Privacy
TODO Template: have the owner or a specialist check it.
This policy follows the Swiss Federal Act on Data Protection (revFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
Who is responsible
secondsurf, Noé Gasparrini, info.secondsurf@gmail.com. The address is in the imprint.
What data we process
- Forms: name, email, message and any other details you give (such as phone or order date), to answer your request.
- Orders: name, delivery address and payment details you send us, to handle the order.
- Visiting the website: technically necessary data, such as IP address, time and page visited.
Services we use
- Cloudflare (hosting and security): processes website visit data.
- Cloudflare Turnstile (spam protection on forms): uses technical data from your browser and your IP address to check that a person is sending the form.
- Resend (email delivery): delivers form messages and confirmations.
- Google Gmail (our mailbox): stores the emails that reach us.
These providers may also process data outside Switzerland, particularly in the USA. For this we rely on the safeguards they provide, such as standard contractual clauses.
Fonts are hosted on our own server. Instagram is only contacted if you click the link.
Cookies and tracking
We use no tracking or advertising cookies and no analytics tools. Your choice of light or dark theme is stored only in your browser.
Retention
We keep data only as long as needed for its purpose. Order and accounting records are kept for 10 years, as the law requires.
Your rights
You can ask for access to your data, its correction or its deletion, and you can object to its processing. Write to info.secondsurf@gmail.com. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC).
People in the EEA
The legal bases are performing the contract (Art. 6(1)(b) GDPR), your consent (a) and our legitimate interest in a secure website (f). You can also complain to the supervisory authority in your country.