Elchi Studios is a brand of Krauss Software, the sole proprietorship of Samuel Krauss, Oberägeri ZG, Switzerland. The counterparty is Krauss Software, owned by Samuel Krauss.
Elchi Studios | Krauss Software, Samuel Krauss | legal@elchi.dev
1. Definitions and Scope
This Privacy Policy applies exclusively to the website https://elchi.dev and the content and services offered directly under this domain. Subdomains of elchi.dev that are not expressly identified as part of Elchi Studios are not covered by this policy.
The terms used are based on the Swiss Federal Act on Data Protection (FADP, revised version, in force since 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR). The GDPR applies when services are offered to individuals residing in the EU.
Definitions:
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on personal data, regardless of the means applied.
- Controller: The natural or legal person who determines the purposes and means of data processing.
- Hosting Provider: External providers from which we rent servers and storage to operate the website (Section 4).
- Processor: Third parties processing personal data on behalf of the controller.
2. Controller
Krauss Software, owned by Samuel Krauss (brand Elchi Studios)
Im Ländli 18
6315 Oberägeri
Switzerland
Email: legal@elchi.dev
3. Data We Process
3.1 Technical Access Data (Automatic)
When you visit elchi.dev, our servers automatically collect the following technical data:
- IP address (anonymised after processing)
- Date and time of access
- URL / page accessed
- HTTP status code
- Data volume transferred
- Referrer URL
- Browser type and version
- Operating system
- Device category
Purpose: Ensuring technical operation, error detection, abuse prevention.
Legal basis (FADP): Art. 6 FADP (legitimate interest) | GDPR: Art. 6(1)(f) GDPR.
Retention: Technical logs are deleted or anonymised after a maximum of 90 days.
3.2 No Usage Analytics
elchi.dev uses no analytics system. There are no cookies for tracking purposes, no third-party analytics services such as Google Analytics, and no analysis of your usage beyond the technical access data in section 3.1.
The cookie-free visitor statistics we offer our clients are built for their website as part of the respective contract. Should we later use such statistics on elchi.dev as well, we will update this notice beforehand.
3.3 Contact Enquiries
When you contact us by email or via the contact form, we process:
- Name and email address
- Company, phone number and budget, if you provide them
- Your choices in the configurator, if the enquiry comes from there
- Content of the message
- Language and the page from which you send the enquiry
- Time of contact
We are notified of an enquiry from the contact form by email; for this and for replies to it we use Resend (section 4.2).
Purpose: Processing your enquiry, initiating a business relationship.
Legal basis (FADP): Art. 6 FADP | GDPR: Art. 6(1)(b) GDPR (pre-contractual measures).
Retention: 10 years after conclusion of correspondence (Swiss commercial retention obligation).
3.4 Client Data in the Context of Commissions (B2B)
In the course of service contracts (web development, hosting), we process data from contact persons at companies:
- Contact details of the respective contact persons
- Communication relating to contract execution
- Technical access data (e.g. server credentials, stored exclusively in encrypted form)
This data is used exclusively for the fulfilment of the contract and is not processed for any other purpose.
4. Hosting, Recipients and Disclosure Abroad
4.1 Servers and Hosting Providers
Since 3 October 2026 we operate elchi.dev and the client projects we host on our own servers, which we rent from the following hosting providers; ClouDNS answers the DNS queries for our domains:
| Provider | Role | Country (location) |
|---|---|---|
| Infomaniak Network SA | Servers, object storage for pictures | Switzerland (Geneva) |
| Hetzner Online GmbH | Servers | Germany (Falkenstein, Nuremberg) |
| Tavuru | Server of the primary database | Germany (Frankfurt) |
| UpCloud Oy | Servers | Netherlands (Amsterdam) |
| Scaleway SAS | Servers, nightly copy of the pictures | Netherlands (Amsterdam), France (Paris) |
| ClouDNS Ltd. | DNS queries for our domains; sees DNS queries only, no content | Bulgaria (Sofia) |
These providers process personal data only on our behalf. They are carefully selected and, where they process personal data, contractually obligated to comply with data protection law (Data Processing Agreement / DPA).
