Privacy Notice

1. Controller

Vanessa Hofmann Operations & Consulting
Owner: Vanessa Hofmann
Schachenstrasse 33
4658 Däniken
Switzerland

Email for privacy matters: contact@avframehouse.com

AV Framehouse and AV Digital Studios are project designations of Vanessa Hofmann Operations & Consulting and are not separate legal entities.

2. Scope and principles

This notice applies to the website avframehouse.ch, including its language versions. We process personal data only to the extent required to operate the website and handle enquiries, and we follow the principles of lawfulness, proportionality, purpose limitation and transparency. This website deliberately does not use marketing tracking.

3. Hosting and technical access data

This website is operated on the Lovable platform and delivered through Cloudflare-based infrastructure (hosting, server-side rendering, protection against attacks). When the website is accessed, the infrastructure providers involved necessarily process technical access data, in particular the IP address, date and time of the request, the page requested, status codes, and browser and device characteristics. This data is required to deliver the website and keep it stable and secure, and the platform provider may also make it available to us in aggregated form as visitor statistics. We do not combine this access data with the details submitted through the contact form.

The infrastructure used may involve locations in Switzerland, the EU/EEA and third countries. Where personal data reaches countries without an adequate level of data protection, the transfer is based on appropriate safeguards, in particular contractual data protection clauses, where legally required.

4. Local storage of your language preference

The local storage of your browser (localStorage) holds a single entry, avf.locale. It stores your chosen language (German, English or French) so that it is remembered on your next visit. This entry is purely functional, serves no advertising or tracking purpose, is not shared with third parties and can be deleted at any time through your browser settings.

5. No marketing analytics, no embeds

No marketing or analytics tools such as Google Analytics or Meta Pixel are integrated into this website. No maps, videos or social media widgets are currently embedded, and no cookies are set for advertising purposes. Fonts are served locally from this website; no connection to Google Fonts takes place.

6. Contact form

When you use the contact form, we process the details you provide: type of enquiry, name, company, website (if provided), email address, phone (optional), industry, region, your message, preferred way of contact, budget range, timeframe, as well as the selected language and the address of the page from which you submitted the form.

To protect against abuse and automated submissions, we additionally store a truncated cryptographic hash of your IP address. The IP address itself is not stored in the form database. No browser identifiers, referrers or device fingerprints are recorded there. The time at which you confirmed that you have read this privacy notice is logged.

We process these details to answer your enquiry, to prepare a possible engagement (pre-contractual communication) and to protect the service against abuse (legitimate interest in secure, stable operation). Where the GDPR applies, we rely on Article 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract) and Article 6(1)(f) GDPR (legitimate interests in security and abuse prevention). We rely on consent only where we expressly request it; you may withdraw any consent given at any time with effect for the future.

7. Storage and recipients of form data

• Database: the details are stored in the database of our cloud backend (Supabase, provided through Lovable Cloud). The verified storage location is the AWS region eu-central-1 (Frankfurt, Germany).
• Notification: a notification is sent to contact@avframehouse.com through the email service Resend, connected via the Lovable platform. The content of your enquiry is transmitted in that notification. The configured sending region is Ireland (eu-west-1); the provider may use further infrastructure for delivery.
• Mailbox: the notification arrives in our email mailbox, where it is subject to the retention rule described in section 8.

These providers process personal data on our behalf to deliver the services described. No data is passed on for advertising purposes. Here too, processing may involve Switzerland, the EU/EEA and, in individual cases, third countries; where required, transfers are based on appropriate safeguards, in particular contractual data protection clauses.

8. Retention and deletion

We keep ordinary contact enquiries for a maximum of 12 months after receipt. An automatic server-side cleanup deletes the corresponding entries from the form database once this period has expired. Where a contractual relationship arises, or where statutory retention obligations or the establishment, exercise or defence of legal claims require it, individual data may be kept for longer.

The automatic deletion applies to the database. Copies of the notification in the mailbox contact@avframehouse.com are deleted separately under the same rule.

9. Data security

We take technical and organisational measures appropriate to the risk to protect your data, in particular transport encryption (TLS), access restrictions on the database and the storage of a truncated hash instead of the IP address. Absolute security of data transmission and storage on the internet cannot, however, be guaranteed.

10. Your rights

Under the FADP you have, in particular, the right to information about the data processed about you, to correction of inaccurate data, to deletion, and to the release or transfer of certain data. You may object to processing and withdraw any consent given at any time.

Where the GDPR applies, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent and to lodge a complaint with a supervisory authority.

To exercise your rights, an email to contact@avframehouse.com is sufficient. The supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. Persons in the EU/EEA may also contact the data protection supervisory authority of their habitual residence.

11. No automated individual decisions

No automated individual decision-making and no profiling take place.

12. External links

The operators of linked third-party websites are responsible for the data processing that takes place there. Please consult their respective privacy information.

13. Changes to this notice

We may amend this privacy notice, for example in the event of technical changes or new legal requirements. The version published here, with the date stated above, applies.