Privacy PolicyLegal notice.

Based on Article 13 of the Swiss Federal Constitution and the federal data protection legislation (FADP), every person has a right to protection of their privacy and to protection against misuse of personal data. We take the protection of your personal data seriously and treat it confidentially and in accordance with statutory data protection rules and this privacy policy.

Together with our hosting providers, we strive to protect data as well as possible against unauthorized access, loss, misuse, or alteration. Nonetheless, transmission of data over the internet (e.g. via e-mail) may have security gaps; complete protection against third-party access cannot be guaranteed.

Personal data means any information relating to an identified or identifiable person. We process personal data in line with Swiss data protection law. Where the GDPR applies, we rely in particular on Art. 6(1) GDPR:

• lit. a) consent of the data subject.
• lit. b) performance of a contract or pre-contractual measures.
• lit. c) compliance with a legal obligation.
• lit. f) legitimate interests (e.g. operating and securing the website, asserting legal claims).

We process personal data only for as long as required for the respective purpose. Statutory retention obligations remain reserved.

This website runs on the Lovable Cloud infrastructure (edge hosting via Cloudflare Workers). Database, authentication, and file storage are provided through Supabase (servers in the EU).

Corresponding data processing agreements are in place with our processors. Processing is based on our legitimate interest in providing the website reliably and securely (Art. 6(1)(f) GDPR; Art. 31(2)(b) FADP).

When the website is accessed, your browser transmits the following information, which we record automatically:

• browser type and version
• operating system used
• referrer URL
• hostname / IP address of the accessing device
• date and time of the server request

This data is processed for security and error analysis and is typically deleted after 30 days. The data is not merged with other data sources.

For security reasons, this website uses SSL/TLS encryption. An encrypted connection is indicated by the “https://” prefix and the lock icon in your browser.

We use cookies and comparable technologies to the extent necessary for the operation of the website. With your consent we additionally use cookies for external content (e.g. video players). Details and a complete overview can be found in our Cookie Policy.

If you contact us by e-mail, via the contact form, or via the branded entertainment lead form, the information you provide (e.g. name, e-mail address, company, request) is stored to handle the request and for possible follow-up questions. We do not share this data without your consent.

Legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual measures) or (f) (legitimate interest in answering inquiries). We delete the data as soon as the inquiry is finally handled and no statutory retention obligations apply.

On some pages we embed video players from YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) and Vimeo (Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA).

Such content is only loaded after you have actively consented. When loaded, your IP address and information about the device you use are transmitted to the respective provider. We have no influence over the providers' further processing.

• YouTube – Privacy: https://policies.google.com/privacy
• Vimeo – Privacy: https://vimeo.com/privacy

Legal basis for the transfer is your consent (Art. 6(1)(a) GDPR; Art. 31(1) FADP). You can withdraw your consent at any time via the cookie settings link in the footer.

Our website links to our profiles on Instagram, LinkedIn, YouTube, and TikTok. These are plain hyperlinks; no technical plugins are embedded. Data is only transmitted to the respective providers when you click a link.

For the internal editor area we use Supabase Auth. This involves processing an e-mail address, a password hash, and a session token. Public registration is not possible; accounts are created internally only.

Where personal data is transferred to countries outside the EU/EEA or Switzerland (e.g. to YouTube or Vimeo in the USA), this takes place on the basis of your consent and – to the extent necessary – Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

You have the right at any time to:

• obtain information about your stored personal data
• request correction of inaccurate data
• request deletion or restriction of processing
• object to certain processing activities
• data portability (where applicable)
• withdraw any consent given, with effect for the future

Please contact hello@orisono.com to exercise these rights. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or – where the GDPR applies – with the competent supervisory authority.

Personal data is retained only as long as necessary for the purpose of processing or for compliance with statutory retention obligations. We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, and manipulation (incl. TLS encryption, restrictive access rights, and Row-Level Security in the database).

We reserve the right to amend this privacy policy to reflect changes in the legal landscape or in our services. The version published on this page applies at any given time.