Data Protection Declaration

Who is responsible
Scanderbeg Sauer, Andreana Scanderbeg and Alexander Sauer, Im Stutz 10, 8602 Wangen b. Dübendorf, Switzerland. office@scanderbegsauer.com

This declaration explains how we process personal data when you visit scanderbegsauer.com, write to us or subscribe to our newsletter. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR). We have not appointed a data protection officer. For any question about your data, write to the address above.

Server log files
When you visit our website, our hosting provider automatically records technical data: IP address, date and time of access, the page requested, the referring page, browser type and operating system. We need this data to deliver the website, keep it stable and secure, and detect misuse. Log files are deleted once they are no longer needed for these purposes, unless they are required to investigate a security incident. Legal basis under the GDPR: legitimate interest (Art. 6(1)(f)).

Hosting
Our website is hosted by walkingtoweb GmbH, Obsthaldenstrasse 187, 8046 Zurich, Switzerland. All data, including backups, is stored exclusively in Switzerland, on infrastructure operated by walkingtoweb itself. walkingtoweb processes data on our behalf and under our instructions.

Web analytics with Matomo
We use Matomo, an open source analytics tool installed on walkingtoweb’s servers in Switzerland. Matomo runs without cookies and stores nothing on your device. It shows us how the website is used: which pages are visited, for how long and from which type of device. To do this, Matomo processes your IP address and technical information sent by your browser. Your IP address is shortened before it is stored, so it cannot be linked to you. The data stays in Switzerland, is not combined with other data and is not passed on to third parties. We use it only to understand how the website is used and to improve it. Legal basis under the GDPR: legitimate interest (Art. 6(1)(f)). You can object to this analysis at any time by writing to us.

Newsletter
If you subscribe to our newsletter, we use your name, email address and preferred language only to send it. To confirm that the address belongs to you, we use a double opt-in: you receive an email and confirm your subscription by clicking a link. We log the time of registration and confirmation and the IP address used, as proof of your consent. We also record whether a newsletter has been opened, so we can see which content is relevant to our readers. The newsletter is sent via rapidmail GmbH, Freiburg im Breisgau, Germany, whose servers are located in Germany. You can unsubscribe at any time using the link in every newsletter or by writing to us. Your address is then removed from the mailing list. Legal basis under the GDPR: your consent (Art. 6(1)(a)).

Contact by email
When you write to us, we process the information you send, usually your name, email address and message, to answer your request and, where it leads to a project, to carry it out. We keep this correspondence as long as needed for that purpose and as required by statutory retention periods. Legal basis under the GDPR: steps prior to a contract or performance of a contract (Art. 6(1)(b)).

Disclosure and transfer abroad
We do not sell or rent personal data. We share it only with the service providers named above, who process it on our behalf, or with authorities where the law requires it. Your data is stored in Switzerland and Germany. Both countries offer an adequate level of data protection recognised under Swiss and EU law. No data is transferred to the United States.

Data security
Our website is transmitted over an encrypted HTTPS connection (TLS). We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

Your rights
You have the right to request access to your personal data, to have it corrected or deleted, to receive it in a common electronic format, to object to its processing and to withdraw any consent with effect for the future. Under the GDPR, you can also request that processing be restricted. To exercise these rights, write to office@scanderbegsauer.com. If you believe we are processing your data unlawfully, you can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with the data protection authority in your country.

Changes
We update this policy when our website, our services or the law change. The version published here applies.

Last updated: October 2026