Privacy Policy

Controller / Responsible party

The public-facing brand name is Andermatt Design. The legal entity responsible for data processing is P. Heiniger Design.

Legal basis

The processing of personal data on this website is based on the Swiss Federal Act on Data Protection (revDSG/nDSG, in force 1 September 2023). Where users from the European Union or EEA interact with this website, the General Data Protection Regulation (GDPR) may additionally apply.

Data is processed on the following legal bases as applicable: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR / Vertragserfüllung nach nDSG), legitimate interests in operating the website and responding to inquiries (Art. 6(1)(f) GDPR / berechtigte Interessen nach nDSG), compliance with legal obligations, and consent where explicitly given.

Data processed

Server & access logs

When you visit this website, the web hosting infrastructure (Vercel) automatically records access data, including IP address, browser type, operating system, referrer URL, pages visited, and timestamp. These logs serve technical operation and security purposes. They are typically retained for a short period as determined by the hosting provider.

Contact form

When you submit the contact form, we collect your name, email address, and message. This data is used exclusively to respond to your inquiry. Depending on configuration, submissions may be stored in a Google Sheets spreadsheet and a notification sent via Resend email service.

Diagnostic questionnaire (conversation request)

This website includes a multi-step diagnostic conversation flow. When you complete and submit this form, the following data may be collected and processed:

• Answers to brand/positioning questions (essence, competitive positioning, brand signal)
• Name
• Business name
• Email address
• Website URL
• Phone number
• Additional comments
• Language preference
• Submission timestamp
• Processing status

This data is used to prepare for and conduct the requested conversation. Depending on configuration, it is stored in Google Sheets and a notification is sent via Resend. Submission is subject to your explicit consent via the checkbox in the form.

Email correspondence

If you contact us by email, the content of your message and your email address (and any other data you provide) are stored for the purpose of handling your request. We do not pass this data to third parties unless required by law or necessary for the performance of a contract.

Booking / calendar interactions

When you book a discovery call via the calendar link, you interact with Google Calendar (Google LLC). Your name, email address, and selected appointment time are shared with Google. The data processing is governed by Google's privacy policy.

Google Privacy Policy

Newsletter

At present, no newsletter or marketing email service is operated. If this changes in future, this privacy policy will be updated accordingly.

Processors and third-party providers

We use the following third-party providers in the operation of this website. Where personal data may be transmitted to these providers, we rely on their data processing agreements and applicable transfer mechanisms.

Where P. Heiniger Design processes personal data on behalf of a client within a project (e.g. hosting a client's contact forms or managing a client's customer data), a separate data processing agreement (DPA/AVV) may be concluded with that client. This governs the respective roles and responsibilities under applicable data protection law.

Cookies and local storage

This website uses technically necessary cookies and browser storage mechanisms. No advertising or marketing cookies are used.

Fonts: This site uses the Inter typeface, which is self-hosted and served directly from our hosting infrastructure (Vercel). No request is made to Google Fonts or any external font CDN. No IP address is transmitted to third parties for typography.

No analytics tracking (e.g. Google Analytics, Plausible) is active. If analytics are configured in future, this policy will be updated and appropriate consent obtained where required.

Data retention

Personal data is retained only as long as necessary for the stated purpose or as required by applicable law:

• Inquiry and contact data: retained for the duration of the project relationship and for a reasonable period thereafter, typically up to 10 years for business correspondence in accordance with Swiss law.
• Diagnostic questionnaire submissions: retained while communication/project is active; periodically reviewed and deleted when no longer needed.
• Server access logs: typically 30–90 days at hosting provider level.
• Accounting-relevant documents: retained in accordance with Swiss accounting and tax obligations (typically 10 years).

Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Data transmission between your browser and this website is encrypted via HTTPS/TLS. We cannot guarantee absolute security against all possible threats.

Use of AI tools

In the course of project work, the Provider uses AI-assisted tools including ChatGPT (OpenAI), Claude (Anthropic), and Gemini (Google) as workflow aids — for example for drafting, ideation, research, and analysis. These tools are used as creative and technical support; all AI-generated output is reviewed and validated by the Provider before use. AI-generated content is never delivered directly to clients without human review.

Personal or confidential client data is not shared with AI tools unless this is appropriate for the project scope and subject to confidentiality and applicable data protection requirements. Where client data may be involved, details can be agreed in the individual project agreement.

Each AI provider processes data subject to its own privacy policy and terms of service. Providers: OpenAI (ChatGPT) · Anthropic (Claude) · Google (Gemini)

Your rights

Subject to applicable data protection law, you have the following rights regarding your personal data:

• Right of access: You can request confirmation of whether and which personal data we process about you.
• Right to rectification: You can request correction of inaccurate personal data.
• Right to erasure: You can request deletion of your data where applicable, subject to retention obligations.
• Right to restriction: You can request restriction of processing in certain circumstances.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: You have the right to contact the competent supervisory authority. In Switzerland: Federal Data Protection and Information Commissioner (FDPIC / EDOEB). If GDPR applies, also the supervisory authority of your EU country of residence.

To exercise your rights, please contact: info@andermatt.design

Changes to this policy

We reserve the right to update this privacy policy at any time. The current version is always available at this URL. We recommend checking this page periodically.