Privacy

Privacy Policy

Version: September 2026. In case of discrepancies, the German version prevails.

1. Controller

Imagemedia GmbH, Gibelinstrasse 25, 4500 Solothurn, Switzerland
E-mail: info@imagemedia.ch · Phone: +41 32 665 72 55
Contact person for data protection: Philip Fiumi (reachable at the address above).
This policy applies to the website imagemedia.ch with all its subpages and language versions. The online shop at imagemedia.shop has its own privacy policy.

2. Principles

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where persons in the European Union or the EEA are concerned, the General Data Protection Regulation (GDPR). We only process data we need for the stated purpose, and only for as long as that purpose or a legal obligation requires. We do not sell personal data.
Where we rely on the GDPR, the legal bases are: your consent (Art. 6(1)(a)), the performance of a contract or pre-contractual steps at your request (b), legal obligations (c) or our legitimate interest in the secure, functioning and economical operation of our services (f). You may withdraw consent at any time with effect for the future.

3. Data generated when you visit the website

When a page is opened, our hosting provider necessarily processes the IP address of your device, date and time, the address requested, the amount of data transferred, browser and operating system and the page you came from. This data serves to deliver the page, operate it securely, troubleshoot and fend off attacks; we do not combine it with other data. We also limit the number of requests per IP address to our forms and interfaces to prevent abuse; for that purpose we store the IP address only as an encrypted check value (hash) from which it cannot be recovered, and delete it when the counting window ends, at the latest after 24 hours.
From the IP address, the hosting provider derives your approximate location (town). We use only the town name to show you the appropriate regional content and store it for twelve hours in a cookie. No movement or location profile is created. Our server fetches the weather for this locality from Open-Meteo; only the coordinates of the locality are transmitted, no information about you.

4. Cookies and local storage

We set technically necessary cookies without consent, because the website does not work as intended without them: the chosen language, light or dark display, the last chosen area (Business or Home), the detected town for regional content and a session identifier for the protected editorial area, which only concerns logged-in staff. These cookies contain no personal data other than the town name and expire after twelve months at the latest.
Your decision in the cookie notice is not stored in a cookie but in your browser's local storage on your device; it is not transmitted to us. Via the "Cookies" link in the footer you can view, change or withdraw your choice at any time. You can also delete or block cookies and local storage in your browser; some functions may then no longer be available.

5. Statistics and marketing services (only with your consent)

Third-party scripts are loaded only after you have agreed in the cookie notice – separately for "Statistics" and "Marketing". Without consent, none of these services is loaded and no data flows to these providers. The notice offers "Decline" on an equal footing with "Accept".
Depending on configuration we use the following services; which of them are currently active is shown in the cookie notice:
– Google Analytics 4 (statistics) and Google Tag Manager (management of scripts, does not build profiles itself), Google Ireland Limited, Dublin, Ireland; data processing also in the USA. We run Analytics with truncated IP address and without sharing with Google advertising products unless you have consented to "Marketing".
– Google Ads conversion measurement (marketing), Google Ireland Limited: measures whether a click on an ad led to an enquiry.
– Meta Pixel (marketing), Meta Platforms Ireland Limited, Dublin, Ireland: reach and performance measurement of ads on Facebook and Instagram; data processing also in the USA.
– LinkedIn Insight Tag (marketing), LinkedIn Ireland Unlimited Company, Dublin, Ireland: performance measurement of ads on LinkedIn; data processing also in the USA.
– Microsoft Clarity (statistics), Microsoft Ireland Operations Limited, Dublin, Ireland: anonymised recording of usage flows (clicks, scrolling) to improve usability; data processing also in the USA.
– Hotjar (statistics), Hotjar Ltd., Malta: usage analysis to improve usability.
These services may set cookies and record your usage behaviour in pseudonymised form. For the nature and duration of processing, see the providers' privacy notices. You can additionally deactivate Google Analytics with the browser add-on at tools.google.com/dlpage/gaoptout.

6. Map on the contact page

The map on the contact page is a static image based on OpenStreetMap data, hosted on our own server. When the page is opened, no data is transmitted to any map service. The link "Open in Google Maps" takes you, in a new window, to Google (Google Ireland Limited); only there do Google's privacy terms apply, and only then does Google receive data such as your IP address. Fonts, images and videos are delivered from our own server; no data flows to third parties.

