Privacy Policy
Last updated: March 2026
Introduction
The protection of your personal data is very important to us. In this privacy policy, we inform you about what personal data we collect when you use our website, how we use it, and what rights you have.
This privacy policy applies to the website lugn.ch and is based on the General Data Protection Regulation (GDPR) of the European Union and the revised Swiss Data Protection Act (revDSG), which has been in effect since September 1, 2023.
Data Controller
The party responsible for data processing on this website is:
Collection of Personal Data
Server Log Files
Each time you access our website, the following data is automatically collected and stored in server log files by our hosting provider (Google Firebase Hosting):
- IP address of the requesting device
- Date and time of access
- Requested URL and referrer URL
- Browser and operating system used
- Amount of data transferred
Contact Form
When you use our contact form, the data you enter is stored in our database (Google Cloud Firestore) to process your inquiry. The following data is collected:
The data is used exclusively to process your inquiry and is not shared with third parties. The legal basis is your consent (Art. 6(1)(a) GDPR) or our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).
- First name
- Last name
- Email address
- Message content
Firebase Analytics (Google Analytics)
We use Firebase Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Firebase Analytics uses cookies and collects information about your usage behavior on our website.
The collected data includes: visited pages, page titles, referrer URLs, and general usage statistics. The data is anonymized and does not allow direct identification of individuals.
Firebase Analytics is only activated when you have consented to analytics cookies. You can withdraw your consent at any time. For more information, see Google's privacy policy: https://policies.google.com/privacy
Hosting
This website is hosted on Google Firebase Hosting. The server location is Europe (region europe-west6, Zurich). The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland.
Google may also process data on servers in the USA. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection. More information: https://cloud.google.com/privacy
Third-Party Services
YouTube
Our website contains links and preview images to videos on YouTube, a platform operated by Google LLC. When you click on a YouTube link, you are redirected to the YouTube website, where YouTube's privacy policy applies.
We do not embed YouTube videos directly (no iFrame embedding) but only use preview images (thumbnails) and links. The images are loaded from YouTube servers (img.youtube.com), which means YouTube receives your IP address.
Firebase Authentication
We use Firebase Authentication for authentication features. Technical data such as session tokens and authentication status are stored in cookies. These are classified as necessary cookies.
Your Rights
Under the GDPR and revDSG, you have the following rights:
- Right of access to your stored personal data (Art. 15 GDPR / Art. 25 revDSG)
- Right to rectification of inaccurate data (Art. 16 GDPR / Art. 32 revDSG)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR / Art. 28 revDSG)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, please contact us via the contact form on our website.
Data Transfer to Third Countries
Some of the services we use (Firebase, Google Analytics) are operated by Google LLC, based in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses of the EU Commission.
Google Cloud servers for Firebase Hosting are configured in the Europe-West6 region (Zurich, Switzerland). Switzerland has an adequacy decision from the EU Commission, confirming an adequate level of data protection.
Data Security
We implement technical and organizational measures to protect your data against loss, destruction, manipulation, and unauthorized access. Data is transmitted encrypted via HTTPS/TLS.
The Firebase services we use (Firestore, Hosting, Authentication) meet high security standards and are certified according to ISO 27001, SOC 1/2/3, and other standards.
Data Retention
Personal data from the contact form is stored for as long as necessary to process your inquiry and is then deleted, unless statutory retention obligations apply.
Server log files are retained for a maximum of 30 days. Analytics data is automatically deleted after 14 months according to Firebase Analytics default settings.
Changes to This Privacy Policy
We reserve the right to update this privacy policy as needed, for example due to changes in legislation or changes to our website or the services used.
The date of the last update can be found at the top of this page.