Privacy Policy
What we collect on this website, why, and the rights you have over your data.
Last updated: July 2026
1. Who is responsible for your data
The data controller for this website is:
daCarbo AG
Beulweg 58, 8853 Lachen, Switzerland
Email: info@dacarbo.ch
For any privacy question, or to use any of your rights, write to us at info@dacarbo.ch. Your message goes straight to daCarbo AG in Switzerland.
We are based in Switzerland. When we handle the data of people in the EU/EEA, we follow the EU General Data Protection Regulation (GDPR). For people in Switzerland we follow the Swiss Federal Act on Data Protection (revFADP).
2. When you just visit the site (server logs)
This website is hosted for us by Vercel Inc. (USA). When you open a page, Vercel's servers automatically record technical data such as your IP address, browser type, the page you requested, and the time. This is needed to deliver the site to you safely and reliably.
- Why: to show you the site and keep it secure.
- Legal basis: our legitimate interest in running a working, secure website (GDPR Art. 6(1)(f)).
- Where it goes: Vercel Inc., United States. See section 8 on transfers outside Switzerland/EU.
- How long: short-lived technical logs, kept only as long as needed for operation and security.
3. Fonts
The site uses "Fraunces" and "Inter" fonts. They load from Google Fonts, so your IP address is sent to Google LLC (USA) to deliver the font files.
- Why: to display the site in its intended typefaces.
- Legal basis: your consent where required, otherwise our legitimate interest in a consistent design (GDPR Art. 6(1)(a)/(f)).
- Where it goes: Google LLC, United States.
4. The "Find your voice" finder and the email you can leave
On the home page you can answer a few questions about what you play and what you want to improve, and you can leave your email address so Andi can send a model suggestion. If you submit it, we send your email and your answers to Andi by email so he can prepare for your call.
- Data: the email you type (optional) and your quiz answers.
- Why: to give you a personal instrument recommendation and follow up with you.
- Legal basis: your consent / steps taken at your request before a contract (GDPR Art. 6(1)(a)/(b)).
- Where it goes: our hosting function on Vercel (USA), then on to Andi by email through our mail provider Resend (Resend, Inc., USA). Your answers are also filled into the booking calendar as a note, so they can reach Calendly LLC (USA) as well (see section 5). And they are stored in your own browser (localStorage) so the form remembers them; this stays on your device.
- How long: we keep your message for as long as we need it to advise you and, if you become a customer, for the legal record-keeping period. You can ask us to delete it at any time.
5. Booking a call (Calendly)
To book a consultation you use a booking calendar from Calendly LLC (USA), shown on our consultation section. When it loads, Calendly may set cookies and process data such as your name, email, chosen time, and technical data, so it can schedule the call and send confirmations.
- Data: name, email, chosen time slot, the note (your own text, or your finder answers if you used the finder), and technical/usage data Calendly collects.
- Why: to let you book a call with Andi.
- Legal basis: your consent for loading the widget and its cookies, and steps before a contract (GDPR Art. 6(1)(a)/(b)).
- Where it goes: Calendly LLC, United States. See section 8.
- More: Calendly's own privacy policy explains their processing at calendly.com/privacy.
6. Website analytics (Vercel Web Analytics)
We use Vercel Web Analytics to understand, in aggregate, how the site is used (for example which pages are visited). It is designed to be privacy-friendly and does not use tracking cookies or build a profile of you across sites.
- Data: aggregated, anonymised usage data such as page views, referrer, rough device/browser type, and a few anonymous events, for example finishing the finder or clicking a WhatsApp link.
- Why: to see what works and improve the site.
- Legal basis: your consent where required, otherwise our legitimate interest in improving the site (GDPR Art. 6(1)(a)/(f)).
- Where it goes: Vercel Inc., United States.
7. Contacting us directly (email, phone, WhatsApp)
If you write or call us, or message us on WhatsApp, we process what you send so we can answer. WhatsApp is run by Meta Platforms Ireland / WhatsApp; if you use it, your message and phone number are handled under WhatsApp's own terms and privacy policy. If you prefer not to use WhatsApp, email or phone us instead.
- Legal basis: steps before a contract and our legitimate interest in replying (GDPR Art. 6(1)(b)/(f)).
- How long: for as long as needed to deal with your request, and any legal record-keeping period after.
8. Data sent outside Switzerland and the EU
Some of our providers are in the United States (Vercel, Calendly, Resend, Google Fonts) or elsewhere (WhatsApp). This means your data can be processed outside Switzerland and the EU/EEA. Where we rely on such providers, we use the safeguards the law provides, such as the EU Standard Contractual Clauses and the EU–US / Swiss–US Data Privacy Framework where a provider is certified. If you would like more detail on a specific provider, contact us.
9. Cookies and consent
The site itself needs no advertising cookies to work. Tools like the Calendly booking widget can set cookies, and font/analytics tools can process data. The site also saves your language and currency choice in your browser (localStorage) so it remembers them; that stays on your device. We do not use a cookie banner at the moment. You can block or delete cookies in your browser settings at any time.
10. Your rights
You have the right to:
- ask what data we hold about you (access);
- have wrong data corrected;
- have your data deleted;
- limit or object to how we use it;
- receive your data in a portable form;
- withdraw any consent you gave, at any time, without affecting past processing.
To use any of these, email info@dacarbo.ch. You also have the right to complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU it is the authority in your country.
11. Changes to this policy
We may update this policy when the site or the tools we use change. The current version is always the one on this page.
