Privacy Policy

1. Responsible Entity

The entity responsible for the processing of personal data under the Swiss Federal Act on Data Protection (FADP) is:

2. General Information

The protection of your personal data is important to us. We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and the Data Protection Ordinance (DPO). Where individuals from the European Economic Area (EEA) are affected, we also comply with the requirements of the EU General Data Protection Regulation (GDPR).

Personal data refers to any information that relates to an identified or identifiable natural person.

3. Data Processed When Visiting the Website

When you access our website, our hosting provider automatically collects technical information in server log files. This includes in particular:

• IP address of the accessing device
• Date and time of access
• Name and URL of the requested file
• Amount of data transferred
• Notification of successful retrieval
• Browser type, browser version and operating system used
• Referrer URL (previously visited page)

This data is used exclusively to ensure the smooth operation of the website and to improve our services. This data is not merged with other data sources.

4. Hosting

The website is hosted by:

Vercel Inc. 440 N Barranca Ave #4133 Covina, CA 91723, USA

Vercel processes technically necessary data (in particular server log files) on our behalf to deliver the website. Data may be transferred to the USA. The USA is considered a country without an adequate level of data protection under Annex 1 of the DPO. The transfer is based on standard contractual clauses and supplementary protective measures by Vercel.

5. Cookies

Our website only uses technically necessary cookies to the extent required for the operation of the website. No cookies are used for marketing, tracking, or analytics purposes.

6. Contact

If you contact us by email, the data you provide (email address, name, content of the message) will be stored to process your enquiry and in case of follow-up questions. We will not share this data with third parties without your consent.

7. Disclosure of Data to Third Parties

We only share your personal data with third parties if:

• You have given your explicit consent,
• It is necessary for the performance of a contract with you,
• There is a legal obligation, or
• Disclosure is necessary to protect legitimate interests.

Disclosure abroad only takes place to recipients in countries with an adequate level of data protection or under appropriate safeguards (e.g. standard contractual clauses).

8. Retention Period

We only process personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations. Server log files are automatically deleted or anonymised after a short period.

9. Data Security

We take appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

10. Your Rights

Under the Swiss Federal Act on Data Protection, you have the following rights:

• Right of access: You may request information about whether and which personal data we process about you.
• Right to rectification: You may request the correction of inaccurate data.
• Right to erasure: You may request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent

To exercise your rights, an informal notification to info@finstory.ch is sufficient. You also have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy at any time to reflect changes in legal requirements or changes to our services. The version published on our website shall apply.