Privacy policy
Controller: LeZo (Andrin Portmann), Usserhus 8, 6023 Rothenburg, Switzerland, lezo.ceo@gmail.com (see Imprint).
These pages contain no forms and set no tracking cookies. If you write to us by e-mail, we use your details only to answer your message. For receiving e-mail we use Gmail (Google); data may also be processed abroad in the process.
Hosting and technical processing when you visit this website
This website is delivered through the service Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare forwards your request over an encrypted connection (HTTPS) to our server in Switzerland and operates the domain name system (DNS) for our domain. In doing so, Cloudflare processes technically necessary data, in particular your IP address, date and time of the visit, the requested address and browser details (for example browser type). Cloudflare acts as our processor under a data processing addendum.
Purpose and basis: We use Cloudflare so that the website is available and protected against misuse and attacks. This is our legitimate interest (Art. 6(1)(f) GDPR where applicable; under the Swiss FADP: proportionality and purpose limitation).
Transfers to the USA: Cloudflare may process data in the USA and other countries. Cloudflare states that it participates in the Data Privacy Framework (EU–US, UK extension and Swiss–US). In addition, the data processing addendum provides for the EU Standard Contractual Clauses, with the necessary adjustments for Swiss data.
What we do not do: We do not use tracking cookies or third-party advertising or analytics services.
Anonymous page counter: On our own server in Switzerland we count page views to see which pages are read. Per day we store only the requested page, the type of visit (visitor, crawler or own visit), the referring domain (the website you came from, without path) and the number. We do not store IP addresses, cookies or browser identifiers and we do not try to recognise individual persons. We keep these figures for a maximum of 24 months. The basis is our legitimate interest in improving our offer.
Counting of pages not found: If someone opens an address on lezo.ch that does not exist (error 404), we count that address so that we can find and fix broken or outdated links. Per day we store only the path of the address (without anything after a “?”) and the number. We do not store IP addresses, cookies, browser identifiers or referring pages, and we do not try to identify individuals. We delete these figures after 30 days. The basis is our legitimate interest in a working website.
Cloudflare may keep its own short-term technical logs for operation and security. We have no access to individual visitor data there and do not evaluate it. To protect against automated access (bots), Cloudflare may set technically necessary cookies, for example “__cf_bm” (valid for 30 minutes according to Cloudflare; Cloudflare states it does not use it to track visitors from site to site). These cookies are not used for advertising or audience measurement. You can block or delete cookies in your browser; access may then be limited in individual cases.
Payment, order confirmation and contact
Payment through PayPal: When you go to PayPal through the payment button, you leave our site. PayPal's privacy policy applies there (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). PayPal may process data abroad as well.
What we receive and what for: From PayPal we receive the details needed for the payment: name, e-mail address, amount, time, transaction number and your note (for example the product code). We use them to match the payment, to send you an order confirmation by e-mail (sent through Google Mail, where data may be processed abroad), to answer your questions and to meet our bookkeeping duties. The basis is performing the purchase and our legal obligations (Art. 6(1)(b) and (c) GDPR where applicable; under the Swiss FADP: proportionality and purpose limitation). We do not pass the data on for advertising and we do not send you a newsletter without your consent.
AI assistance: When we process and answer your e-mails, we use AI-supported services from third-party providers, which may process data abroad (for example in the USA). Please do not send confidential information. Replies are checked before they are sent; there are no purely automated decisions.
Retention: We keep payment and order data as accounting records for ten years from the end of the financial year (Art. 958f of the Swiss Code of Obligations). We delete other e-mails at the latest 12 months after receipt, or within 30 days on request, unless a legal retention duty applies.
Your rights (access, correction, deletion, objection) and questions: lezo.ceo@gmail.com. Complaints in Switzerland: FDPIC (edoeb.admin.ch); for visitors from the EU or the UK: the competent supervisory authority.