Where a client project is hosted with another provider at the client's request, the respective contract names that provider. Where that provider is outside Switzerland or the EEA, an adequate level of protection is ensured (e.g. through EU Standard Contractual Clauses).
4.2 Sending Email
Notifications of enquiries from the contact form, and replies to them, are sent through Resend, Inc., a company based in the USA. Resend sends these emails from its region in the EU, but stores their data (sender, recipient, subject and content, and with it the details of your enquiry) in the USA.
4.3 DNS
Cloudflare, Inc. (USA) holds the DNS zones of our domains and receives no content of your requests to the website. ClouDNS answers the DNS queries on our behalf (section 4.1), likewise without receiving the content of your requests. Name lookups usually reach ClouDNS from your DNS resolver, not from your device.
4.4 Disclosure Abroad
Personal data is disclosed to the following countries:
- Germany, Netherlands, France, Bulgaria (providers under section 4.1): Under Annex 1 of the Swiss Data Protection Ordinance (DPO), these countries ensure an adequate level of data protection (Art. 16 para. 1 FADP). For data subject to the GDPR, these countries belong to the EEA, and an adequacy decision of the European Commission exists for Switzerland (Art. 45 GDPR).
- USA (Resend under section 4.2): For data from Switzerland, disclosure to Resend is based on the European Commission's Standard Contractual Clauses with the adaptations required by Swiss law, which form part of Resend's data processing agreement (Art. 16 para. 2 let. d FADP). For data subject to the GDPR, Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); the same Standard Contractual Clauses apply in addition (Art. 46(2)(c) GDPR).
You can request a copy of the Standard Contractual Clauses at legal@elchi.dev.
5. Disclosure to Third Parties
Personal data is not sold or rented to third parties. Disclosure occurs only:
- to the providers named in Section 4 as processors
- to comply with legal obligations (e.g. on official orders)
- with the explicit consent of the data subject
Important note for clients: Where third-party services (e.g. payment providers, external APIs, social media plugins) are used in the context of a client project, the privacy policies of those third parties apply. In such cases, Elchi Studios acts solely as a technical service provider and assumes no responsibility for the data protection practices of third-party services chosen by the client.
6. Your Rights
6.1 Rights under the Swiss FADP
You have the right to:
- Access (Art. 25 FADP): Information about data processed about you
- Rectification (Art. 32 FADP): Have inaccurate data corrected
- Erasure (Art. 32 FADP): Have data deleted under certain conditions
- Restriction of processing (Art. 32 FADP)
- Data portability (Art. 28 FADP)
- Object to certain types of processing
6.2 Additional Rights under the GDPR (for persons residing in the EU)
In addition to the above:
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to lodge a complaint with a data protection supervisory authority in your EU member state
6.3 Exercising Your Rights
To exercise your rights, please contact: legal@elchi.dev
We will respond to your request within 30 days. In complex cases, this period may be extended to 90 days; we will inform you in advance if this is necessary.
7. Data Security
Elchi Studios implements appropriate technical and organisational measures to protect your data, in particular:
- Encrypted data transmission via HTTPS (TLS)
- Encrypted storage of sensitive access credentials
- Access controls and access logs
- Regular security updates of systems in use
8. Cookies
Elchi Studios does not use tracking cookies or third-party advertising cookies on elchi.dev. Where technically necessary cookies are used (e.g. for session management), this is done on the basis of Art. 6(1)(f) GDPR / Art. 6 FADP (legitimate interest in operating the website).
No cookie consent is required for strictly necessary cookies.
9. External Links
This website may contain links to third-party websites. This Privacy Policy does not apply to those external websites. We recommend reading the privacy policies of any external websites you visit.
10. Changes to this Privacy Policy
Elchi Studios reserves the right to update this Privacy Policy at any time, in particular in response to changes in the legal framework or technologies used. The current version is always available at https://elchi.dev/legal/privacy. The date of the last update is noted at the end of this document.
11. Supervisory Authorities
Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern | www.edoeb.admin.ch
EU (for complaints by EU residents): Competent data protection authority in the respective EU member state.
Last updated: October 2026 | Version 1.5
Scope: https://elchi.dev (main domain, excluding subdomains not expressly identified as Elchi Studios)