Privacy Policy

1. Controller

CodeBits — Antonio Parenti
Sole proprietorship
Bahnhofstrasse 8
9322 Egnach
Switzerland

Email: hi@codebits.ch · Swiss business ID (UID): CHE-200.939.450

This is the entity that decides on the purposes and means of data processing on codebits.ch, and your point of contact for any privacy question or request.

2. The short, honest version

This is a static website. There is no user account, no contact form, no newsletter, no shopping cart and no comment section. Exactly four things occur:

• Server logs — technically unavoidable the moment your browser requests a file.
• Local browser storage — three entries for theme, animation and your analytics choice. They never leave your device.
• Google Analytics — only if you explicitly accept it in the notice banner.
• Email — only if you write to us yourself.

We do not sell data, we run no advertising networks, and we embed no social media plugins, tracking pixels, external font services or embedded videos.

3. Legal bases

The Swiss Federal Act on Data Protection (revDSG) applies. If you visit from the EU or EEA, the GDPR may apply in addition.

Swiss law has no catalogue of legal bases the way the GDPR does: private parties may process personal data as long as this does not breach personality rights (Art. 30 f. DSG). Where the GDPR applies, we rely on:

• Your consent (Art. 6(1)(a) GDPR) — for Google Analytics.
• Legitimate interest (Art. 6(1)(f) GDPR) — for server logs: secure, stable operation of the site.
• Contract or pre-contractual steps (Art. 6(1)(b) GDPR) — for handling your email enquiry.
• Legal obligation (Art. 6(1)(c) GDPR) — for retaining business correspondence.

4. Hosting and server logs

The website and email run on Swiss infrastructure. The provider is onlineplaner.ch, a reseller on the infrastructure of METANET AG, Josefstrasse 218, 8005 Zurich, Switzerland. The servers are located in Switzerland. The provider acts as a processor within the meaning of Art. 9 DSG and Art. 28 GDPR — that is, solely on our behalf and on our instructions.

On every request your browser transmits technically necessary information, which the web server records:

• IP address of your device or connection
• date and time of the request
• the address or file requested
• amount of data transferred and HTTP status code
• the previously visited page (referrer), if your browser sends one
• browser identification (user agent) and operating system

The purpose is delivering the page, keeping it stable, troubleshooting and defending against attacks. We do not routinely analyse these logs, do not combine them with other data and do not build user profiles from them. The hosting provider rotates and deletes them automatically after a short period; longer retention only happens if a concrete security incident requires it.

5. Cookies and local storage

This website sets no cookies of its own. It uses your browser's local storage for exactly three entries:

• cb-theme — whether you chose the light or the dark appearance.
• cb-motion — whether animations are on or off.
• codebits_analytics_pref — whether you accepted or declined Google Analytics.

These entries stay on your device, are never transmitted to us or to third parties, and contain no identifier that could be used to identify you. You can delete them at any time through your browser settings ("clear site data").

If you accept Google Analytics, Google additionally sets its own cookies (_ga and _ga_<ID>) carrying a pseudonymous identifier. If you decline or make no choice, no Google script is loaded and no Google cookie is set.

6. Google Analytics 4 — only with your consent

We use Google Analytics 4 to measure reach. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The analytics script is only loaded after you click "Accept" in the notice banner. Until then — and permanently, if you decline — no Google script is loaded and no connection to Google servers is made.

If you have consented, Google processes in particular:

• a truncated IP address — IP anonymisation is enabled, your full IP is not stored
• pages viewed, time spent and interactions
• the previously visited page (referrer)
• approximate location at country or region level
• device type, browser, operating system, screen resolution and language setting
• a pseudonymous identifier from the Google cookies

The sole purpose is statistical analysis of how this site is found and used. Advertising features are not enabled in our account: no Google Signals, no ad personalisation and no sharing with Google advertising products. Google stores the event data according to the retention period set in our account, at most 14 months.

Google may also transfer data to Google LLC in the USA. Google is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework; standard contractual clauses apply in addition. Despite these safeguards, access by US authorities cannot be ruled out. By consenting, you accept this risk.

Details from Google: Privacy Policy and How Google uses data from sites that use its services.

Withdrawal: you can withdraw your consent at any time with effect for the future — right here:

You can also block collection by Google Analytics browser-wide using Google's opt-out add-on.

7. Google Search Console

We use Google Search Console to see which search terms lead people here. Ownership is verified through a DNS record on the domain — no code runs on the website for this, and no data about you is collected in the process. Google provides us with aggregated, non-personal reports only.

8. Contact by email

There is no contact form on this site, only email links. If you write to hi@codebits.ch, we process:

• your sender address and, if provided, your name
• the content of your message including attachments
• the time and technical headers of the email

The purpose is answering your enquiry and initiating or performing any resulting engagement. We keep correspondence for as long as that requires. Business correspondence relating to an engagement is subject to the ten-year retention obligation under Art. 958f of the Swiss Code of Obligations.

The mail server sits with the same Swiss provider as the hosting. Please note: ordinary, unencrypted email is like a postcard. For confidential content, we're happy to agree on a secure channel in advance.

9. Fonts, images and external links

All fonts, images, scripts and stylesheets are served from our own server. No Google Fonts, no other content delivery network, no embedded videos, no map services and no social media plugins are included. Simply visiting the page makes no connection to any third party from your browser.

The site links to external destinations — LinkedIn, GitHub, the App Store and the websites of client projects. Those are only contacted once you click the link. From that moment the privacy terms of the respective provider apply; we have no influence over their content or their data processing.

10. Disclosure to third parties and abroad

We disclose personal data only where it is necessary to operate the website, where you have consented, or where we are legally required to. Specifically:

• onlineplaner.ch / METANET AG, Switzerland — hosting and email. Processor, servers in Switzerland.
• Google Ireland Limited, Ireland, and Google LLC, USA — reach measurement, exclusively after your consent.

Beyond that, no disclosure takes place. Any transfer abroad happens solely within Google Analytics, and therefore only if you have consented.

11. Data security

The site is reachable exclusively over encrypted HTTPS/TLS; unencrypted requests are redirected automatically to the encrypted address. We take appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access. That said, nobody can guarantee absolute security for transmissions over the internet.

12. Retention and deletion

• Server logs — rotated and deleted automatically by the host after a short period.
• Local browser entries — stay on your device until you delete them.
• Google Analytics data — at most 14 months at Google; you can withdraw your consent at any time.
• Email correspondence — as long as needed to handle it, up to ten years where an engagement is involved (Art. 958f CO).

13. Your rights

Under the Swiss DSG and, where applicable, the GDPR, you have in particular the right to:

• Access — whether and which data about you is processed (Art. 25 DSG / Art. 15 GDPR)
• Rectification of inaccurate data (Art. 32 DSG / Art. 16 GDPR)
• Erasure or destruction of your data (Art. 32 DSG / Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Handover or portability of the data in a common format (Art. 28 DSG / Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of a consent given, at any time and with effect for the future

An informal email to hi@codebits.ch is enough. Exercising these rights is free of charge. We may ask for additional details to verify your identity — so that nobody else obtains information about you.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern; in the EU or EEA with the data protection authority of your country of residence.

14. No automated individual decisions

No automated individual decision-making within the meaning of Art. 21 DSG or Art. 22 GDPR takes place on this website, and no high-risk profiling is carried out.

15. Children

This website addresses a general, professional audience. We do not knowingly collect data from children under 16. Should we learn that such data has been sent to us, we delete it.

16. Changes to this policy

We update this policy when the website, the services used or the legal situation change. The version published here is always the authoritative one; the date at the top shows its current state.