PRIVACY · CH
Your data
Privacy policy
What Burin collects, why, for how long, and the rights you keep. In plain terms, no runaround.
Data controller
- Controller
- Burin (Melvin Haberli), Switzerland
- Contact
- info@burin.ch
- Framework
- Swiss Federal Act on Data Protection (FADP) and GDPR
Burin is based in Switzerland and applies the Swiss Federal Act on Data Protection. When you write to us from the European Union, the GDPR also applies: this site is built to respect both.
What we collect
We only collect data when you use the contact form. You never need to create an account.
- Your name — so we know who we are replying to.
- Your email address — so we can reply.
- Your message — the description of your project or request.
- The service you're interested in — only if you select it (optional).
- Your approximate budget — only if you pick a range (optional).
- The edition color you chose on the site — attached to your request to prepare the quote; it says nothing about you beyond that taste.
When you send the form, your IP address is processed transiently, solely to limit abusive submissions and spam. It is not used to identify you and is not kept for other purposes.
No profiling, no automated decisions, no selling of data.
Why, and on what basis
We use this information for one purpose only: to read your request and reply to it — a clear read, an honest recommendation, and a quote where relevant.
The legal basis is your own initiative: by writing to us, you start a pre-contractual exchange and consent to our reply. The anti-spam protection rests on our legitimate interest in keeping the form working.
Cookies and analytics
This site uses no tracking cookies and no advertising trackers. Traffic is measured with Vercel Web Analytics and Speed Insights, a cookieless tool: page views, country of origin, performance indicators and a few anonymous usage events (chosen color, form submission) are aggregated with no durable identifier, no cross-site tracking and no profiling. Vercel Inc. acts as a processor for this measurement. Nothing is stored on your device for tracking — which is why you see no consent banner: there would be nothing for it to govern.
Who can access your data
Your messages are handled by a small number of technical providers, acting solely on our instructions:
- Vercel Inc. (United States) — site hosting.
- Neon (Neon Inc., a Databricks company, United States) — the database where your messages are stored.
We use no third-party emailing service: your messages are stored in our database, not passed to a marketing tool. Your data is never sold or shared for advertising.
Some of these providers are located outside Switzerland and the European Union. Those transfers are covered by appropriate safeguards (standard contractual clauses and recognized protection frameworks).
How long we keep it
Your messages are kept for as long as it takes to handle your request and follow up reasonably, then deleted — at the latest 24 months after our last exchange, unless a legal retention obligation applies (for example accounting obligations if we start working together).
You can ask for them to be deleted at any time, without having to give a reason.
Your rights
You stay in control of your data. At any time, you can request:
- access to the data we hold about you;
- rectification if it is inaccurate;
- erasure;
- restriction of, or objection to, its processing;
- portability — a copy in a readable format;
- withdrawal of your consent, at any time.
To exercise any of these rights, a single email to info@burin.ch is enough. We reply as soon as we can — within one month at the latest, as the GDPR provides.
If you believe your rights are not being respected, you can lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the European Union, the data-protection authority of your country.
Security
Traffic to this site is encrypted (HTTPS). Form data is validated server-side and access to the database is restricted. No system is infallible, but we handle your data with the care we would expect for our own.
Changes
This policy may change, for instance if a tool changes. The version in force is the one published on this page; the date below is authoritative.
Last updated: 3 August 2026