Protecting your personal data matters to me. In line with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), this policy explains which data I process when you visit this website, get in touch or use the client portal, for what purpose, and to whom it is disclosed.
The controller responsible for data processing is:
Abdi Dhiblawe (A.D.Films24), Switzerland
E-mail: info@adfilms24.ch
Further details: see the imprint.
Please send any data protection requests to the e-mail address above.
Personal data is processed lawfully, in good faith and proportionately, only for the purposes stated here and only for as long as necessary. No profiling and no automated individual decision-making takes place. This website does not use advertising services; Vercel Web Analytics is used for anonymous visitor statistics (see section 8).
| Area | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Visiting the website | IP address, date/time, page requested, referrer, browser and device information | Delivery, stability and security of the website | Art. 6(1)(f) (legitimate interest) |
| Contact form | First name, last name, e-mail address, project type, message; optional: phone, budget, preferred date, how you found us | Answering your enquiry, recording it in my customer management system (CRM), preparing quotes | Art. 6(1)(b) (pre-contractual) or (f) |
| E-mail / WhatsApp / phone | Contact details and content of your message | Communication, handling of orders | Art. 6(1)(b) or (f) |
| Client portal (clients only) | Name, company, e-mail address, phone, project details, uploaded files, comments with a video timestamp, approvals, invoices | Project handling, coordination, delivery and billing | Art. 6(1)(b) (contract) |
| Contact form spam protection | Time of your last enquiry in the browser's session storage (deleted when you close the tab) | Preventing duplicate submissions | Art. 6(1)(f) |
You are not obliged to provide the data. Without the details in the form, however, your enquiry cannot be answered.
The website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access it, your browser automatically transmits technical data (see table above) to Vercel's servers, which process it in log files to deliver the pages and to defend against attacks. A data processing agreement is in place with Vercel; processing may also take place outside Switzerland and the EEA (see section 10). The source files of this website are managed on GitHub; no visitor data is collected there.
If you use the contact form, your input is forwarded as an e-mail to my mailbox via the service EmailJS. The data is transmitted to EmailJS in encrypted form (HTTPS), processed technically there and delivered to my mailbox. This mailbox is operated with Google (Gmail). I use your details exclusively to handle your enquiry and do not pass them on for advertising purposes.
In addition, your enquiry (name, e-mail address, project type, message and optional details) is stored as a contact in my customer management system (CRM) so that I can follow it up and reply. The database is operated by Supabase Inc.; its servers are located in the EU (Ireland).
To prepare replies, quotes and project plans internally, I use AI assistance from Anthropic PBC (USA). Details from your enquiry or project may be transmitted to Anthropic in the process. According to its terms, Anthropic does not use this data to train its models. Drafts are reviewed by me; no decisions are made automatically.
If you contact me by e-mail, phone or WhatsApp, I process your contact details and messages in order to communicate with you. WhatsApp's own terms of WhatsApp/Meta also apply; message content is end-to-end encrypted there, metadata (e.g. phone number, time) is processed by the provider. Please do not send particularly sensitive personal data through unencrypted channels.
Clients with an ongoing project receive access to the client portal (portal.adfilms24.ch or the app «A.D.Films24 Kundenportal»). Sign-in works without a password via a link sent to your e-mail address. The portal processes the project data listed in section 3: project status, dates, files (e.g. edit versions and final delivery), your comments including the timestamp in the video, approvals, confirmations of receipt and invoices.
Portal data and files are stored by Supabase Inc. on servers in the EU (Ireland); the web interface is delivered by Vercel Inc. A technically necessary session key is stored in your browser or device to keep you signed in. The portal uses no tracking or analytics services. Within the portal, only you and A.D.Films24 can see your project data.
This website sets no tracking and no analytics cookies and does not embed advertising or
social media plug-ins, so no cookie notice is needed. After you submit the contact form, only the time of your enquiry is kept
in your browser's session storage (sessionStorage) to prevent duplicate submissions. This entry never leaves your
device and is deleted automatically when you close the tab.
For anonymous visitor statistics we use Vercel Web Analytics (Vercel Inc., see section 4). It records the page visited, the referring page, country, browser, operating system and device type. No cookies are set and nothing is stored on your device; visits are only told apart by a hash that is regenerated every day. This makes it impossible to recognise you across days or websites, and we cannot link the data to any person. The purpose is to improve the website and see which content is read.
Fonts, scripts and the showreel video are delivered from this domain itself. No data is transmitted to Google (Google Fonts), YouTube or Vimeo in the process. Links to Instagram, YouTube and WhatsApp lead to third-party websites; data is only transmitted to the respective provider once you click such a link, and that provider's own privacy policy applies.
Some of the service providers used (Vercel, Supabase, Anthropic, EmailJS, Google, WhatsApp/Meta, GitHub) are based, or have servers, wholly or partly in the USA or other countries outside Switzerland and the EEA. Some of these countries do not have a level of data protection equivalent to Switzerland's. Where the providers are not covered by an adequacy decision or certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, disclosure is based on standard contractual clauses or on the exception for the performance of a contract (Art. 17 FADP).
Server log files are kept by the host for a short time only. Enquiries are deleted once they have been finally dealt with and no order results. If a contract is concluded, business records are retained in line with statutory obligations (generally 10 years, Art. 958f Swiss Code of Obligations). Portal access and project files are deleted on request once the collaboration has ended, unless a retention obligation applies.
The website is delivered exclusively in encrypted form (HTTPS with HSTS) and protected by additional security headers (including a Content Security Policy). I take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. Complete security of data transmission over the internet cannot, however, be guaranteed.
Within the scope of the applicable data protection law you have the right to:
To exercise your rights, an e-mail to info@adfilms24.ch is sufficient. To prevent misuse, proof of identity may be requested. Requests are generally answered within 30 days. You can also lodge a complaint with the supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); if you live in the EU, the supervisory authority of your country of residence.
This privacy policy may be adapted at any time, in particular if the website or the legal situation changes. The version published here applies. Last update: October 2026.