Privacy policy

In short

• This website sets no cookies.
• There is no analytics, no advertising, no retargeting and no cross-site tracking of any kind.
• Nothing is loaded from a third party: no embedded players, no social plugins, no external fonts, no external content network. Everything you see is served from this domain.
• The only things stored on your device are the answer you gave to the privacy notice and, if you allowed it, one display preference.
• Personal data reaches us only if you choose to send it through the contact form.

Controller

CHE-350.218.442. The controller decides why and how personal data is processed on this website. For any question about this policy or to exercise the rights described below, use the contact form or write to hello@deepcut-entertainment.com. Full company particulars are on the imprint.

Server log data

Like every website, this one cannot be delivered without your browser telling the server where to send the page. Each request is therefore processed and, in the usual way, recorded for a short period by the hosting infrastructure. That record contains the requesting IP address, the time of the request, the address requested, the referring page where one is sent, the browser and operating-system identification, and the response status.

This data is used to deliver the site, to keep it available, and to detect and defend against attacks and abuse. It is not used to build a profile, it is not combined with any other source, and it is not used to identify individual visitors. We process it because a website cannot be operated without it and because we have an overriding interest in operating it securely — under the GDPR, where that applies to you, the corresponding basis is Art. 6(1)(f).

Contact form

If you send an enquiry, we process what you enter: your name and email address, which are required, and optionally your company, an indicative budget range and your message. We use it to answer you and to carry out any project that follows, and for nothing else. We do not use it for marketing and we do not pass it to anybody who is not working on your enquiry.

The form is submitted to this site’s own server. To stop the form being abused for mass sending, the server briefly keeps a note of the IP addresses that have submitted it recently — held in memory only, for ten minutes, and never written to a database. The form also contains a hidden field that a person never sees and never fills in; submissions that fill it are discarded as automated.

Where the GDPR applies to you, the basis for handling an enquiry is Art. 6(1)(b) — steps taken at your request before entering into a contract — and Art. 6(1)(f) for the abuse prevention described above. Enquiries are kept as long as the matter is live and for as long afterwards as commercial record-keeping requires, then deleted.

Cookies and storage on your device

This website sets no cookies — not for statistics, not for advertising, and not for delivery. What it can store is two entries in your browser’s local storage. Local storage never leaves your device: unlike a cookie, it is not attached to requests and we cannot read it from the server.

deepcut.consent

Records which categories you allowed and when, so the notice is not shown again on every page. Local storage (not a cookie). Category: Necessary. Retained: Until cleared, or 12 months.

deepcut.prefs

Remembers the calm-background display setting. Only written if you allowed the preferences category. Local storage (not a cookie). Category: Preferences. Retained: Until cleared, or 12 months.

The first is written once you answer the privacy notice — including when you reject everything optional, because that answer is itself what has to be remembered. The second is written only if you allow the preferences category. Rejecting that category deletes it immediately.

You can change your answer at any time: Cookie settings. You can also clear both entries at any time in your browser’s site settings, with no effect on your ability to use the site.

Analytics, advertising and tracking

There are none. No measurement tool, tag manager, pixel, heat-map, session recorder, A/B testing tool or advertising network is loaded on this website, and no profile of you is built.

The privacy preference dialog nevertheless lists analytics and marketing as categories, both switched off. That is deliberate: the consent gate is wired into the code, so if a measurement tool is ever added it cannot start before you have allowed it. Today those switches govern nothing, because there is nothing to govern.

Third-party content, fonts and media

No content on this website is fetched from anyone else’s server while you are reading it. The typefaces are compiled into the site at build time and served from this domain, so no request is made to a font provider. All films, posters and photographs are served from this domain. There is no content delivery network in front of them beyond the site’s own hosting.

The site talks about YouTube, Instagram and TikTok, because that is where the work we make is published. Those are references in text and in artwork drawn by this site’s own code. Nothing is embedded from those platforms, no player is loaded, no button is placed, and no request is made to them — so reading about them here sends them nothing about you. If we later publish links to our own profiles, the link is only followed when you click it.

Who else processes this data

We keep the number of parties involved as small as the site can function with. The following are, or will be, involved:

Hosting and content delivery

Not yet appointed — this provider is named here before the site goes live, and this policy is updated at the same time. Serving this website and keeping it available and secure. The host necessarily processes the technical request data described under “Server log data”. Data concerned: IP address, request time, requested address, referrer, browser and operating system identification, response status.

Email delivery for the contact form

Not yet appointed — this provider is named here before the site goes live, and this policy is updated at the same time. Delivering enquiries submitted through the contact form to our mailbox. No provider is currently connected: until one is, an enquiry is written to the server log and read there. Data concerned: The contents of the enquiry: name, email address, and the optional company, budget range and message fields.

Anyone in that position acts as our processor, under contract, on our instructions only. We do not sell personal data and we do not share it for anyone else’s advertising.

Transfers abroad

We aim to keep processing in Switzerland or the European Economic Area. Where a provider we appoint processes data in another country, we do so only where that country offers adequate protection, or on the basis of contractual safeguards recognised under Swiss and EU law together with the additional measures those safeguards require. The providers concerned are the ones named in the section above, and this policy is updated when one is appointed.

Retention

We keep personal data only as long as the purpose it was collected for requires, or as long as the law requires us to. Technical log data is short-lived and is kept for security and troubleshooting. Enquiries are kept for as long as the matter is live and the applicable commercial retention periods demand. What is stored on your own device is under your control and can be cleared by you at any time.

Your rights

Under the Swiss Federal Act on Data Protection you may ask us whether we process personal data about you and request a copy of it, ask for inaccurate data to be corrected, ask for data to be deleted or its processing restricted, object to processing based on our legitimate interests, and in certain cases receive your data in a machine-readable form or have it transferred.

Where the General Data Protection Regulation applies to you as a visitor from the European Economic Area or the United Kingdom, the equivalent rights under Articles 15 to 22 apply, together with the right to withdraw a consent at any time with effect for the future. Withdrawing consent does not affect what was lawful before it was withdrawn.

To exercise any of these, use the contact form or write to hello@deepcut-entertainment.com. We may need to ask you for enough information to be sure the request really comes from you, which is itself a protection rather than an obstacle.

You also have the right to complain to a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern. In the European Economic Area it is the supervisory authority of your country of residence.

Security and data protection by design

This site is served over an encrypted connection in production. It was built to collect as little as possible: no account system, no tracking, no third-party requests, and no storage on your device beyond your own choices — which is data protection by design and by default applied to the architecture rather than added to it afterwards. Access to enquiries is limited to the people who answer them.

No decision about you is made automatically on this website, and there is no profiling.

Children

This website is a business site and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We update this policy when what the website does changes — for example when a hosting or email provider is appointed, or if a measurement tool is ever introduced. The date at the foot of this page is the date of the current version. Where a change requires your consent, we will ask again rather than assume the earlier answer still applies.