Privacy Policy

Last updated: 30 August 2026

1. Controller and scope

Bastian Herold
Buchenweg 8
83071 Stephanskirchen
Deutschland
Contact: contact form

This privacy policy applies to the public websites bastianherold.ch and liftair.ch. It does not apply to the separate application app.liftair.ch. The processing of personal data is governed in particular by the General Data Protection Regulation (GDPR) and, where applicable, the Swiss Federal Act on Data Protection (FADP).

2. Provision of the websites

The websites are delivered through Microsoft Azure Front Door and Azure Functions/App Service. The backend services are located in the Azure Switzerland North region. Technically necessary connection data, such as the IP address, time, requested URL, referrer and browser information, is processed to deliver and secure the websites.

Language and display preferences are stored locally in the browser; the language selection is also stored in a technically necessary cookie. These settings are not used for analytics. The legal basis is our legitimate interest in secure, stable and user-friendly operation.

3. Web analytics

We use Microsoft Application Insights to evaluate page views, load times, the referring page, device type, browser and operating system information, screen width in coarse bands, reading time and scroll depth, and an approximate location derived from the IP address. The full IP address is not stored in the telemetry.

To group the page views of a single visit, a session cookie is set that expires after 30 minutes of inactivity, and after 24 hours at the latest. No persistent identifier is stored, and returning visits are not recognised as such. A transmission queue may temporarily be held in the browser's session storage to ensure reliable delivery. The site operators exclude their own visits from the count; for that purpose the server sets a cookie when they sign in to the admin area, which serves no other purpose. Telemetry data is retained for two years. The legal basis is our legitimate interest in improving and securely operating the websites.

4. Contact form

When you submit an enquiry, we process your name, email address and message. Delivery to the operator and, if requested, a copy to you is handled by Azure Communication Services. The message is not stored in an application database, but remains available as an email for as long as required to handle the enquiry. Pseudonymised identifiers and delivery status information are stored for no more than 72 hours to prevent abuse and ensure reliable delivery. The legal basis is taking steps before entering into a contract or our legitimate interest in handling and protecting enquiries.

5. Orders from the LiftAir Shop

When you place an order, we process your name, email address, delivery address and order details to fulfil the contract. Delivery to the operator and the confirmation to the customer are handled by Azure Communication Services. There is no order database, but the emails are retained as business records in accordance with statutory retention obligations. The legal bases are steps before entering into a contract, performance of the contract and compliance with legal obligations.

6. Service providers and international transfers

We use the following service providers to operate the websites:

  • Microsoft Azure – delivery, storage, web analytics and email delivery
  • jsDelivr – delivery of JavaScript libraries; the IP address is technically transmitted to the CDN provider

These providers may use subprocessors and process data outside Switzerland or the European Economic Area. In such cases, the transfer is based on an adequacy decision or appropriate safeguards, in particular standard contractual clauses.

7. Your rights

Subject to the applicable legal requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. Please use the contact form to exercise your rights.

You may lodge a complaint with the Bavarian State Office for Data Protection Supervision or, where Swiss data protection law applies, the Federal Data Protection and Information Commissioner (FDPIC). The version published on this page at the relevant time applies.