Effective Date: August 28, 2026

---

1. Scope and Responsible Party

This Privacy Policy applies to the website https://hirzel-von-zurich.ch, operated by Tabea Hirzel. The responsible party for data processing under the Swiss Data Protection Act (DPA) is: Tabea Hirzel Email: hirzel.v.zurich@gmail.com

---

2. Data Collection and Purpose

2.1 Comments

When visitors leave comments, the following data is collected:

• • Information provided in the comment form.

• • IP address and browser user agent string (for spam detection).

An anonymized email hash may be shared with the Gravatar service to display profile pictures. Gravatar’s privacy policy is available here.

2.2 Cookies

Cookies are used to:

• • Save visitor preferences (e.g., name, email) for future comments (duration: 1 year).

• • Manage login sessions (duration: 2 days for login cookies, 1 year for screen options).

• • Track edited posts (duration: 1 day).

A temporary cookie checks browser compatibility upon visiting the login page.

2.3 Embedded Content

External content (e.g., videos, images) may collect data, use cookies, or track interactions as if the visitor had visited the external site directly.

---

3. Legal Basis

Data is processed based on:

• • Consent (e.g., cookies for convenience).

• • Contractual necessity (e.g., providing requested services).

• • Legitimate interest (e.g., spam detection, security).

• • Legal obligation (e.g., compliance with Swiss DPA).

---

4. Data Retention

• • Comments and metadata: Retained indefinitely for follow-up recognition.

• • User profiles: Retained until deletion is requested or the account is inactive.

---

5. Data Subject Rights

Under the Swiss DPA, visitors have the right to:

• • Request access to their personal data.

• • Request correction or deletion of their data (unless legally required to retain it).

• • Object to processing for direct marketing or legitimate interests.

Requests can be submitted to: hirzel.v.zurich@gmail.com.

---

6. Data Security

Hirzel von Zürich implements technical and organizational measures to protect data, including:

• • Encryption (TLS/SSL).

• • Secure storage and access controls.

---

7. Third-Party Services

• • Spam detection: Visitor comments may be processed by automated services.

• • Gravatar: Profile pictures are linked via anonymized email hashes.

---

8. Updates

This policy may be updated to reflect changes in legal requirements or services. The latest version will be posted on this page. Last Updated: August 28, 2026.