Your data, kept simple.

Who is responsible

Lucas Stradioto Cardozo, trading as The Stradiotto, 8126 Zumikon, Switzerland. Email: hello@thestradiotto.com.

This policy follows the Swiss Federal Act on Data Protection (nDSG). Where the EU General Data Protection Regulation (GDPR) applies to you, the rights described below apply as well.

What I collect, and why

• Enquiries. If you use the contact form, I receive your name, email, company, topic and message. I use them only to answer you.
• Newsletter and free downloads. If you sign up, your email (and first name if you give it) is stored in Mailchimp, which sends the newsletter and the free files. Marketing emails are sent only if you ticked the box, and you can unsubscribe in every email.
• Orders. When you buy, Stripe collects your payment details and billing information. I receive your email, your name if you give it, the products you bought, the amount, and the time you confirmed immediate delivery. I send your download links by email. I do not see or store your card number.
• Cart. Your cart is kept in your browser (local storage) so it survives a page reload. It is not sent to me until you start checkout.
• Server logs. The hosting server may log technical data such as IP address, browser and time of request for security and error tracking, and deletes it after a short period.
• Website statistics. I count visits with Umami, a privacy friendly analytics tool that runs on my own server in Switzerland. It sets no cookies, builds no profile of you and does not store your IP address. It records which pages are viewed, the referring site, country, browser and device type. Your browser's "Do Not Track" setting is respected.

Who receives data

• Stripe (payments), Mailchimp (newsletter and free downloads, an Intuit company), Resend (sending order and enquiry emails), Zoho Mail (my business mailbox, servers in the EU), and Infomaniak (web hosting in Switzerland).
• YouTube (Google). The Samsonite film is embedded using the privacy-enhanced mode, so YouTube only sets cookies after you press play. Video thumbnails on the home page are stored on this site.

Some of these providers are located or process data outside Switzerland, in the EU or the EEA and in the United States (Stripe, Mailchimp and Resend are US companies; Resend sends from servers in Ireland). Where data goes to a country without an adequate level of data protection, I rely on the provider's standard contractual clauses or on its certification under the Swiss-US Data Privacy Framework.

Legal basis

I process your data to carry out a contract with you (orders and downloads), to answer your enquiries, on your consent (newsletter), and for my legitimate interests in running and securing this site and understanding how it is used. Where the GDPR applies, these are the bases under Article 6 GDPR.

Cookies and similar storage

This site uses only what it needs to work: your cart, your cookie choice and whether you closed the newsletter pop-up. These are stored in your browser. The statistics described above use no cookies. No advertising tools are active at the moment. If I add any later, they will load only after you accept them in the cookie banner, and you can change your mind by clearing the site data in your browser.

How long I keep data

Enquiries: up to 24 months. Newsletter: until you unsubscribe. Order records: as long as the law requires for bookkeeping, normally 10 years in Switzerland. Website statistics contain no personal identifiers and are kept as long as they are useful.

Your rights

You can ask for access, correction, deletion or a copy of your data, object to processing, or withdraw a consent at any time by emailing hello@thestradiotto.com. You may also complain to a data protection authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

Changes

If the way the site works changes, I will update this page and the date above.