1. Data Controller Identification
The entity responsible for data control and processing on this website is:
Vistasprismreel Alpine Media AG
Corporate Identification (UID): CHE-429.814.902
Gotthardstrasse 26, 6004 Lucerne, Switzerland
Designated Data Protection Officer (DPO): [email protected]
2. Scope of Personal Data Collection
We restrict data collection to what is technically necessary to provide accurate geographic documentation and maintain reliable server infrastructure. We collect data under the following categories:
- Automated Server Logs: When accessing our domain, our edge servers record your IP address (anonymized at the subnet level), browser user-agent header, referring URL, timestamp, and requested page asset. This data is utilized solely for denial-of-service prevention and infrastructure diagnostics.
- Direct Communications Data: When submitting an inquiry via our contact form, we collect your name, email address, topic selection, and the textual content of your transmission.
- Technical Preference Storage: We use browser localStorage to record your cookie consent choice so that you are not repeatedly prompted on subsequent visits.
3. Legal Basis for Processing
Under Article 6 of the Swiss Revised FADP and Article 6(1) of the European GDPR, our processing grounds are:
- Legitimate Interests (Art. 6(1)(f) GDPR): Operating a secure, performant web server and preventing unauthorized automated abuse.
- Consent (Art. 6(1)(a) GDPR): Voluntarily provided when you submit a message through our inquiry desk or opt into optional functional cookies.
- Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Archiving business correspondence to satisfy Swiss corporate record-keeping statutes.
4. Third-Party Infrastructure Processors
We do not vend, rent, or monetize personal information. Certain third-party service providers process technical data strictly within contracted roles:
- Hosting and Content Delivery Networks: Cloud and edge providers that cache static assets and mitigate DDoS attacks under strict Data Processing Agreements (DPAs) incorporating Standard Contractual Clauses.
- Security Analytics: Anonymized logging providers ensuring web server uptime and link resolution integrity.
5. International Data Transfers
Our primary server storage nodes reside within Switzerland and the European Economic Area (EEA). Where data transfers occur to jurisdictions without an equivalent adequacy decision from the Swiss Federal Data Protection and Information Commissioner (FDPIC), transfers are executed using the revised standard contractual clauses endorsed by the European Commission and adapted for Swiss law.
6. Retention Schedules
Server access log entries are purged automatically within thirty (30) days of capture. Inquiries transmitted through our contact form are retained in our operational inbox for up to twelve (12) months to allow follow-up communications, after which they are deleted unless retention is required by Swiss commercial accounting regulations.
7. Rights of Data Subjects
Under applicable Swiss and European legislation, you maintain enforceable rights regarding your data:
- Right of Access: Request a structured copy of any personal data we hold associated with your email address.
- Right to Rectification: Request correction of inaccurate or incomplete corporate records.
- Right to Erasure ("Right to Be Forgotten"): Request immediate permanent deletion of communication history where no legal retention requirement applies.
- Right to Restrict Processing: Request suspension of data handling pending dispute resolution.
- Right to Lodge a Complaint: File a formal complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) in Bern or your local EU supervisory authority.
8. Data Protection Officer Contact
To exercise any statutory data right or submit inquiries regarding our cryptographic security standards, write directly to our compliance officer at [email protected]. Inquiries are resolved within thirty (30) business days without fee.