1. Controller
Cardillo Events · Cardillo Event, Inhaber A. Riccio Alte Landstrasse 85 8804 Au ZH Switzerland info@antonioriccio.ch · +41 76 813 00 55
For a privacy request, email us with a clear description of your request.
2. Website and hosting
Vercel provides the website. Time, requested address, browser information and an IP address may be processed in security and server logs for secure, stable operation and troubleshooting. GoDaddy provides DNS services for cardilloevents.ch; Hostpoint operates the existing contact mailbox info@antonioriccio.ch. Connection and message data needed for name resolution and email delivery are processed for these services.
3. Enquiry and guide quotation
We process the submitted contact, event, service and music details, chosen language and recorded acknowledgements to produce a non-binding price guide, PDF and internal lead summary. This serves to answer the enquiry and prepare a possible contract.
Resend sends the PDF to the supplied email address and a structured copy to info@antonioriccio.ch. Antonio normally replies within 2–3 days. The enquiry creates no availability, reservation or contract.
4. Processors and countries
Vercel handles hosting and functions; Upstash handles abuse limits and stores idempotency, lead, consent and delivery records; Resend sends transactional email; GoDaddy provides DNS services; Hostpoint operates the existing contact mailbox. Sub-processors are listed in current provider documents and contracts.
Data may be processed in Switzerland, the EEA, the USA or other countries. Where needed, contractual safeguards and available provider protections are used.
5. Security and retention
A honeypot, 32 kB limit, unique key and rate limit protect the form. IP and email are hashed for the limit; no raw IP is stored in the lead.
Lead, consent version and delivery status are kept for 24 months; idempotency for 24 hours. An unsubmitted draft remains only in browser sessionStorage until submission, deletion or session end. Business records may be kept longer where law requires.
6. Cookies, tracking and rights
We use no advertising or analytics cookies, pixels or profiling, and disable Resend open/click tracking. No cookie banner is needed for the current scope.
Under applicable Swiss data law you may request access, correction or deletion and object to non-mandatory processing. Legal retention duties and overriding legitimate interests remain reserved.