Legal

Privacy policy

Last updated: 5 September 2026

1. Controller

Responsible for the processing of personal data on this website:

David Kurmann Photography (DKP)
David Kurmann
Pilatusrain 7, 6210 Sursee, Switzerland
Phone: 079 698 66 55

No data protection officer has been appointed; this is not required for a company of this size.

2. Principles

Personal data is processed only in so far as this is necessary to provide the services and operate this website. Processing is carried out in good faith, proportionately and transparently. Data is never sold and is not used for purposes that were not apparent at the time of collection.

3. Visiting the website — server logs

When you visit this website, the hosting provider automatically records technical information transmitted by your browser:

• shortened or full IP address
• date and time of access
• browser name and version together with the operating system
• page requested and volume of data transferred
• where applicable, the previously visited page

This processing is technically necessary to deliver the website and to ensure its security and stability. The data is not combined with other sources. The legal basis is the overriding legitimate interest in secure operation (Art. 31 revFADP, Art. 6(1)(f) GDPR).

4. Cookies and analytics

This website sets no cookies of its own and uses no analytics tools such as Google Analytics. There is no tracking and no profiling.

Embedded third-party services — in particular the video player — may set their own cookies once you start a video. See section 6 for details.

5. Contact and enquiry form

When you complete the enquiry form, the details you enter are transmitted and stored:

• service requested, sector, number of people, timing, location, intended use
• name, company, email address, telephone number
• your free-text message

This data is used solely to process your enquiry and for any subsequent collaboration. The legal basis is the performance of pre-contractual measures together with the consent you give within the form.

If you make contact by email or telephone, the details arising there are likewise used to deal with your request.

Retention

Enquiries that do not lead to a commission are deleted after twelve months at the latest. Where a commission arises, the statutory retention period of ten years for business records and receipts applies (Art. 958f CO).

6. Third-party services

Netlify — hosting

This website is hosted by Netlify, Inc., 512 2nd Street, San Francisco, CA 94107, USA. On access, the server data listed in section 3 is transmitted there. Netlify also processes submissions from the enquiry form. Netlify privacy policy

Wistia — video hosting

The videos in the section “The DKP format” are held by Wistia, Inc., Cambridge, MA, USA. As long as you do not start a video, only the still image is shown — this is embedded directly in the page, so no connection to Wistia is made. Only when you click the play button is the player loaded; at that point your IP address and technical details are transmitted to Wistia and cookies may be set. Wistia privacy policy

Google Fonts

Typefaces are loaded from Google Fonts (Google Ireland Limited, Dublin) to display the text. Your IP address is transmitted to Google in the process. Google privacy policy

Instagram and TikTok

The references to Instagram (Meta Platforms Ireland Ltd.) and TikTok (TikTok Technology Ltd., Dublin) are plain links. Data is transmitted only once you click them and open the respective platform, at which point its own privacy terms apply.

7. Transfer abroad

Some of the providers named above are based in the United States. The transfer relies on standard contractual clauses and on certification under the Swiss-U.S. Data Privacy Framework. Despite these measures, the level of data protection cannot in every case match that of Switzerland.

8. Personal data from photographic commissions

Commissions produce image and sound recordings of individuals. These constitute personal data within the meaning of the revFADP. The following applies:

• Recordings are made only with the knowledge of the person depicted.
• Publication takes place only with their consent. For corporate commissions, the commissioning company is responsible for obtaining the consent of its staff.
• Raw and edited files are stored in encrypted form and are not passed to uninvolved third parties.
• Consent once given may be withdrawn at any time with effect for the future. Material already printed is not covered by this.

9. Data security

The website is delivered exclusively over encrypted HTTPS. Appropriate technical and organisational measures are taken to protect data against unauthorised access, loss and misuse. Complete protection against every threat is not technically attainable.

10. Your rights

Within the scope of applicable law you have the following entitlements:

• Information as to whether and which data concerning you is processed
• Rectification of inaccurate data
• Erasure, in so far as no statutory retention obligation applies
• Restriction of processing
• Data portability in a common electronic format
• Objection to processing and withdrawal of consent given

Please contact me by phone on 079 698 66 55. Proof of identity may be requested to prevent misuse.

Complaints may be directed to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Individuals resident in the EU may contact their competent national supervisory authority.

11. Changes

This privacy policy may be amended if the legal situation or the services used change. The version published on this page at any given time is the one that applies.