Last updated: August 2026

1. Data Controller

The data controller for personal data processed within the scope of this website is:

Roberto Induni
Bern, Switzerland

Email: mail@robertoinduni.ch
Website: robertoinduni.ch

Data protection inquiries can be sent to the email address provided above.

2. Purpose of this Policy

This policy explains what personal data is processed when visiting robertoinduni.ch, for what purposes it is used, to whom it may be disclosed, and for how long it is stored.

The processing of personal data is carried out in accordance with applicable Swiss law, particularly the Federal Act on Data Protection (FADP) and its implementing ordinance.

3. Website Visit and Technical Data

When visiting the website, certain technical data is automatically transmitted to the server and may be stored in log files.

This data includes, in particular:

• the IP address;
• the date and time of access;
• the page or file accessed;
• the address of the previously visited page;
• the browser type and version;
• the operating system used;
• information related to the device or internet service provider;
• the status of the request addressed to the server.

This data is processed to ensure the website’s operation, stability, and security, to detect technical errors, and to prevent abusive access or attacks.

Log data is deleted when it is no longer necessary for these purposes, subject to longer retention required for the analysis of a security incident or due to a legal obligation.

4. Website Hosting

The website, its files, databases, and the data necessary for its operation are hosted in Germany by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstrasse 68
D-02742 Friedersdorf
Germany

The hosting provider processes, in particular, the technical data necessary for the provision, operation, and security of the website, including IP addresses and log data.

A data processing agreement on behalf of the website owner has been concluded with the host.

5. Contacting Us

Visitors can contact us by email or using the form available on the website.

In this context, the communicated data may include, in particular:

• first name and last name;
• email address;
• phone number, if provided;
• the subject and content of the message;
• any attached files;
• other information provided voluntarily.

This data is used exclusively to process the request, respond to it, and, if necessary, continue the resulting exchanges.

Visitors are requested not to transmit sensitive personal data or confidential documents that are not necessary for processing their request.

Data is retained for the period necessary to process the request. It may be retained longer if retention is necessary to document correspondence, comply with a legal obligation, or establish, exercise, or defend rights.

6. Forms with Gravity Forms

The contact form is created with Gravity Forms and is integrated into the website’s WordPress system.

Information sent via the form is saved in the website’s WordPress database. It is also transmitted by email to the website owner so that they can process the request.

Depending on the fields and form configuration, technical information such as the IP address, the address of the page from which the form was sent, and browser-related information may also be recorded.

Data transmitted via the form is not used for advertising purposes and is not sold to third parties.

7. Spam Protection with Akismet

To detect unwanted messages and automated submissions, the website forms use the Akismet service.

For users and customers located in Switzerland, the service is contractually provided by:

Aut O’Mattic A8C Ireland Ltd.
Grand Canal Dock, 25 Herbert Place
Dublin, D02 AY86
Ireland

When a form is submitted, certain information is transmitted to Akismet to assess whether the message constitutes a legitimate submission or spam.

This information may include, in particular:

• the name provided in the form;
• email address;
• the content of the message;
• the IP address;
• the address of the page containing the form;
• the browser type and user agent;
• the address of the previously visited page;
• technical information necessary for message evaluation.

Processing is carried out exclusively to protect the website against spam, abuse, and automated submissions.

Akismet indicates that the vast majority of data related to spam detection is retained for a period between two weeks and 90 days.

Technical processing may also involve other companies or infrastructures of the Automattic group. Appropriate safeguards are implemented when data is processed outside countries offering an adequate level of protection.

8. Protection against Automated Submissions with Cloudflare Turnstile

The form is also protected against automated submissions and abuse using Cloudflare Turnstile.

The service is provided by:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
United States

Turnstile verifies whether the form’s use is likely from a human or an automated program.

To this end, Cloudflare processes technical information such as:

• the IP address;
• information related to the browser, device, and operating system;
• the visited page and the referrer address;
• technical characteristics of the browser;
• information related to interaction with the site;
• temporary identifiers or tokens necessary for verification;
• the result of the security verification.

The Turnstile module loads resources from Cloudflare’s infrastructure. A connection with Cloudflare is therefore established when the form is loaded or used.

This data is used to ensure the security of the form and prevent automated or abusive submissions. It is not used by the website owner for advertising purposes.

Data may be processed in the United States or other countries where Cloudflare operates its infrastructure or uses subcontractors.

