Privacy Policy

The protection of your personal data is very important to us. In this privacy policy, we inform you about what personal data we collect when you use our website, how we use it, and what rights you have.

This privacy policy applies to the website lugn.ch and is based on the General Data Protection Regulation (GDPR) of the European Union and the revised Swiss Data Protection Act (revDSG), which has been in effect since September 1, 2023.

The party responsible for data processing on this website is:

Operator

Lugn Karaoke

Website

www.lugn.ch

Contact

Via the contact form at lugn.ch/contact

Server Log Files

Each time you access our website, the following data is automatically collected and stored in server log files by our hosting provider (Google Firebase Hosting):

• IP address of the requesting device
• Date and time of access
• Requested URL and referrer URL
• Browser and operating system used
• Amount of data transferred

Contact Form

When you use our contact form, the data you enter is stored in our database (Google Cloud Firestore) to process your inquiry. The following data is collected:

• First name
• Last name
• Email address
• Message content

The data is used exclusively to process your inquiry and is not shared with third parties. The legal basis is your consent (Art. 6(1)(a) GDPR) or our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).

Our website uses cookies. Cookies are small text files stored on your device. Some are technically necessary for the operation of the website, while others help us improve the website.

Necessary Cookies

These cookies are required for the basic functions of the website. This includes cookies for language settings, security features, and management of your cookie preferences. They are set without your consent as they are strictly necessary for the operation of the website (Art. 6(1)(f) GDPR).

Analytics Cookies (optional)

Analytics cookies are only set with your explicit consent (Art. 6(1)(a) GDPR). We use Firebase Analytics (a service by Google) to create pseudonymous usage statistics: your browser is recognised by a random identifier in a cookie, not by your name, and Google Analytics 4 does not store IP addresses.

You can withdraw or change your consent at any time via the cookie settings in the footer of the website.

We use Firebase Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Firebase Analytics uses cookies and collects information about your usage behavior on our website.

The collected data includes: visited pages (without parameters in the address, except campaign identifiers such as utm_source), page titles, referrer URLs, page loading measurements, clicks on e-mail links (only the kind of link, never the address), the successful submission of the contact form (without its content), and general usage statistics. Google Analytics 4 does not store IP addresses. For visitors from Switzerland and the EU, the data is collected through servers in the EU; any transfer to Google LLC in the USA is based on the Swiss-U.S. and EU-U.S. Data Privacy Frameworks, under which Google is certified.

Firebase Analytics is only activated when you have consented to analytics cookies. You can withdraw your consent at any time. For more information, see Google's privacy policy: https://policies.google.com/privacy

This website is hosted on Google Firebase Hosting. The server location is Europe (region europe-west6, Zurich). The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland.

Google may also process data on servers in the USA. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection. More information: https://cloud.google.com/privacy

YouTube

Our website contains links and preview images to videos on YouTube, a platform operated by Google LLC. When you click on a YouTube link, you are redirected to the YouTube website, where YouTube's privacy policy applies.

We do not embed YouTube videos directly (no iFrame embedding) but only use preview images (thumbnails) and links. The images are loaded from YouTube servers (img.youtube.com), which means YouTube receives your IP address.

Firebase Authentication

We use Firebase Authentication for authentication features. Technical data such as session tokens and authentication status are stored in cookies. These are classified as necessary cookies.

Cloudflare Turnstile

To protect the contact form against spam and automated requests, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. As soon as the form on the contact page becomes visible, your browser loads the security check from Cloudflare servers. In doing so, your IP address and technical information about your browser and device are transmitted to Cloudflare to determine whether the request comes from a human. Data may be transferred to the USA in the process.

The result of the check is sent to our server together with your message and confirmed there with Cloudflare; a message that fails the check is not accepted. According to Cloudflare, the data is used only to prevent abuse and not for advertising. The legal basis is our legitimate interest in a secure contact form (Art. 6(1)(f) GDPR). Further information can be found in the Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/

Under the GDPR and revDSG, you have the following rights:

• Right of access to your stored personal data (Art. 15 GDPR / Art. 25 revDSG)
• Right to rectification of inaccurate data (Art. 16 GDPR / Art. 32 revDSG)
• Right to erasure of your data (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR / Art. 28 revDSG)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact us via the contact form on our website.

Some of the services we use (Firebase, Google Analytics) are operated by Google LLC, based in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses of the EU Commission.

Google Cloud servers for Firebase Hosting are configured in the Europe-West6 region (Zurich, Switzerland). Switzerland has an adequacy decision from the EU Commission, confirming an adequate level of data protection.

We implement technical and organizational measures to protect your data against loss, destruction, manipulation, and unauthorized access. Data is transmitted encrypted via HTTPS/TLS.

The Firebase services we use (Firestore, Hosting, Authentication) meet high security standards and are certified according to ISO 27001, SOC 1/2/3, and other standards.

Personal data from the contact form is stored for as long as necessary to process your inquiry and is then deleted, unless statutory retention obligations apply. The copies of sent emails in our sending queue are deleted automatically after one year.

Server log files are retained for a maximum of 30 days. Analytics data is automatically deleted after 14 months according to Firebase Analytics default settings.

If you believe that the processing of your data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority:

Switzerland

Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland – https://www.edoeb.admin.ch

EU / Germany

You can contact the data protection authority of your country of residence or the competent state authority. An overview of German data protection supervisory authorities can be found at: https://www.bfdi.bund.de

We reserve the right to update this privacy policy as needed, for example due to changes in legislation or changes to our website or the services used.

The date of the last update can be found at the top of this page.