Privacy policy

Beat Finger, FingerMedia
Ostermundigenstrasse 93a, CH-3006 Bern, Switzerland
info@fingermedia.ch · +41 79 415 22 49

For questions about data protection, an email to the address above is enough. No data protection adviser has been appointed; there is no obligation to appoint one.

As with every website, the server records technical details: IP address, date and time, page requested, browser type and operating system. These details are needed so that the site can be delivered, and they serve troubleshooting and security. They are not combined with other data and not evaluated in order to trace your behaviour.

No fonts from third parties. The fonts used (Inter and Newsreader) are delivered with the site and not loaded from Google. When you open the site, no request – and therefore no IP address – goes to Google.

3D virtual tours and videos only load on click. The “Projects” page shows preview images of our 3D virtual tours and videos. These images are held on our own server. Only when you open a tour is it loaded from Matterport (Matterport Inc., USA) – only then does Matterport learn your IP address. Anyone who opens nothing sends nothing there.

Our videos are held as files on our own server. Playing them therefore sends no request to an outside provider.

If we do embed a video via YouTube (Google Ireland Limited), that one also loads only on click, and we use YouTube’s extended privacy mode for it (“youtube-nocookie.com”). YouTube then sets cookies only once you actually play a video.

When you send the form on the Contact page, the following details are stored: name, email address, phone number (optional), the area you chose and your message. The time of receipt is added to that.

Purpose: To answer your enquiry and, if an assignment comes of it, to carry it out. There is no other use. There is no newsletter, and your address is not used for advertising.

Retention: Enquiries that do not lead to an assignment are deleted as soon as they have been dealt with. If an assignment does come of it, the details form part of the business records and are kept for the statutory retention period (ten years, Art. 958f CO).

Sending by email: After storing, two emails are sent – a notification to us and a confirmation of receipt to your address. The Resend service is used for this (Plus Five Five, Inc., USA); sender, recipient, subject and content are stored there as a log and deleted after 30 days. Our mailbox itself is held with the hosting provider in Switzerland.

The form contains two fields that are invisible to people and serve to fend off automated submissions. One stays empty, the other records when the page was loaded. Neither of them is stored. In addition, when you send the form, an irreversibly calculated check value of your IP address is held for around two hours, in order to detect whether the same connection is sending a conspicuous number of enquiries in a short time. The address itself is not stored, and it is therefore not possible for us to link it to you; the entry is then deleted automatically.

Clients receive access to the protected area on request. There you download finished files and, if needed, upload files for us yourself. Your email address and the name under which we keep the account are stored for this. The password is generated by us and handed to you personally; so that we can help you if you lose it, it is stored in a form we as the operator can read. Please therefore do not use this password anywhere else.

Signing in: The session is held in a cookie that is valid for 30 days. You stay signed in on this device until that period expires or you sign out – closing the browser does not end the sign-in. The same cookie also applies to the administration area at the same address, so that one sign-in is enough for both. This cookie is technically necessary; without it, signing in is not possible. This site sets no other cookies, there is no counting of visits and no advertising tracking – which is why there is no consent window either.

Your files are held in storage that is not public. The download links are signed individually and expire after five minutes. Access is limited to the account the file is assigned to and to us as the operator.

Supabase is used for the database, the sign-in and the file storage (Supabase Inc., USA). Supabase processes the data solely on our behalf and on our instructions; a data processing agreement is in place.

Resend is used to send the emails from the contact form (Plus Five Five, Inc., USA). This service too processes the data solely on our behalf; a data processing agreement is in place.

Where data goes to a country outside Switzerland and the EEA, this is done on the basis of the European Commission’s standard contractual clauses, supplemented by the adjustments for Switzerland recognised by the FDPIC (Art. 16 para. 2 let. d FADP).

You have the right at any time

• to ask which data about you is being processed,
• to have incorrect data corrected,
• to request the deletion of your data,
• to have the processing restricted or to object to it,
• to receive your data in a common format.

An email to info@fingermedia.ch is enough. To rule out misuse, proof of identity may be needed in individual cases. The information is free of charge.

If you do not agree with the processing, you can turn to the Federal Data Protection and Information Commissioner (FDPIC).

The connection to this site is encrypted (TLS). Which data an account can see and download is decided by the database on the server; that check cannot be bypassed in the browser. Access to the administration area can additionally be protected with a second factor from an authenticator app.

Complete protection against unauthorised access is technically not possible. We take appropriate measures and adjust them when that becomes necessary.

This policy is adjusted when the site or the legal situation changes. The version published here at the time is the authoritative one.