Privacy Policy

1. Controller

The entity responsible for the collection, processing, and use of your personal data within the meaning of the Swiss Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR) is:

Lemli Interiors
Claudia Friedman-Lemli
Lausanne, Switzerland
Phone: +41 (0)79 321 58 92
Email: clemli@lemli-interiors.com
Website: https://www.lemli-interiors.com

2. Principles of Data Processing

We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy. We collect, process, and use your personal data only to the extent permitted by law or if you have explicitly consented.

This privacy policy applies to the website https://www.lemli-interiors.com and informs you about what data we collect, how we use it, and what rights you have.

3. Legal Bases for Data Processing

For visitors from Switzerland, we rely on the revised Swiss Data Protection Act (nDSG, in force since September 1, 2023). The relevant legal bases include in particular:

Art. 31 DSG – Processing based on overriding legitimate interest
Performance of a contract and pre-contractual measures – Processing for the fulfillment or preparation of a contract
Consent – if you have given your consent
Legal obligation – where we are legally required to process data

For visitors from the European Economic Area (EEA), the legal bases of the EU General Data Protection Regulation (GDPR) also apply, in particular Art. 6 GDPR.

4. Data Collection When Visiting Our Website

4.1 Server Log Files

When visiting our website, technical access data is automatically stored in so-called server log files. This data is automatically transmitted by your browser and includes:

IP address of the requesting device
Date and time of access
Name and URL of the accessed page
Browser used and operating system
Referrer URL (previously visited page)
Amount of data transferred and HTTP status code

The storage of this data is carried out for technical security reasons, in particular to defend against attacks on our web infrastructure. This data is not merged with other data sources. The log files are deleted after a maximum of 30 days.

Legal basis CH: Art. 31 DSG (legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. f GDPR (legitimate interest)

5. Services and Tools Used

5.1 Web Hosting – SiteGround

Our website is hosted on the servers of SiteGround. SiteGround processes all data that is technically necessary when visiting our website (in particular IP addresses and access data).

Provider: SiteGround Spain S.L. (with server locations in the EU, including Bulgaria and Germany)
Purpose: Provision and operation of the website (web hosting)
Data collected: IP address, access data, log files
Third-country transfer: No (server locations within the EU)
Legal basis CH: Art. 31 DSG (contract performance / legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Data Processing Agreement: https://www.siteground.com/viewtos/dpa
Provider privacy policy: https://www.siteground.com/privacy.htm

We have concluded a data processing agreement (DPA) with SiteGround to ensure that the data of our website visitors is processed in accordance with applicable data protection regulations.

5.2 Content Management System – WordPress

Our website uses WordPress as a content management system (CMS). WordPress is an open-source software operated on our own hosting server.

Provider: WordPress Foundation / Automattic Inc. (USA)
Purpose: Management and presentation of website content
Data collected: IP address (for comments and login), comment data, login cookies
Third-country transfer: No – WordPress is operated as a self-hosted CMS on our servers. Personal data is not transmitted to Automattic.
Legal basis CH: Art. 31 DSG (contract performance / legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Provider privacy policy: https://automattic.com/privacy/

5.3 Contact Form – Contact Form 7

A contact form is available on our website through which you can send us messages directly. For this purpose, we use the WordPress plugin Contact Form 7.

Provider: Takayuki Miyoshi (Japan) – open-source plugin operated on our own server
Purpose: Receiving and processing contact inquiries
Data collected: Name, email address, message content, IP address
Third-country transfer: No – the plugin is operated locally on our server. Data is not shared with third parties.
Legal basis CH: Art. 31 DSG (pre-contractual measures / legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. b GDPR (pre-contractual measures)
Provider privacy policy: https://contactform7.com/privacy-policy/

The data transmitted via the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

5.4 Cookie Consent Management – Cookie Notice by Hu-manity.co

To obtain and document your consent for the use of cookies and similar technologies, we use the Cookie Notice & Compliance plugin.

Provider: Hu-manity.co (Poland, EU)
Purpose: Display of cookie consent banner, collection, storage, and management of consents in accordance with DSG and GDPR
Data collected: Consent status, IP address (anonymized), timestamp of consent
Third-country transfer: No
Legal basis CH: Art. 31 DSG (legal obligation / legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. c GDPR (legal obligation)
Provider privacy policy: https://hu-manity.co/privacy-policy/

5.5 Google Fonts

Our website uses Google Fonts for consistent font display. When accessing a page, your browser loads the required fonts directly from Google’s servers, transmitting your IP address to Google.

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Uniform and optimized display of fonts
Data collected: IP address, browser information (user agent)
Third-country transfer: Yes – data is transferred to the USA
Legal basis CH: Art. 31 DSG (legitimate interest)
Legal basis EU: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Provider privacy policy: https://policies.google.com/privacy

5.6 Google Maps

We integrate interactive maps from Google Maps to make it easier for you to find our location.

Provider: Google LLC
Purpose: Display of maps and location information
Data collected: IP address, location data, device information
Third-country transfer: Yes – USA
Legal basis: Legitimate interest

5.7 Google reCAPTCHA

We use Google reCAPTCHA to protect our contact form from spam and abuse.

Provider: Google LLC
Purpose: Bot detection
Data collected: IP address, user behavior
Third-country transfer: Yes – USA

6. Cookies

Our website uses cookies. Cookies are small text files stored on your device.

Necessary cookies: Required for website functionality
Functional cookies: Improve usability
Third-party cookies: Used by external services

7. Data Transfer to Third Parties

Data is only transferred if necessary, legally required, or consented to.

8. Data Security

We use SSL/TLS encryption.

9. Data Retention

Data is stored only as long as necessary.

10. Your Rights

You have rights to access, rectify, delete, restrict, transfer, and object.

11. Right to Lodge a Complaint

You may contact the Swiss authority:

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)
Feldeggweg 1
3003 Bern
Switzerland
Website: https://www.edoeb.admin.ch

12. External Links

We are not responsible for external websites.

13. Updates

We may update this policy at any time.

Last updated: May 5, 2026