Legal
Privacy policy
How we process personal data, under the revised Swiss Data Protection Act (revDSG) and, where applicable, the GDPR. This is a translation for convenience; the German version governs.
As at 3 August 2026
1. Controller
meit · Owner: Merag Shahzad
Strehlgasse 2
8001 Zürich, Switzerland
Email: [email protected]
No data protection adviser has been appointed; there is no such obligation for a business of this size. The address above is responsible for all data protection matters.
2. Principles
We process personal data in good faith, proportionately and only for the purposes named in this policy or evident at the time of collection. We collect only what we actually need to deliver our services and operate this website. Personal data is not sold and not passed to third parties for advertising purposes.
3. What data we process
3.1 Server log files
When this website is accessed, technically necessary data is logged automatically: a shortened or complete IP address, date and time, the page requested, the volume of data transferred, the status code, the referring page and browser and operating system details. This data serves secure operation, error analysis and the prevention of misuse. We do not attribute it to a particular person.
3.2 The “potential analysis” contact form
If you use the form on the home page, we process the details you enter: name, website address, email address, industry and area of interest. We use this data solely to assess your enquiry, prepare the free first analysis and get in touch with you.
3.3 Email and video calls
If you contact us by email, we process your contact details and the content of your message. Recordings may be created for video analyses and meetings; these are only made with your prior consent.
3.4 Data from mandates
Within a mandate we process contact details of the people we deal with, contract and billing data, and data made available to us for the analysis, such as access to analytics, search or content systems. We treat this data confidentially and use it solely for the mandate.
4. Purposes and justification
| Purpose | Data | Justification |
|---|---|---|
| Operation and security of the website | Log files | Overriding legitimate interest in a secure, functioning service |
| Answering enquiries, first analysis, quotes | Form, contact and communication data | Pre-contractual steps and performance of contract, and your enquiry |
| Carrying out mandates | Contract, project and billing data | Performance of contract |
| Accounting and statutory retention | Invoice and contract data | Legal obligation (Swiss Code of Obligations) |
Where we rely on consent, you can withdraw it at any time with effect for the future.
5. Cookies and analytics
This website uses no analytics or marketing cookies. Neither Google Analytics nor comparable tracking services are used, and no cross-site profiling takes place. Technically necessary cookies may be set by the content management system, for example when an editor signs in.
You can delete or block cookies in your browser at any time. Use of this website is unaffected.
6. Service providers and third-party services
We use carefully selected service providers who process personal data on our behalf. They are contractually bound to confidentiality and to compliance with data protection law.
| Service | Purpose | Data |
|---|---|---|
| Hosting provider, data centre in Switzerland or the EU | Operation of the website, storage of content and enquiries | Log data, form and communication data |
| Cloudflare, Inc., USA | Delivery via a content delivery network, protection against attacks | IP address, technical connection data |
| Google Ireland Ltd. / Google LLC (Google Fonts) | Delivery of the Archivo and IBM Plex typefaces | IP address, technical connection data |
The typefaces are currently loaded from Google’s servers when the page is opened. Your IP address is transmitted to Google in the process. If you want to avoid that, the fonts can be served locally from our own server; we are reviewing that change.
7. Disclosure abroad
Personal data is disclosed abroad only where this is necessary for the purposes named, in particular to the service providers listed above. Where disclosure is made to a country without adequate data protection, we rely on the standard contractual clauses recognised by Switzerland or on a statutory exception under Art. 17 revDSG.
8. Retention
We keep personal data for as long as the relevant purpose requires. Log files are generally deleted after a few weeks. Enquiries that do not lead to a mandate are deleted no later than twelve months after the last contact. Contract and accounting records are kept for the statutory period of ten years.
9. Data security
This website is transmitted encrypted via TLS, indicated by the padlock symbol in the address bar. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse, including access restrictions, up-to-date software and regular backups. Nobody can guarantee absolute security for transmission over the internet.
10. Your rights
Under the revDSG you have the right to information about the personal data processed about you, to rectification of incorrect data, to erasure or destruction, to the release or transfer of your data, and the right to object to processing. An informal message to [email protected] is enough to exercise these rights. To prevent misuse we have to verify your identity; we ask for your understanding if we request proof.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC). We do not make automated individual decisions with legal consequences for you.
11. Notes for people in the EU
Where the GDPR applies to a processing operation, because we serve mandates in Germany and Austria, we rely — depending on the case — on Art. 6(1)(b) GDPR (contract and pre-contractual steps), (c) (legal obligation), (f) (legitimate interests in the secure operation of the website) or (a) (consent). You have the rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.
Changes
We may amend this privacy policy at any time, for example when our services or the services we use change. The version published on this page at the time applies.
