Privacy Policy

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the «Responsible Entity» section below.

How do we collect your data?

Your data is collected partly by you providing it to us (e.g. via a contact form). Other data is automatically collected by our IT systems when you visit the website — primarily technical data (e.g. internet browser, operating system, time of page access).

Strato AG (Virtual Private Server)

This website is hosted on a Virtual Private Server (VPS) provided by:

The servers are located in data centers within the European Union. Strato AG acts as a data processor; we have concluded a Data Processing Agreement (DPA) with Strato AG in accordance with Art. 28 GDPR.

Server Log Files

The hosting provider automatically collects and stores information in server log files that your browser automatically transmits:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address (anonymized)

This data is not merged with other data sources or used for advertising purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

Cloudflare (Performance and Security)

We use the Content Delivery Network (CDN) and security services provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare offers web optimization and security services that route data transfer between your browser and our website through the Cloudflare network. This serves to increase loading speed (performance) and defend against cyber attacks (security).

The use of Cloudflare is based on our legitimate interest in providing a secure, fast, and efficient online experience (Art. 6(1)(f) GDPR). We have concluded a Data Processing Agreement (DPA) with Cloudflare.

Responsible Entity

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the «https://» in the address bar and the padlock icon in your browser.

Our website uses cookies — small text files stored on your device that contain no viruses or malicious software.

Essential Cookies

Essential cookies are required for the technical operation of the website. They enable navigation, language preference storage, and the wishlist feature. Legal basis: Art. 6(1)(f) GDPR (legitimate interest) — no prior consent required.

Analytical Cookies (consent required)

With your explicit consent, we use Google Analytics 4 (see Section 5). These cookies are only activated after your approval. Legal basis: Art. 6(1)(a) GDPR. You can withdraw or change your consent at any time via the cookie banner.

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»). GA4 is only activated with your prior consent.

Privacy Measures

• IP anonymization is enabled — your IP address is truncated before transmission
• Data Processing Agreement (DPA) concluded with Google Ireland Limited
• Standard Contractual Clauses (SCC) for data transfers to the USA
• Sharing GA4 data with Google account data is disabled
• Data deletion after 14 months

Legal Basis and Opt-out

Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner. You can also prevent collection via the Google browser add-on: tools.google.com/dlpage/gaoptout

If you send us inquiries via contact form or email, your details (name, email address, phone number, message) will be stored for the purpose of processing your request and any follow-up questions. We will not share this data without your consent. Legal basis: Art. 6(1)(b) GDPR.

• Right to access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. For Switzerland:

To exercise your rights, please contact us in writing or by email: info@negra.ch