Privacy Policy

Responsible Party

The party responsible for data processing on this website is:

info@arreno.ch

Applicable Law

This privacy policy is governed by the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the European General Data Protection Regulation (GDPR/DSGVO).

Purposes and Legal Bases for Processing

We process personal data solely for the purposes set out below. Where the GDPR applies to a given processing operation, the legal basis stated for it applies.

• Answering your enquiry submitted through the contact form or through the Arreno Studio guided enquiry form. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract); under Swiss law the processing rests on your request to be contacted.
• Providing and securely operating this website, including the server log files. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the stable and secure operation of the website.
• Preventing misuse and automated bulk submissions through the forms. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the prevention of misuse.
• Meeting statutory retention obligations where your enquiry leads to a contract. The legal basis is Art. 6(1)(c) GDPR (compliance with a legal obligation); under Swiss law the obligation follows from Art. 958f of the Code of Obligations.

Data Collection and Use

We collect personal data only where you send it to us yourself, or where it arises technically when the website is accessed. Through the contact form this is your name, your email address, your phone number where you choose to provide it, and the content of your message.

The Arreno Studio guided enquiry form additionally collects your project details and up to three photos that you choose to upload (JPEG, PNG or WebP, each no larger than 5 MB). The photos are re-encoded on our server and attached to the email sent to us. If you upload no photos, none are processed.

We do not pass your data on for anyone else’s purposes and we do not sell it. To operate this website and to receive and send email we use the service providers named under “Processors”. Beyond that, we disclose data only where we are legally obliged to do so.

Processors

The following service providers process personal data on our behalf and on our instructions. Each is named with the role it actually performs:

• Infomaniak Network SA, Geneva, Switzerland — hosting and operation of this website, including the server log files.
• Infomaniak Network SA, Geneva, Switzerland — mail relay: the website sends the notification to us and the confirmation to you through its mail servers.
• Proton AG, Plan-les-Ouates, Geneva, Switzerland — operation of the mailbox in which your enquiry, and any photos with it, is received and kept.

Disclosure Abroad

The website and its server log files are operated in Switzerland. Under Infomaniak’s contractual terms for the mail service, all data transmitted to it is stored and hosted exclusively in data centres in Switzerland.

The mailbox your enquiry arrives in is operated by Proton. By Proton’s own account, it stores data exclusively on servers located in Switzerland, Germany or Norway. Your enquiry and any photos with it may therefore be stored in Germany or in Norway.

Germany and Norway appear on the Federal Council’s list of states with an adequate level of data protection (Annex 1 to the Swiss Data Protection Ordinance). The disclosure is therefore permitted under Art. 16(1) FADP without further safeguards. Both states also belong to the European Economic Area, where the GDPR applies.

We send the confirmation email to the address you give us. Where that message then resides depends on your own email provider and is outside our control.

Retention and Deletion

We keep your enquiry and any photos attached to it for as long as we need them to deal with your request. Once your request is closed, we delete them, photos included.

Where your enquiry leads to a contract, the resulting records form part of our business correspondence and fall under the statutory retention obligation in Art. 958f of the Swiss Code of Obligations; we keep them for the ten years it prescribes.

Server log files are subject to the period stated in the section of that name.

Misuse Prevention on the Forms

To prevent automated bulk submissions we limit the number of submissions per sender. To do so, your IP address and the email address you provide are held solely in the server’s working memory. The entry expires one hour after the submission and is deleted. It is never written to disk, never evaluated, and never combined with other data.

Cookies

This website only uses technically necessary cookies that are required for the operation of the website. No tracking or advertising cookies are used.

SSL/TLS Encryption

For security reasons, this website uses SSL or TLS encryption. This means that data you transmit to us is encrypted and cannot be read by third parties.

Server Log Files

When you visit this website, information is automatically stored in server log files that your browser transmits. This includes: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not combined with other data sources and is deleted after 30 days at the latest.

Analytics and Tracking

This website does not use any analytics tools or tracking services.

WhatsApp Contact on Arreno Logistics

The Arreno Logistics pages carry a button that opens a WhatsApp chat with us. It is an ordinary link: unless you click it, no data is transmitted to WhatsApp and no content is loaded from WhatsApp.

If you do click it, you leave this website. The conversation and the data arising from it are then processed by WhatsApp Ireland Limited under its own privacy terms, with onward transfer to WhatsApp LLC and Meta Platforms, Inc. in the USA. We have no influence over this.

Your Rights

Within the scope of the applicable law, you have the following rights in relation to us:

• Access to whether and which personal data we process about you, and to its origin, purpose and recipients (Art. 25 FADP, Art. 15 GDPR).
• Rectification of inaccurate personal data (Art. 32 FADP, Art. 16 GDPR).
• Erasure or destruction of your personal data (Art. 32 FADP, Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Objection to processing we base on a legitimate interest (Art. 30 et seq. FADP, Art. 21 GDPR).
• Release or transfer of your data in a common electronic format (Art. 28 FADP, Art. 20 GDPR).

Contact us at: info@arreno.ch

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent Swiss supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Where the GDPR applies to the processing, you may also contact the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.