7. Contact form, enquiries and appointment booking

When you reach us via the contact form, the tools on the website (such as enquiries about screens, media data or vehicle lettering) or the appointment booking, we store the details you provide – name, e-mail address, optionally phone and company, your request, for appointments the date and time – as well as the chosen language and the area the enquiry comes from. The purpose is to answer your enquiry, prepare and hold an appointment and process any resulting order. When booking an appointment you receive a confirmation by e-mail with a calendar file. Providing your details is voluntary; without the fields marked as required, however, we cannot process your enquiry.
For every enquiry we also store the IP address from which it was sent and – where available – origin details such as the referring page or campaign parameters, so that we can trace abuse and assess the effect of our advertising. Against automated submissions we use a hidden form field and a limit on enquiries per IP address; no third-party bot detection service is used.
So that we can respond quickly, every new enquiry is delivered internally: by e-mail via our mail service (see section 11) and – where set up – as a message to our work channel on Slack (Slack Technologies, USA) and via WhatsApp Business (Meta Platforms Ireland Limited; data processing also in the USA). Name, contact details and the content of the enquiry are transmitted. These channels serve exclusively for internal forwarding to our team.
We keep enquiries for as long as processing is ongoing and follow-up questions are possible. Completed enquiries and those marked as spam are anonymised automatically 24 months after the last processing; details that led to an order are subject to the ten-year retention obligation under the Swiss Code of Obligations.

8. Review request after an order

After an enquiry has been completed, we may send you once by e-mail a short request for a Google review. The link in that e-mail passes through our website to Google; we record whether and when the link was clicked so that we do not ask more than once. We rely on our legitimate interest in improving our service and maintaining our reputation. You can object to this mailing at any time – a short message to info@imagemedia.ch is enough and we will remove you.

9. AI check, quotes and screen monitoring

AI check: when you enter a website address, optionally a company name and your e-mail address in the "AI check" tool, our server retrieves the website indicated and examines it for technical characteristics. We store the details as an enquiry so that we can send you the result and advise you if you are interested. If AI providers are configured on our side, we additionally ask up to two of them (OpenAI, Anthropic, Perplexity or Google; data processing also in the USA) what they know about the website entered. Only the website address and the company name are transmitted, never your e-mail address.
Quotes: we provide quotes via a personal, unguessable address. If you accept or decline a quote via that page, we store your decision with a timestamp to document the conclusion of the contract.
Screen monitoring: for customers with digital signage installations we monitor on request whether their screens are online. For that, each device reports regularly to our server; we store the time of the last report and the device's IP address. This data concerns devices of our business customers and serves fault reporting; it is accessible only to the respective customer via a personal status page.

10. Job applications

Application documents you send us by e-mail or via the contact form are processed exclusively for the respective selection procedure; they are accessible only to the people involved in it. After the procedure ends we delete the documents within six months at the latest, unless you consent to longer retention for future positions.

11. E-mail dispatch and file uploads

Confirmations, replies, appointment confirmations and review requests are sent via an e-mail service provider on our behalf: depending on configuration via Resend (Resend, Inc., USA) or via the SMTP server of our Swiss mail provider Kreativmedia. The provider receives your e-mail address and the content of the message for this purpose.
Files you upload to us (such as print data or images) are stored with our hosting provider in an object store accessible only to us and deleted as soon as the order is completed.

12. Hosting and processors

The website, the database with enquiries and the object store are operated by specialised providers who process the data exclusively on our instructions and on the basis of a data processing agreement. Our website hosting runs with Vercel Inc. (USA) with delivery via a worldwide network; the database is operated by a European or US provider with a location in the EU. All connections are encrypted with TLS (recognisable by the "https://" in the address bar). The providers' server logs are deleted according to their rules, usually within a few weeks.

13. Disclosure abroad

Some of the providers named have their registered office or processing locations outside Switzerland and the EEA, in particular in the USA. For these transfers we rely on the Federal Council's adequacy decision on the Swiss-U.S. Data Privacy Framework, insofar as the provider is certified there, and otherwise on the European Commission's standard contractual clauses with the adaptations required for Switzerland. Despite these safeguards, a lower level of data protection may exist in third countries; for the services in section 5 you decide yourself by giving consent.

14. Retention and deletion

We keep personal data for as long as the respective purpose requires: technical logs a few weeks, the town name twelve hours, enquiries until completion and then no longer than 24 months, contract and accounting records ten years under the Code of Obligations. After that we delete or anonymise the data.

15. Your rights

You have the right to information about the data we process about you, to rectification of inaccurate data, to erasure, to restriction of processing, to receive your data in a common electronic format and to object to processing based on a legitimate interest. You may withdraw consent at any time.
We do not make decisions based solely on automated processing that produce legal effects for you or similarly significantly affect you (Art. 21 FADP, Art. 22 GDPR).
For requests, contact info@imagemedia.ch or write to the address in section 1. To verify your identity we may ask for proof; we usually respond within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern), or in the EU with the supervisory authority responsible for you.

16. Data security

We protect your data with technical and organisational measures: encrypted transmission, access to enquiries only for logged-in staff with a personal account, restriction of access, regular security updates. Complete protection against access by third parties is nevertheless not possible on the internet; for confidential matters we recommend the phone or a personal meeting rather than unencrypted e-mail.

17. Changes to this policy

We adapt this policy when our data processing or the legal situation changes. The German version published on this page prevails.