Last updated: 29 March 2026
1. Introduction
This Privacy Policy explains how Masoon (“we”, “us”, or “our”) collects, processes, and protects your personal data when you visit our website https://www.masoon.ch (“Website”).
This policy is drafted in accordance with the Swiss Federal Act on Data Protection (nFADP/DSG, SR 235.1), which entered into force on 1 September 2023, and its implementing ordinance (DPO/DSV). Where our processing activities fall within the scope of the EU General Data Protection Regulation (GDPR), we also comply with its requirements.
2. Data Controller
The data controller responsible for the processing of your personal data is:
ÐorÐe Kodžić
Masoon — Web Design & Digital Marketing
Basel, Switzerland
Email: info@masoon.ch
Website: https://www.masoon.ch
Masoon is operated as a sole proprietorship (Einzelunternehmen) by ÐorÐe Kodžić.
3. Types of Personal Data Collected
We collect and process the following categories of personal data:
3.1 Data You Provide Voluntarily
- Contact form submissions: Name, email address, phone number (if provided), and message content.
3.2 Data Collected Automatically
- Server log data: IP address, date and time of access, browser type and version, operating system, referring URL, pages visited, and the amount of data transferred. This data is collected by our hosting provider SiteGround.
- Analytics data: Through Google Analytics 4, we collect pseudonymised usage data including pages visited, session duration, approximate geographic location (city-level), device type, and interaction events. IP addresses are anonymised.
- Cookies and similar technologies: See our Cookie Policy for details.
4. Purposes and Legal Basis for Processing
We process your personal data for the following purposes and on the following legal bases under Art. 31 nFADP:
| Purpose | Data Categories | Legal Basis (nFADP) |
|---|---|---|
| Responding to contact form enquiries | Name, email, phone, message | Consent (you initiate the contact); performance of pre-contractual measures |
| Website analytics and improvement | Pseudonymised usage data | Legitimate interest (Art. 31 para. 1 nFADP) in improving our website; consent for analytics cookies |
| Ensuring website security and functionality | Server log data | Legitimate interest in maintaining website security and stability |
| Language preferences | Language selection cookie | Legitimate interest in providing the website in your preferred language |
| Compliance with legal obligations | As required | Legal obligation |
5. Data Transfers Abroad
Your personal data may be transferred to and processed in countries outside of Switzerland. In particular:
- Google LLC (United States): We use Google Analytics 4 (property ID: G-GTWNQTM4TM) and Google Site Kit. Google may process data in the United States. This transfer is covered by the Swiss-US Data Privacy Framework (Swiss-U.S. DPF), under which Google LLC is certified. Google has also implemented Standard Contractual Clauses (SCCs) as an additional safeguard. For more information, see Google’s Privacy Policy.
- GoDaddy / ManageWP (United States): We use the ManageWP service (operated by GoDaddy) for website maintenance. GoDaddy participates in the Swiss-U.S. Data Privacy Framework.
Where personal data is transferred to a country without an adequate level of data protection as determined by the Swiss Federal Council, we ensure appropriate safeguards are in place in accordance with Art. 16–17 nFADP, such as Standard Contractual Clauses or the Swiss-U.S. Data Privacy Framework.
6. Third-Party Processors (Auftragsbearbeiter)
We engage the following third-party data processors:
| Processor | Purpose | Location |
|---|---|---|
| SiteGround Spain S.L. | Website hosting, server logs, caching | EU (European servers) |
| Google LLC | Website analytics (GA4), Site Kit | United States (Swiss-U.S. DPF) |
| GoDaddy / ManageWP | Website management and maintenance | United States (Swiss-U.S. DPF) |
All processors are bound by data processing agreements (Auftragsbearbeitungsverträge) in accordance with Art. 9 nFADP.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy or as required by law:
- Contact form data: Retained for the duration of the related enquiry or business relationship, plus any statutory retention period (up to 10 years under Swiss commercial law, Art. 958f CO).
- Server logs: Retained by SiteGround for up to 12 months.
- Google Analytics data: Retained for 14 months (configured in GA4), after which it is automatically deleted.
- Cookie consent records: Retained for 12 months.
After the applicable retention period, personal data is deleted or anonymised.
8. Your Rights Under the nFADP
Under the Swiss Federal Act on Data Protection (nFADP), you have the following rights:
- Right of access (Art. 25 nFADP): You have the right to obtain confirmation as to whether your personal data is being processed and to receive a copy of such data.
- Right to rectification: You have the right to request the correction of inaccurate personal data.
- Right to deletion: You have the right to request the deletion of your personal data, provided there is no overriding legal obligation to retain it.
- Right to data portability (Art. 28 nFADP): You have the right to receive your personal data in a commonly used electronic format or to have it transferred to another controller.
- Right to object: You may object to the processing of your personal data at any time where processing is based on our legitimate interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact us at info@masoon.ch. We will respond to your request within 30 days.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the nFADP, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH-3003 Bern
Website: www.edoeb.admin.ch
If GDPR applies to you (e.g., you are in the EU/EEA), you also have the right to lodge a complaint with your local data protection supervisory authority.
10. Profiling and Automated Decision-Making
In accordance with Art. 21 nFADP, we inform you of the following:
- Profiling: We do not engage in profiling that produces legal effects or similarly significantly affects you. Google Analytics 4 may create pseudonymised audience segments for analytical purposes, but these are not used for individual decision-making.
- Automated individual decisions: We do not make decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration, in accordance with Art. 8 nFADP and Art. 1–6 DPO. These measures include:
- SSL/TLS encryption for data in transit
- Secure hosting on EU-based servers (SiteGround)
- Regular software updates and security patches
- Access controls and password protection
12. Cookies
Our website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes and durations, and how to manage your preferences, please refer to our Cookie Policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The most current version will always be available on this page with the date of the last update. We encourage you to review this policy periodically.
14. Contact
If you have any questions about this Privacy Policy or our data processing practices, please contact us:
ÐorÐe Kodžić
Masoon — Web Design & Digital Marketing
Basel, Switzerland
Email: info@masoon.ch
