Made in Bienne takes your privacy seriously. This policy explains which personal data we process when you visit madeinbienne.ch or get in touch with us, for what purposes, how long we keep it and which rights you can exercise.
1. Controller
Made in Bienne — sole proprietorship Bastien Liebgott
Chem. de la Baume 19, 2533 Evilard, Switzerland
UID: CHE-339.480.368
Email: hello@madeinbienne.ch
Phone: +41 78 604 34 38
For any question or request regarding your data, write to us with “data protection” in the subject line.
2. Legal framework
We process your data in accordance with the Swiss Federal Act on Data Protection (FADP, SR 235.1) and its implementing ordinance (DPO). Where our offering is addressed to people residing in the European Union, the General Data Protection Regulation (GDPR) applies in addition.
3. Data we process
3.1 Browsing data (server log files)
Every page request automatically generates a record at our host: IP address, date and time, page requested, referring page, browser type and operating system, volume of data transferred. This information is necessary to deliver the website and serves its security and stability (attack detection, error diagnosis). It is not linked to your identity.
3.2 Contact forms and project enquiries
When you complete a form on the website, we process the information you enter — in particular your email address and the content of your message or project enquiry. This data is sent to us by email and is also stored in the website database so that we can retrieve and follow up on your request. We use it solely to reply to you, prepare a proposal and, where applicable, carry out the assignment.
Our forms are protected against automated submissions by an invisible honeypot field and by Google reCAPTCHA v3. This service analyses technical and behavioural signals and transmits data to Google, including your IP address, in order to distinguish humans from bots. Google’s information: policies.google.com/privacy.
3.3 Blog comments
If you leave a comment, the form data, your IP address and your browser identifier are stored to help detect spam. An anonymised hash of your email address may be sent to the Gravatar service to check whether you have a profile there and display your picture: automattic.com/privacy. Your browser may store your name, email and website in cookies so you do not have to enter them again.
3.4 Correspondence and client relationship
Emails, phone conversations, proposals, contracts and project documents are kept in our client files, to the extent necessary to manage the business relationship and comply with our legal obligations.
4. Cookies and third-party services
A cookie is a small file placed on your device when you visit a website. We use the following categories:
- Necessary cookies — operation and security of the website, storing your cookie choice, language preference (WPML), administration session. The website cannot work properly without them.
- Statistics cookies — Google Analytics 4 (measurement ID G-0SWLCE1XG2), integrated through the Site Kit by Google plugin. This service measures how the site is used: pages viewed, visit duration, traffic source, device type, country. Results are analysed in aggregate form to improve our content; we do not use Analytics to identify individuals or for personalised advertising.
- Embedded third-party services — Google Fonts (typefaces loaded from Google servers), Google reCAPTCHA and, on some pages, LinkedIn and Instagram content or links. When loaded, these services receive your IP address and may set their own cookies.
A consent banner appears on your first visit and lets you accept or decline non-essential categories. You can change your decision at any time:
You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on: tools.google.com/dlpage/gaoptout. Blocking necessary cookies may impair how the website works.
5. Purposes and legal bases
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Delivering, securing and stabilising the website | Log files, necessary cookies | Legitimate interest (FADP) / art. 6(1)(f) GDPR |
| Answering enquiries, preparing proposals, performing the assignment | Forms, correspondence, contact details | Contract performance and pre-contractual steps / art. 6(1)(b) GDPR |
| Protection against spam and abuse | reCAPTCHA, honeypot, IP address | Legitimate interest / art. 6(1)(f) GDPR |
| Audience measurement and site improvement | Google Analytics 4 | Consent / art. 6(1)(a) GDPR |
| Accounting and statutory retention obligations | Proposals, invoices, contracts | Legal obligation / art. 6(1)(c) GDPR |
6. Recipients and processors
We do not sell your data and do not pass it on to third parties for advertising purposes. The following have access, only to the extent required for their service and under a duty of confidentiality:
- LWS – Ligne Web Services (France) — hosting of the website, database and email.
- Google Ireland Ltd / Google LLC — Google Analytics 4, Search Console, reCAPTCHA, Google Fonts.
- Automattic Inc. (Gravatar, anti-spam) — only if you leave a comment.
- Technical providers engaged for the maintenance and security of the website.
Data may also be disclosed where we are required to do so by law or where it is necessary to enforce our rights.
7. Transfers abroad
The servers hosting this website are located in France, a country recognised by the Swiss Federal Council as providing adequate protection. Some providers, in particular Google and Automattic, may process data in the United States. Such transfers rely on the European Commission’s standard contractual clauses, on the Swiss–US / EU–US Data Privacy Framework, and on additional technical measures such as encryption in transit.
8. Retention periods
| Data | Retention period |
|---|---|
| Server log files | A few days to a few months, then deleted or anonymised |
| Contact enquiries with no commercial follow-up | 12 months |
| Client files, proposals, contracts, invoices | 10 years (Swiss accounting obligations) |
| Blog comments | Until deleted, on request or at our initiative |
| Statistics cookies (Google Analytics 4) | Up to 14 months |
| Record of your cookie choice | 12 months |
9. Data security
All traffic with the website is encrypted (HTTPS/TLS). Access to the administration area is limited to a small number of accounts and protected by strong passwords and a hidden login address. The core and plugins are kept up to date and regular backups are taken. No system is completely secure, however: transmitting data over the internet always carries a residual risk.
10. Your rights
At any time you may:
- request access to the data we hold about you;
- have inaccurate or incomplete data corrected;
- request deletion of your data or restriction of its processing;
- object to processing based on our legitimate interest;
- withdraw a consent you have given, without affecting processing already carried out;
- where the GDPR applies, request data portability.
Send your request to hello@madeinbienne.ch. We may ask for proof of identity so as not to disclose your data to someone else. Requests are handled free of charge, as a rule within 30 days.
If you believe your data is not being processed lawfully, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — edoeb.admin.ch. If you live in the European Union, you may also contact the supervisory authority in your country.
11. Automated decisions
We do not take automated individual decisions within the meaning of art. 21 FADP and do not carry out profiling for advertising purposes.
12. Links to third-party websites
Our website links to sites we do not operate. This policy does not apply to them; please consult their own data protection terms.
13. Changes
We may adapt this policy if our services, the tools we use or the legal framework change. The applicable version is the one published on this page.
See also our legal notice.
Last updated: 20 August 2026.
