Privacy Policy

Who is responsible

Marco Lüthi is the controller responsible for this website under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Marco Lüthi
Gutstrasse 172
8055 Zürich
Switzerland
hi@luthi-mar.co

This website

This website is a static site without cookies, analytics or tracking. Fonts are served from this website itself, so your browser does not contact third-party font services. When you visit a page, the hosting provider Vercel Inc. (based in the United States, with data centres worldwide) automatically records technical access data in server logs: your IP address, date and time, the requested page, referrer and browser type. This is needed to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). The logs are deleted after a short period. Links to the App Store take you to Apple, where Apple's privacy policy applies.

Booking a call

On marcoluthi.com and on this site (Get in touch) you can book a paid session in a calendar provided by Cal.com, Inc. (United States). The calendar loads from cal.com only when you open the booking step; until then your browser does not contact cal.com. When it loads, cal.com receives your IP address and browser details, and if you book, the name, email address and notes you enter, to schedule the session and send confirmations (contract, Art. 6(1)(b) GDPR). Payments for a session are handled by cal.com's payment provider. Cal.com's privacy policy applies to what you enter there.

Contact form

The Get in touch form on marcoluthi.com and on this site sends what you enter (your name if you give it, your email address and your message, and for a job the conditions you ticked) to Marco Lüthi as an email, so he can answer you (pre-contractual steps and legitimate interest, Art. 6(1)(b) and (f) GDPR). The form posts to this site's own address only; the message is passed on by a small function run by the hosting provider and delivered by Resend, Inc. (United States), which keeps it in its sending log for a short period. Nothing is stored on this website, and your address is not added to any list. Your IP address is used only to limit how many messages one connection can send per hour. You can always write to the address above instead.

Your rights

You have the right to request access to your personal data and to have it corrected or deleted, to object to or restrict processing, and to data portability. Because the apps store your data on your device and do not identify you, the developer usually holds no personal data about you. Most of it you can delete yourself by deleting the app.

To exercise your rights, email hi@luthi-mar.co. You can also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country.

International transfers

Apple may process data in the United States and other countries. Apple describes the safeguards it uses for these transfers, such as the Data Privacy Framework and standard contractual clauses, in its privacy policy. This website is hosted by Vercel Inc., based in the United States; its server logs are transferred under the same kind of safeguards.