Privacy & Legal

Responsible person

Christoph Bona
Zurich, Switzerland
christophbona@gmail.com

Data processing

This personal portfolio website does not set its own cookies and contains no contact form. If you contact me by email, the information you provide is used solely to respond to your enquiry.

Processing is governed by the Swiss Federal Act on Data Protection (FADP). Where the European General Data Protection Regulation (GDPR) applies, technical operation and privacy-friendly audience measurement are based on the legitimate interest in providing a secure, stable and usable website (Article 6(1)(f) GDPR). Email enquiries are processed to answer the request and, where applicable, to take pre-contractual steps (Article 6(1)(b) or (f) GDPR).

Hosting by Netlify

The website is delivered by Netlify, Inc. When a page is requested, Netlify processes technically necessary server log data, particularly the IP address, time, requested file, and browser or device information. This supports website delivery, stability and security. If Netlify Web Analytics is enabled, server-side aggregated audience statistics are also generated.

Netlify is based in the United States. Processing outside Switzerland or the European Economic Area therefore cannot be ruled out. The contractual and data-protection safeguards provided by Netlify apply to such processing. Further information is available in Netlify's privacy statement.

Audience measurement with Umami

Umami Cloud, provided by Umami Software, Inc., is used for privacy-friendly audience measurement. The transmitted information includes page path and title, hostname, referrer, URL and UTM parameters where present, browser language, screen size, and defined events such as CV downloads and clicks on contact, profile or project links. Browser, operating system and device type are derived from the user agent and network information. The IP address is technically used to determine an approximate location and generate an anonymous session identifier, but according to Umami it is not stored.

The tracking code uses no cookies. This website does not assign a persistent user identifier or use a Distinct ID. Visitors are not tracked across different websites. The tracker is restricted to christophbona.com and respects the browser's Do Not Track setting.

Umami Cloud operates infrastructure in the EU and the United States. Depending on the cloud region selected in the Umami account and the subprocessors used, processing may occur outside Switzerland or the European Economic Area. Umami provides a data processing agreement and contractual safeguards for international transfers. Further information is available in Umami's privacy statement and the Umami documentation.

Use the following button to disable Umami audience measurement in this browser. Only the necessary local preference umami.disabled will be stored.

Disable Umami in this browser

Retention

Technical log and analytics data are processed only for as long as required for security, operation and statistical analysis. The specific technical retention periods depend on the active settings and plans in Netlify and Umami Cloud. Analytics data are deleted no later than when the associated project or account is deleted from the respective service, subject to statutory retention duties. Email correspondence is deleted when the enquiry has been fully resolved and no statutory or legitimate reason requires further retention.

Recipients and international transfers

Where necessary, technical data may be processed by Netlify and Umami and their subprocessors. Their international infrastructure may involve disclosure to the United States or other countries. Where required, the providers rely on recognised safeguards, particularly adequacy decisions or standard contractual clauses. Analytics data are not sold for advertising purposes.

Fonts and external links

The website uses locally available system fonts only and does not load fonts from external providers. External links, including LinkedIn and GitHub, lead to third-party services. Their respective providers are responsible for their content and privacy practices.

Portfolio content

The projects shown are presented for personal and professional purposes. Demonstrations and prototypes are identified as such. While the content is prepared with care, no guarantee is given regarding completeness, accuracy or continued availability.

Your rights and contact

Subject to applicable law, individuals may request access, correction, deletion, restriction of processing, data disclosure or portability, and may object to processing. Consent may be withdrawn at any time with effect for the future. Requests can be sent to the email address above.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with a competent European data protection authority. This notice may be updated when the website, the services used or the applicable law changes.