Legal

Privacy policy

This translation is provided for information; the French version is legally binding.

1. Controller

Scheidegger Webpublishing, sole proprietorship registered in the commercial register of the Canton of Bern, Mülinenstrasse 13, 3006 Bern, Switzerland. UID CHE-148.858.068, VAT no. CHE-148.858.068 VAT. Contact: [email protected].

This policy describes the personal data processed through the website pixforger.com, in accordance with the Swiss Federal Act on Data Protection (FADP) and, for persons located in the European Union, with the General Data Protection Regulation (GDPR) to the extent that it applies.

2. Data processed, purposes and retention periods

  • Visiting the website. The server records in technical logs the IP address, date and time, the page requested, the browser used and the response code. Purpose: security and proper functioning of the website. Basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: fourteen (14) days, then automatic deletion.
  • Contact or enquiry form. The fields you fill in, the timestamp of submission and the IP address. Purpose: to answer your enquiry and to prevent abusive submissions. Basis: pre-contractual measures taken at your request or legitimate interest (Art. 6(1)(b) and (f) GDPR). Retention: twenty-four (24) months after the last exchange if no contract is concluded.
  • Email correspondence. Your address and the content of the exchanges. Purpose: to handle your message. Retention: that of the enquiry or contract to which it relates.
  • Order and performance of the contract. Identity, contact details, order data and, depending on the service, the documents you entrust to us. Purpose: to perform the contract, to invoice, to comply with our legal obligations. Basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR). Retention: duration of the contract; accounting records ten (10) years (Art. 958f CO); documents entrusted to us: as set out in the general terms and conditions.
  • Card payment. The payment is processed by Stripe, which receives the card data; we have no access to it. We receive the name, email address, amount and payment status. Basis: contract. Retention: ten (10) years for accounting records.
  • Payment by QR invoice. The data shown on the invoice and on the bank credit advice (name, address, amount, reference). Retention: ten (10) years (Art. 958f CO).
  • Audience measurement. We use Umami, a tool we operate ourselves, without cookies and without individual profiling: it counts page views and the origin of visits in aggregated form and does not retain the IP address. The “Do Not Track” setting of your browser is respected. Basis: legitimate interest.

We do not sell any data, do not carry out targeted advertising and do not make any automated individual decisions.

3. Recipients

Your data is accessible only to the persons who need it to handle your request. It may be disclosed to the following service providers, who are bound by contract and by a duty of confidentiality:

  • Infomaniak Network SA (website hosting and email, in Switzerland)
  • Cloudflare, Inc. (United States), which routes and protects the website traffic (content delivery network and attack protection) and processes for this purpose the IP address and technical request data
  • Stripe Payments Europe Ltd (Ireland) and its affiliates, for card payments

It may finally be disclosed to an authority where the law so requires.

4. Disclosure abroad

The website and email are hosted in Switzerland. The website traffic passes through the Cloudflare network, which may process technical request data outside Switzerland, in particular in the United States; Cloudflare is certified under the Swiss-U.S. Data Privacy Framework. Stripe may process data in the European Union and in the United States; these transfers rely on an adequacy decision (the Swiss-U.S. Data Privacy Framework, under which Stripe is certified) or on standard contractual clauses. Any other disclosure abroad takes place only to a state that ensures an adequate level of protection or subject to the safeguards provided for in Art. 16 FADP.

5. Cookies

The website sets no tracking cookies; Cloudflare may set a technical cookie strictly necessary for bot protection (__cf_bm, valid for 30 minutes). It uses no advertising trackers and no embedded social networks.

6. Your rights

You may request access to your data, its rectification, its erasure or its delivery in a common format, and object to processing based on legitimate interest (Art. 25 to 32 FADP; Art. 15 to 21 GDPR). Write to [email protected]; we reply within thirty (30) days. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the supervisory authority of your country.

7. Security

Communications with the website are encrypted (HTTPS). Access to data is limited to the persons who need it, and the servers are protected by appropriate technical and organisational measures.

8. Changes

This policy may be amended; the version published on the website prevails. Last updated: 14.10.2026.