How we handle personal data on mont3.ch. We keep this short and honest: this is a showcase site, so we collect as little as possible.
The controller for this website is Mont3 Suisse SAGL, Via Alberto Ciseri 3, 6900 Lugano, Switzerland. For any privacy request, contact hello@mont3.ch.
This policy is governed by the Swiss Federal Act on Data Protection (nLPD/FADP) and, for visitors in the EU/EEA, the GDPR.
Our web server records each request (IP address, timestamp, requested URL, referrer and browser user-agent). We use this only to operate and secure the site - detecting abuse, blocking automated attacks and diagnosing errors. Legal basis: our legitimate interest in a secure, working site (nLPD art. 31 / GDPR art. 6(1)(f)). Retention: logs are rotated and deleted after 14 days.
On form endpoints (login, contact-gated pages) we temporarily store a counter keyed to your IP address to limit repeated attempts. These counters expire automatically within minutes. Legal basis: legitimate interest (security).
We set strictly necessary, first-party cookies only when needed - for example a csrftoken to protect form submissions and a session cookie if you sign in. These are required for the site to work securely and do not track you. No consent is required for them, but they are listed below for transparency.
Web fonts are served directly from our own servers (self-hosted). No font request, IP address or any other data is sent to Google or any other third party to display the site's typography.
If, and only if, you click "Accept analytics" in the cookie banner, we load Google Analytics 4 (Google Ireland Ltd / Google LLC). It sets analytics cookies (_ga, _ga_*) and measures aggregate usage (pages viewed, approximate location, device) to help us improve the site. Until you accept, Google Analytics is not loaded at all - no analytics cookies are set and no data is sent. You can withdraw consent any time via Cookie settings (also in the footer); clearing consent stops future collection. Legal basis: your consent (nLPD art. 6 / GDPR art. 6(1)(a)).
| Name | Purpose | Type | Set when | Duration |
|---|---|---|---|---|
csrftoken | Protects forms against cross-site request forgery | Essential | Always | 1 year |
sessionid | Keeps you signed in | Essential | Only if you sign in | 2 weeks |
m3_consent_v1 | Remembers your cookie choice (local storage, not a cookie) | Essential | When you choose | Persistent (until you clear it or change your choice) |
_ga, _ga_* | Google Analytics - aggregate usage statistics | Analytics (optional) | Only after you accept | 2 years |
We do not sell your data and we do not use it for advertising. Data is shared only with the service provider above (Google, only with your consent, for analytics), which may process it in the United States under its standard contractual clauses. We otherwise disclose data only where required by law.
You may request access to, correction or deletion of your personal data, object to processing based on legitimate interest, and withdraw consent at any time. Write to hello@mont3.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local EU supervisory authority.
We may update this policy as the site evolves; the "last updated" date above always reflects the current version.