1. CONTROLLER
- Owner
- Haura Zahid · Zahid Projects
- Address
- Loretostrasse 1
6300 Zug
Switzerland
The entity named above is responsible for the processing of personal data within the meaning of
Art. 5 lit. j revFADP and Art. 4 No. 7 GDPR.
2. PRINCIPLES
Personal data is processed exclusively in accordance with the principles of lawfulness, good
faith, proportionality, purpose limitation and data minimisation. Processing only takes place
to the extent necessary for the respective purpose and where a legal basis or consent exists.
3. DATA PROCESSED
When visiting the website
When this website is accessed, the hosting provider temporarily records technically necessary
access data in server log files: IP address (anonymised or truncated), date and time of access,
page accessed, status code transmitted, user agent (browser, operating system) and referrer URL.
This data serves solely the secure operation of the website (error analysis, defence against
attacks) and is deleted after a maximum of 30 days.
When contacting us
For an enquiry by e-mail, contact form or telephone, name, contact details and the content of
the message are processed in order to respond to the enquiry and conduct any further
correspondence. Processing is based on the pre-contractual or contractual relationship
(Art. 31 para. 2 lit. a revFADP · Art. 6 para. 1 lit. b GDPR) or an overriding legitimate
interest in business communication.
Within project mandates
Within mandates awarded, contractually relevant data (clients, contact persons, project
documentation, invoicing data) is collected and processed to the extent necessary for
contract performance or to fulfil statutory retention obligations.
4. PURPOSES & LEGAL BASES
- Contract initiation & performance
- Processing of enquiries, preparation of offers, mandate handling. Basis: contractual or
pre-contractual relationship.
- Secure website operation
- Recording of technical access data to maintain availability and security.
Basis: legitimate interest.
- Legal obligations
- Retention of business and accounting records (10 years pursuant to Art. 958f CO).
5. DISCLOSURE TO THIRD PARTIES
Personal data is generally not disclosed to third parties. Disclosure only takes place where
necessary for contract performance (e.g. to building owners, general contractors, specialist
planners within a project), where legally required, or where express consent has been given.
Integrated processors (hosting, e-mail provider) are contractually bound to comply with data
protection regulations.
6. HOSTING & INTEGRATED SERVICES
Hosting & technical support
This website is maintained and operated by:
hetadev GbR
Goethestrasse 35 · 35037 Marburg · Germany
VAT ID: DE450519847
E-mail: contact@hetadev.pro
hetadev GbR acts as a processor within the meaning of Art. 9 revFADP / Art. 28 GDPR on the
basis of a written data processing agreement. The website is delivered via servers of a
European hosting provider with data centres within the EU. The provider's technical and
organisational data protection measures under GDPR apply.
Fonts (self-hosted)
The fonts used, "Cormorant Garamond" and "Inter", are delivered exclusively from this
website's hosting server. No connection to third parties (in particular not
to Google Fonts) takes place. No personal data is transmitted to third parties when the
website loads.
No tracking cookies
This website uses no tracking, analytics or marketing cookies. No profiling
and no reach measurement takes place.
7. RETENTION PERIOD
Personal data is only retained for as long as necessary for the respective purposes or as
required by a statutory retention obligation. Server log files are deleted after a maximum of
30 days. Business correspondence and accounting records are retained for 10 years pursuant
to the Swiss Code of Obligations.
8. YOUR RIGHTS
You have the right to information, rectification, erasure, restriction of processing, as well
as to data disclosure and portability. Any consent given may be withdrawn at any time with
effect for the future. Access requests or objections can be addressed informally to:
office@zahidprojects.com
You also have the right to lodge a complaint with the competent supervisory authority. In
Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1,
3003 Bern. Within the EU: the data protection authority of your member state.
9. DATA SECURITY
This website is delivered exclusively via a TLS-encrypted connection (HTTPS). Appropriate
technical and organisational measures are taken to protect data against loss, manipulation
and unauthorised access. These measures are continuously adapted to the state of the art.
10. CHANGES
This privacy policy may be amended to reflect legal requirements or changes to the services.
The current version is always available at this address.