SWS ORDER · Privacy and cookies
SWSOrder privacy and cookies
Privacy information updated on 20 October 2026 · 0.3.11-indexable.
Services in this version
Contact form: prepared; availability is checked while the form is being prepared. Analytics: enabled only after optional consent. reCAPTCHA: security verification prepared for form submission, separate from Analytics consent.
Controller and scope
The controller for swsorder.ch is Swiss Web Studio – Ivo Protrkic, Via San Jorio 15, 6600 Locarno, Switzerland. Contact: info@swisswebstudio.com. This notice covers the website and commercial enquiries, not real restaurant orders.
Demo and contact requests
The form processes the required venue name and email, an optional message, language, notice acknowledgement and request identifier to answer and prepare a possible offer. It does not subscribe you to a newsletter or create a subscription. Do not enter sensitive or payment data. Acknowledgement does not authorise Analytics or marketing.
Hosting and email
Infomaniak provides hosting and email for the website. The form sends the enquiry to info@swisswebstudio.com and uses the visitor’s address as the reply address. Ivo Protrkic is the only person who reads this mailbox. Contents are retained in email; the form backend does not create an additional message archive in files or queues. Infomaniak processes service data under the customer’s instructions and the applicable agreements, including its data processing agreement.
Manual copies in Bexio
Bexio is the only additional destination for copies of business enquiries. Copies are made manually: there is no automatic integration between the form and Bexio. Bexio identifies Swiss servers alongside some services and encrypted backups abroad; its privacy statement describes recipients, transfers and retention criteria.
Technical form cookie
When the form is prepared, the backend sets __Host-swsorder-form: a random identifier protecting the request, lasting 2 hours, with Secure, HttpOnly, SameSite=Strict and path /. Blocking it can prevent submission. It is separate from the Analytics choice.
Security and abuse prevention
The server processes HTTP and IP data for security, checks HTTPS and origin and limits attempts. The private form store holds IP HMACs, attempt times and token fingerprints: pseudonymised, not automatically anonymous data. It stores no email, message, reCAPTCHA token or plain IP. Client records become eligible for removal more than 24 hours after their last recorded access; form replay records expire after 2 hours and reCAPTCHA replay records after 120 seconds. Cleanup runs on the next store access; without further access, records may remain longer. Logs and backups have separate rules.
Request retention
Enquiries that do not become customers are retained for 12 months after the last contact. Ivo Protrkic applies this policy through manual review and deletion in the email mailbox and Bexio; the website does not automatically delete emails. Contractual relationships follow the needs of the contract and applicable retention obligations. Deleting working copies does not necessarily remove them immediately from providers’ backups. Technical security data, logs and backups follow cycles separate from the 12-month policy, according to the service and applicable agreements.
Optional Analytics
When Google Analytics 4 is enabled, it loads only after explicit consent to analyse website use and improve the site. Website measurements cover pages visited, page source categories, Request a demo clicks, first form interaction and requests accepted by the server, together with page language and general device category. The source is a category, not the referring website address or full visit attribution. We do not send form fields, names, email addresses, enquiry contents or request identifiers. Addresses are limited to known website pages, without query parameters or fragments; the transmitted referrer is empty. Google receives technical connection data and may derive an approximate city-level location and collect details such as device brand and model, browser and operating-system versions and screen resolution. These data are used to analyse and improve the website. The tag disables Google signals and advertising personalisation.
Analytics choice and withdrawal
In production, Cookie preferences allows acceptance, refusal and withdrawal. The choice lasts 180 days in localStorage under swsorder-consent-production-v1; if storage is blocked, it applies only to the open page. Refusal does not block contact. Withdrawal stops later measurement and attempts to remove accessible site Analytics cookies; it does not automatically erase data already received by Google. The 180 days do not determine Google cookie or Analytics data retention.
Analytics data retention
Analytics data retention depends on the Google property settings. Limits on event-level and user-level data do not necessarily match the retention of aggregated reports. The Google documentation linked below describes service rules, including periodic deletion and possible extension through new activity.
reCAPTCHA, separate from Analytics
When enabled, Google reCAPTCHA v3 protects the form against abusive submissions. The website loads the service only at protected submission. Google may process technical, device and interaction data and use the _GRECAPTCHA cookie for risk analysis. The server checks the single-use token, action, hostname, age and score, without adding the optional IP address to verification. This security communication is separate from statistics and its consent. If the form is blocked, you can contact us by email. Google’s Privacy Policy and Terms of Service apply to the service.
Providers and international processing
The providers involved are Infomaniak for hosting and email, bexio AG for manual copies, and Google for the enabled services identified on this page. Not all processing necessarily stays in Switzerland: Google describes international infrastructure. Provider policies and agreements describe recipients, countries or regions, and transfer mechanisms. The links below provide access to those sources; they do not guarantee exclusively Swiss storage.
Links and demo
Email and WhatsApp open at your initiative; there are no WhatsApp widgets or preloaded chats. External services have their own notices. Manrope is hosted locally. The Grill Club demo keeps examples in page memory, resets them on reload, sends no real orders and takes no payments.
Contact and rights
For information, access, correction, erasure or other applicable rights: info@swisswebstudio.com. Proportionate identity checks may be required; do not send sensitive documents unsolicited. Statutory obligations and limits remain applicable. You may contact the FDPIC: https://www.edoeb.admin.ch.