1. Controller
The controller responsible for processing personal data on this website is:
Meryl Gashi Photography
Meryl Gashi
Kirchgasse 2
5000 Aarau, Switzerland
Email: info@merylgashi.com
Phone: +41 76 697 08 08
2. Principles
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). We only collect the data we need for the respective purpose, treat it confidentially and never sell it.
3. Hosting
This website is operated by Swissware IT GmbH, Küttigen (Switzerland), and hosted on servers in Switzerland. Swissware IT GmbH processes the data exclusively on our behalf and according to our instructions.
4. Server log files and protection against attacks
When you visit the website, technical data is recorded automatically: IP address, date and time, the page requested, browser and operating system, and the page you came from. We need this data to operate the website securely and reliably. It is deleted after 30 days at the latest.
To protect against attacks, requests are analysed automatically by the security software CrowdSec. If it detects an attack, the attacker’s IP address and the type of attack are sent to CrowdSec SAS (France) so that other operators can block this address as well.
5. Backups
For security reasons, encrypted backups are made regularly on servers in Switzerland. Deleted data may remain in them for up to 13 months before it is removed automatically.
6. Contact form and email
When you contact us through the contact form or by email, we process your details (name, email address, phone number, message) to answer your enquiry. Enquiries sent through the form are also stored in the database of this website, at Swissware IT GmbH in Switzerland. Our emails are stored with Google (Gmail), a service of Google Ireland Limited (Ireland); Google may also transfer them to the USA. We keep enquiries as long as they are needed to answer them and for any further collaboration, and delete them on request unless a legal retention obligation applies.
7. Visitor statistics
To understand how our website is used, we use the open-source software Umami. It runs at Swissware IT GmbH on servers in Switzerland; the data is not passed on to any third party. Umami sets no cookies and does not store IP addresses. It records the pages visited, the previous page, browser, operating system, device type, language and the approximate location (country, region, city). We only evaluate this data in aggregate and do not try to identify individual visitors.
8. Cookies
This website sets no cookies. You can delete or block cookies in your browser settings at any time.
9. Instagram
On our website we show pictures from our Instagram account. The pictures are loaded directly from the servers of Instagram, a service of Meta Platforms Ireland Ltd. (Ireland). In doing so, Meta receives your IP address and technical data about your browser. Meta may also transfer this data to the USA. More information: https://privacycenter.instagram.com/policy
10. Other embedded services
Google Maps. On our contact page we show a map from Google Maps, a service of Google Ireland Limited (Ireland). When the map is displayed, Google receives your IP address and technical data about your browser and may set cookies. Google may also transfer this data to the USA. More information: https://policies.google.com/privacy
Google Fonts. To display its fonts, this website loads them from Google Fonts, a service of Google Ireland Limited (Ireland). In doing so, Google receives your IP address. Google may also transfer this data to the USA. More information: https://policies.google.com/privacy
11. Disclosure abroad
Your data is processed in Switzerland. Exceptions: when an attack is detected, the attacker’s IP address goes to France (section 4); our emails are stored with Google in Ireland, possibly also in the USA (section 6), and when the map and fonts are displayed your IP address also goes to Google (section 10); when the Instagram pictures are displayed, your IP address goes to Meta in Ireland, possibly onward to the USA (section 9). According to the Swiss Federal Council, France and Ireland provide an adequate level of data protection.
12. Your rights
You may at any time ask which personal data we process about you and request that it be corrected, deleted or handed over to you, unless a legal obligation prevents this. Please write to info@merylgashi.com. If you are not satisfied with our answer, you can contact the Federal Data Protection and Information Commissioner (FDPIC).
13. Changes
We update this privacy policy when our website or the law changes. The version published here applies.
Last updated: October 2026