Cloudflare states that it participates in the Swiss-U.S. Data Privacy Framework for transfers of personal data from Switzerland to the United States. Cloudflare also states that it uses appropriate contractual safeguards when necessary.

9. WordPress, Elementor, and Other Technical Components

The website is operated with the WordPress content management system. The layout and certain functions of the site are created with Elementor and additional extensions.

These software components are used, in particular, to display pages, manage content, and provide the technical functions of the website.

The mere display of content created with this software is not used to create advertising profiles of visitors.

Specific processing related to the contact form, Akismet, and Cloudflare Turnstile are described separately in this policy.

10. Fonts

The fonts used on this website are stored locally on the website’s server.

When displaying pages, no connection to Google Fonts servers is established for this purpose. Therefore, no visit data is transmitted to Google solely by loading the fonts.

11. Cookies and Comparable Technologies

The website currently does not use advertising cookies or technologies intended to track visitors for marketing purposes or to create advertising profiles.

Technically necessary cookies or comparable technologies may be used to ensure the operation, security, and administration of the website.

Security functions such as Cloudflare Turnstile may also use temporary technical identifiers or comparable mechanisms necessary for their operation.

Visitors can configure their browser to block or delete cookies. However, blocking technically necessary technologies may limit certain website functions.

12. Sending and Receiving Emails

When a visitor uses the contact form or communicates directly by email, the data necessary for transmitting the message is also processed by the technical provider used for sending and receiving emails.

Processing is limited to the information necessary for the routing, reception, and management of communication.

13. Recipients of Data

Personal data is only disclosed to third parties when necessary for the operation and security of the website, for processing a request, or for complying with a legal obligation.

Recipients include, in particular:

• ALL-INKL.COM as the hosting provider;
• the technical provider used for sending and receiving emails;
• Aut O’Mattic A8C Ireland Ltd. and the companies or subcontractors necessary for Akismet’s operation;
• Cloudflare within the scope of Cloudflare Turnstile;
• technical providers that must be engaged for the secure operation of the website;
• competent authorities or courts when disclosure is legally required.

Technical providers only receive the data necessary for the provision of their services.

14. Data Transfer Abroad

In the context of operating the website, personal data is transferred or made accessible to providers located outside Switzerland.

This concerns, in particular:

• Germany for website hosting with ALL-INKL.COM;
• Ireland in connection with the use of Akismet;
• the United States and potentially other countries within the international infrastructures of Cloudflare and Automattic.

If the recipient country offers a level of data protection recognized as adequate by Switzerland, the transfer may take place on this basis.

If this is not the case, appropriate safeguards are used in accordance with applicable Swiss law, particularly recognized contractual clauses or a recognized protection mechanism such as the Swiss-U.S. Data Privacy Framework when applicable to the relevant recipient.

15. Retention Period

Personal data is retained only for the period necessary for the purposes for which it was collected.

The specific duration depends, in particular, on:

• the nature of the request;
• the need to continue correspondence;
• requirements related to website security;
• statutory retention periods;
• the need to establish, exercise, or defend rights.

When data is no longer necessary, it is deleted or anonymized insofar as no retention obligation prevents this.

Retention periods applied directly by certain external providers are determined by their own retention rules. Specific information regarding Akismet is provided above.

16. Data Security

Appropriate technical and organizational measures are taken to protect personal data against loss, alteration, destruction, unauthorized access, or any other misuse.

However, data transmission over the internet can never be considered entirely secure. Absolute protection against all risks cannot therefore be guaranteed.

17. Rights of Data Subjects

Within the limits provided by applicable law, any data subject may, in particular, request:

• whether personal data concerning them is being processed;
• access to the processed personal data;
• rectification of inaccurate data;
• deletion of data that is no longer necessary;
• cessation or prohibition of certain processing when legal conditions are met;
• the provision or transmission of certain data in a common electronic format when legal conditions are met.

Requests can be addressed to:

[mail@robertoinduni.ch](mailto:mail@robertoinduni.ch)

Appropriate proof of identity may be requested when necessary to prevent personal data from being disclosed to an unauthorized person.

Certain rights may be limited by legal obligations, overriding legitimate interests of third parties, or the need to establish, exercise, or defend rights.

18. Amendments to this Policy

This data protection policy may be adapted as the website, the services used, or applicable legal provisions evolve.

The version published on the website at the time of access is authoritative.