DE EN

Privacy Notice

What personal data is processed when you visit atelierkroll.art, for which purposes, and what rights you have.

v2.0 – August 2026 (replaces v1.0 of 23 February 2024)

Atelier Kroll (“we” or “us”) processes personal data in accordance with the Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR). This notice describes what personal data arises when you visit this website, what we use it for, who receives it and what rights you have.

This website is a portfolio site. It has no online shop, no user accounts, no contact form and no newsletter. Questions about this notice can be sent to michael@atelierkroll.art .

1. Controller

The controller within the meaning of Art. 5 lit. j DSG and Art. 4 no. 7 GDPR is:

Atelier Kroll
Michael Kroll
Gatterächerstrasse 16
CH-5436 Würenlos
Switzerland

E-Mail: michael@atelierkroll.art

2. Data collected automatically

When you open this website your browser transmits technically necessary information, which our hosting provider may record in server log files. This includes:

  • IP address, date and time of access, the address requested, volume of data transferred, browser and operating system used

This information is used solely to deliver the website, keep it running and detect and defend against attacks on the infrastructure. It is not combined with other data sources and is not used to draw conclusions about you personally. Server log files are deleted after six months at the latest.

3. Data you send to us

If you write to us by e-mail, we process the information contained in your message – usually your name, e-mail address and the content of your enquiry – solely in order to answer it. Providing this information is voluntary; without it we cannot deal with your request.

4. Cookies and local storage

This website sets no cookies. There is no advertising, no profiling and no cross-device recognition.

If you use the switch in the header to change between the light and dark appearance, that preference is stored in your browser’s local storage (localStorage) so it is remembered on your next visit. This entry stays on your device, is never transmitted to us and allows no conclusions about you personally. You can delete it at any time through your browser settings.

The fonts and icons used on this website are served from our own server. No third-party resources such as Google Fonts are loaded.

5. Audience measurement with Plausible

We use Plausible Analytics, a service of Plausible Insights OÜ, Tartu, Estonia, to measure how our website is used. Plausible is a privacy-friendly analytics service that works without cookies and does not create identifiers that persist across devices or across days.

Only aggregated information is collected: the page visited, the referring page, browser type and version, operating system, device type, and the country, region and city derived from the IP address.

Your IP address and user agent are not stored. To distinguish repeat visits within a single day, Plausible generates a hash from a daily rotating random value, the domain, the IP address and the user agent. That random value is deleted after 24 hours, which makes recognition beyond the same day technically impossible.

Data is processed exclusively within the European Union and stored on servers in Germany. No transfer to third countries takes place. A data processing agreement is in place with Plausible.

The legal basis is our legitimate interest in a data-minimising statistical analysis of how our website is used (Art. 6(1)(f) GDPR). Because no cookies are set and no personal data is stored, no consent and no cookie banner is required.

Further information is available in Plausible’s own privacy documentation at https://plausible.io/data-policy .

6. Embedded videos (YouTube)

Some portfolio pages include videos from our YouTube channel. These videos are not loaded automatically. You first see a local placeholder; at that point there is no connection whatsoever to YouTube or Google.

Only when you actively click that placeholder is the video loaded from youtube-nocookie.com. At that moment data such as your IP address is transmitted to Google Ireland Limited or Google LLC; the processing then takes place under their responsibility and their privacy policy (https://policies.google.com/privacy ). The legal basis for this transfer is the consent you give by clicking (Art. 6(1)(a) GDPR).

Where the GDPR applies, we base the processing on the following grounds:

  • Legitimate interest (Art. 6(1)(f) GDPR) for technical operation, website security and audience measurement
  • Contract or pre-contractual steps (Art. 6(1)(b) GDPR) for answering your enquiries
  • Consent (Art. 6(1)(a) GDPR) for loading embedded videos

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

8. Recipients and transfers abroad

We pass on personal data only where this is necessary to operate the website or where we are legally obliged to do so. Recipients are:

  • Hosting and e-mail: Amazon Web Services. The website is served from the Europe region (Frankfurt, eu-central-1). When delivered through the content delivery network, requests may for technical reasons be routed via locations outside the EU.
  • Audience measurement: Plausible Insights OÜ, Estonia – processing exclusively within the EU (see section 5).
  • Authorities and courts, where we are legally required to disclose.

Where personal data reaches countries without an adequate level of protection, we base the disclosure on appropriate safeguards, in particular the European Commission’s standard contractual clauses.

9. Retention

We keep personal data only as long as it is needed for the relevant purpose or as long as statutory retention obligations require:

  • Server log files: six months at most
  • E-mail correspondence: until your enquiry has been dealt with, thereafter within the scope of any statutory retention obligations
  • Audience measurement statistics: in aggregated form only, with no personal reference

10. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. The website is served exclusively over encrypted HTTPS. Complete protection during transmission over the internet is nevertheless not possible.

This website links to external sites, for example our YouTube and Instagram channels as well as tool manufacturers and retailers. Clicking such a link takes you to a service we have no influence over and to which this privacy notice does not apply. The privacy terms of the respective provider apply instead.

12. Children

This website is not aimed at children. We do not knowingly collect personal data from children under 16. Should we become aware of such data, we will delete it without delay.

13. Your rights

Within the limits of the applicable law you have the right to obtain information about the personal data processed about you, and to have it rectified, erased or restricted, to receive or port it, and to object to the processing. Please contact michael@atelierkroll.art to exercise these rights.

Please note that we have to verify your identity before acting on such a request, and that statutory retention obligations may prevent immediate erasure.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern; in the European Union with the data protection authority of your place of residence (Art. 77 GDPR).

14. Changes

We may amend this privacy notice when the website or the legal situation changes. The version published on this page, bearing the date given above, is the one that applies.