please provide only the information needed for this. File attachments are not supported.

When you submit the form, your details are sent via HTTPS to the website’s own web server in Switzerland. If form delivery is enabled, the server forwards the enquiry via the configured SMTP service exclusively to my designated Gmail mailbox. If delivery is not enabled, the form displays a notice; you can then reach me directly by email or telephone. No automatic confirmation email is sent.

The contact address is a Gmail mailbox, so email communication uses Google Gmail. Messages and connection data may also be processed outside Switzerland and the European Economic Area. Information about the service is provided in Google’s privacy policy. Clicking the email link opens your email program; the website itself does not send any message as a result.

Where the GDPR applies, enquiries about a potential booking are processed to take pre-contractual steps or to perform a contract (Article 6(1)(b) GDPR); other correspondence is processed on the basis of the legitimate interest in handling it (Article 6(1)(f) GDPR). The details are kept for as long as necessary to handle the enquiry and, where applicable, carry out the booking, to comply with statutory retention obligations or to protect legal claims. There is no single deletion period for all messages.

The necessary session cookie maja_session is set only when you use the form and delivery is enabled. It is HttpOnly, SameSite=Strict and also Secure over HTTPS. It protects the form against unauthorised submissions and limits abuse. The cookie and server session are valid for no more than one hour. The session and attempt counters are held in server memory; expired sessions are cleaned up when new sessions are created. This form protection is not used for advertising.

Browser storage

No optional advertising or analytics services are currently configured. As a result, no consent banner appears when you visit, and no new consent choice is stored.

If optional services are configured and you make a choice, the website stores it in your browser’s local storage under maja_privacy_v1. The entry contains the version of the choice, the configured service identifiers, your consent or refusal for each service, the time and the expiry date. It contains no visitor identifier or IP address and is not sent to a consent server. The choice remains valid for a maximum of 180 days; this period is a technical setting. You will be asked again when it expires, when browser storage is cleared or when the service configuration changes.

This storage is used solely to respect and document your privacy choice locally. Where the GDPR applies, the basis is the legitimate interest in respecting and documenting that choice (Article 6(1)(f) GDPR). Optional advertising processing instead requires your consent (Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG).

Changing or withdrawing your choice

You can access the privacy settings at any time via the link in the footer. A withdrawal takes effect from that point onwards. If you deselect a service that has already loaded, the website saves your new choice, removes its own accessible marketing cookies and reloads the page so that the loaded code stops running. This website cannot delete cookies set by other domains or cookies it cannot access. Withdrawal does not recall data that has already been lawfully transmitted.

Your rights

Under the applicable data protection law, you may in particular request access to and correction of your data and, where the relevant conditions are met, request its deletion, restriction, release or transfer. You may withdraw consent you have given, with effect from that point onwards. Where the GDPR applies, you may object to processing based on legitimate interests on grounds relating to your particular situation; you may object to processing for direct marketing at any time.

To exercise these rights, please use the contact details above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) with privacy concerns. Where the GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority in the EU, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement.