Privacy policy

Who is responsible

Origama KLG, c/o Joey Merk, Im oberen Gern 47, 8409 Winterthur, Switzerland, is responsible for the personal data processed on origama.ch.

For any question about your data, or to exercise your rights, write to studio@origama.ch.

Contact form and email

When you write to us through the contact form or by email, we process your name, your email address and your message to answer you. The form sends them to our mailbox as an email; the website itself stores none of it.

Our email runs through Hostpoint AG in Rapperswil-Jona, Switzerland. We keep an enquiry as long as answering it and any work that follows require, and delete it afterwards unless the law requires us to keep it.

For visitors from the EU, the legal basis is Art. 6(1)(b) GDPR (steps towards a contract) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).

Hosting (Netlify)

The website is hosted by Netlify, Inc., San Francisco, USA. To deliver the pages and protect them from abuse, Netlify processes technical data with every request: IP address, date and time, the page requested, browser and operating system. These are kept briefly in server logs and are not combined with other data.

Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in a secure, working website.

Cookies and consent

Without your consent we keep only what the site needs to work: your choice of language (the NEXT_LOCALE cookie, one year) and your choice in the cookie banner (in your browser's local storage, under origama-consent).

Statistics and marketing services load only once you allow them in the banner. We use Google's Consent Mode v2 for this: until you agree, analytics and advertising storage are set to denied.

You can change or withdraw your choice at any time under “Cookie settings” at the foot of every page. Legal basis (GDPR) for statistics and marketing: your consent, Art. 6(1)(a).

Google Tag Manager

We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is a tool for adding other services to the site and loads on every visit.

Tag Manager itself sets no cookies and analyses no data, but loading it sends your IP address to Google. Which services it starts afterwards depends on your choice in the cookie banner.

Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in managing the services on the site in one place.

Google Analytics

If you allow “Statistics”, we use Google Analytics 4 by Google Ireland Limited. It shows us which pages are visited, how people find us and how many enquiries come in through the site.

It records the pages you visit, how long you stay, your approximate location, your device and browser, and a random identifier kept in cookies (_ga and _ga_…, up to two years). Google Analytics 4 does not store IP addresses. Google signals are switched off, and the data is deleted after 14 months.

Without your consent, Google Analytics does not load. Legal basis (GDPR): Art. 6(1)(a). More at policies.google.com/privacy.

Microsoft Clarity

If you allow “Statistics”, we also use Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. It shows us where people click, how far they scroll and where they leave, as heatmaps and as recordings of individual visits.

Clarity records mouse movements, clicks and scrolling, your device and browser, and a random identifier kept in cookies (_clck, one year; _clsk, one day). All text on the page and everything you type, including into the contact form, is masked before it is recorded.

Without your consent, Clarity does not load. Legal basis (GDPR): Art. 6(1)(a). More at privacy.microsoft.com.

Google Ads

If you allow “Marketing”, we use Google Ads by Google Ireland Limited with conversion tracking. It shows us whether an enquiry came through one of our ads, and lets us show our ads again to people who have visited the site (remarketing).

For this, cookies are set, and the ad you came from and the enquiry as an event are sent to Google. Without your consent, none of it loads. Legal basis (GDPR): Art. 6(1)(a).

Map on the contact page

The map on the contact page is drawn from map tiles by CARTO (CartoDB Inc., USA), based on OpenStreetMap data. To show it, your browser loads the tiles directly from CARTO, which sends your IP address there. The map sets no cookies.

Legal basis (GDPR): Art. 6(1)(f), our legitimate interest in showing where we are.

Transfers outside Switzerland

Netlify, Google, Microsoft and CARTO may process data in the USA and other countries. Where a provider is certified under the Swiss-US and EU-US Data Privacy Framework, as Google and Microsoft are, Switzerland and the EU recognise its protection as adequate. Otherwise we rely on the European Commission's standard contractual clauses, which the Swiss Federal Data Protection and Information Commissioner (FDPIC) also recognises.

Your rights

You may ask what personal data we process about you, have it corrected or deleted, object to its processing, and receive it in a common format. Consent you have given can be withdrawn at any time, with effect for the future.

To do so, write to studio@origama.ch. We usually answer within 30 days.

You may also complain to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, as a visitor from the EU, to the data protection authority in your country.