Privacy Policy

This policy explains what personal data we process when you visit this website or contact us, why, and what rights you have. It applies to the Swiss Federal Act on Data Protection (revFADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR). The short version: we collect as little as we can, we never sell data, and nothing optional runs without your permission.

1. Who is responsible

The controller for the processing described here is:

Alex Feng and Philip Rocki, trading as Fenro
[Postal address to be added]
hello@fenro.ch

For any question about your data, or to exercise your rights, write to hello@fenro.ch.

2. Visiting this website

When you open a page, your browser sends technical data to our hosting provider so the page can be delivered: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is kept in short-lived server logs, used to deliver the site and to detect and fix faults and abuse, and not combined with other data.

Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Fonts, images and the 3D graphics are served from our own domain. The site loads nothing from third-party servers unless you agree to analytics (see below).

3. Contacting us

If you use the contact form or email us, we process what you send: your name, email address and message, and your company and phone number if you give them. We use this only to answer you and, if it comes to that, to prepare and carry out work together. We do not add you to a mailing list and do not send you marketing.

Form submissions are delivered to our inbox by an email service and stored in a database so that no enquiry is lost (see section 6).

Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

4. Cookies

We only use cookies that are strictly necessary, plus analytics cookies if and when you allow them. Nothing optional is loaded before you choose, and “Reject all” is as easy as “Accept all”. If your browser sends a Global Privacy Control signal, we treat it as a refusal.

You can change or withdraw your choice at any time with the “Cookie settings” link in the footer of every page, or right here: Cookie settings. Withdrawing deletes the analytics cookies. It does not affect processing that took place before.

5. Google Analytics

If you allow it, we use Google Analytics 4 to understand how the site is used: which pages are visited, how visitors arrive, and roughly where they are and what devices they use. It helps us decide what to improve. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as our processor.

• Google Analytics 4 does not log or store IP addresses; location is derived only to country or city level.
• Google signals, advertising features and ad personalisation are switched off. The data is not used for advertising.
• Usage data is kept in Google Analytics for 2 months, then deleted.
• Data may be processed by Google LLC in the USA (see section 6).

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. More in Google's privacy policy.

6. Service providers and transfers abroad

We do not sell or rent personal data. We share it only with service providers that process it on our behalf, under a data processing agreement and only for the purposes above:

• Vercel Inc. (USA) hosts this website and keeps the server logs.
• Resend (USA) delivers contact form submissions to our inbox.
• Supabase Inc. stores contact form submissions.
• Google (Ireland / USA) provides Google Analytics, only with your consent.

Some of these providers are in the USA, or may access data from there. Where a provider is certified under the EU U.S. Data Privacy Framework and its Swiss extension, transfers rely on that. Otherwise they rely on the European Commission's standard contractual clauses, with the adaptations the Swiss Federal Data Protection and Information Commissioner recognises.

We may also disclose data where the law requires it, or to establish, exercise or defend legal claims.

7. How long we keep data

• Server logs: a short period set by our hosting provider, for operation and security only.
• Enquiries: as long as needed to answer them, and no longer than 12 months after our last contact, unless they lead to a working relationship or the law requires us to keep them (for example Swiss accounting rules, which require business records to be kept for ten years).
• Analytics: 2 months in Google Analytics; cookies as listed in section 4.

8. Your rights

Within the limits of the applicable law, you have the right to:

• ask whether we process your data, and get a copy of it;
• have inaccurate data corrected;
• have your data deleted, or its processing restricted;
• object to processing based on our legitimate interests;
• receive data you gave us in a common, machine-readable format;
• withdraw your consent at any time, with effect for the future.

Write to hello@fenro.ch. We may ask you to confirm your identity, and we will answer within 30 days.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), and in the EU the data protection authority of your country of residence or work.

We do not use your data for automated decisions or profiling.

9. Links, security and changes

This site links to other websites, such as LinkedIn and our clients' sites. We do not load anything from them; once you follow a link, their own privacy policy applies.

The site is served only over encrypted connections (HTTPS), and access to submitted data is limited to the two of us.

We will update this policy when what we do changes. The date at the top shows the current version.