// Legal
Privacy
This statement explains what personal data I process when operating this website and what rights you have. It complies with the revised Swiss Federal Act on Data Protection (revFADP) and — where applicable — the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller within the meaning of revFADP / GDPR is:
ohla//studio · Olin Heitmann
Chur, Switzerland
hello@ohla-studio.ch
+41 76 801 10 25
2. Scope
This statement applies to the website ohla-studio.ch and all its subdomains, and to any data processing in connection with visiting these pages or contacting me through the listed channels. Linked third-party sites are governed by their own privacy policies.
3. Server log files
When you visit the site, technically necessary data is collected automatically and stored in server log files: anonymised IP address, date and time, browser type and version, operating system, referrer URL and amount of data transferred. This data is used for security, stability and troubleshooting. It is not merged with other data sources. Log files are deleted after a maximum of 30 days.
4. Cookies and local storage
This site uses strictly necessary cookies only (theme selection, cookie banner status, language preference) plus — with your consent — statistics cookies from Google Analytics 4. You can disable cookies in your browser at any time or delete stored cookies. Site functionality may be limited as a result.
5. Google Analytics 4
I use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) for statistical analysis of usage behaviour. IP addresses are anonymised before storage (IP anonymisation enabled). No advertising cookies, remarketing or Google Signals are used.
Legal basis is your consent given via the cookie banner (Art. 6(1)(a) GDPR / Art. 31(1) revFADP). You may withdraw consent at any time by deleting the cookies stored for this site in your browser; the banner will then reappear on your next visit. Cookie data may be transferred to a Google server in the United States and stored there. Google relies on EU Standard Contractual Clauses for these transfers.
6. Fonts (Bunny Fonts)
This site uses Bunny Fonts (BunnyWay d.o.o., Slovenia) as a privacy-friendly alternative to Google Fonts. Fonts are loaded from the Bunny CDN; according to the provider, no personal analysis takes place. IP addresses are processed solely for delivery and are not logged.
7. Contact
When you use the contact form or write to me by email or phone, I process the information you submit (name, email, phone number, message content) to respond to your enquiry and any follow-ups. The data is not passed on to third parties. It is deleted once the enquiry has been concluded and no statutory retention obligations conflict (typically after 24 months without further contact).
8. Hosting and processors
The website runs on servers in Switzerland and/or the EU/EEA. The hosting provider processes data exclusively on my behalf and is contractually bound to Swiss or EU data protection standards. The current provider can be disclosed on request.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the lock icon in your browser bar and the «https://» prefix.
10. Your rights
You have the following rights at any time:
— Access to data stored about you
— Rectification of inaccurate data
— Erasure («right to be forgotten»)
— Restriction of processing
— Data portability in a structured, commonly used format
— Objection to processing
— Withdrawal of consent with effect for the future
An informal email to hello@ohla-studio.ch is sufficient. Proof of identity may be requested.
11. Data security
I take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access: up-to-date encryption, access controls, regular backups and software updates. Complete protection against all conceivable internet risks is technically not possible.
12. Retention period
Personal data is processed only for as long as necessary for the respective purpose or as required by law (e.g. ten years for accounting records under Art. 958f of the Swiss Code of Obligations). After that, data is deleted or anonymised.
13. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern (edoeb.admin.ch). In the EU/EEA, the competent national data protection authority applies.
14. Changes to this statement
I reserve the right to amend this privacy statement to reflect legal changes or adjustments to my services. The version published on this page is the current and applicable one.
Last updated: April 2026