Your data, clearly explained.

01Who is responsible

The controller for your personal data on ceek.ch and ceek.gr is CEEK, the website and brand studio of AMOX:

[Placeholder: data protection officer or adviser with contact details, if appointed — otherwise delete this paragraph]

For anything about your data, or to use your rights, write to info@ceek.ch. This policy covers ceek.ch and ceek.gr, with or without www. It follows the Swiss Federal Act on Data Protection (FADP) and, for visitors from the EU, the General Data Protection Regulation (GDPR).

02When you visit the site

This website is made of static pages. It is hosted on Cloudflare Pages and delivered through the global network of Cloudflare, Inc. (San Francisco, USA), usually from the data centre nearest to you.

When you open a page, your browser automatically sends Cloudflare technical details: your IP address, the date and time, the address you asked for, the page you came from (referrer) and details of your browser and operating system. From these, Cloudflare also works out a rough location, such as country and region. Cloudflare needs this data to deliver the pages and to protect the site against attacks and abuse. If a page fails to load because of a network error, your browser may send Cloudflare a short technical error report (Network Error Logging).

In our Cloudflare account we see summary statistics and samples of individual requests from roughly the last 31 days. We use them only to spot faults and attacks, and we build no profiles from them. We don’t use Cloudflare Web Analytics or any other statistics tool.

Cloudflare processes this data on our behalf under its Data Processing Addendum. More in Cloudflare’s privacy policy.

Legal basis under the GDPR: our legitimate interest in a secure, fast and working website (Art. 6(1)(f) GDPR).

03When you write to us through the form

On the Contact and Start your project pages you can send us an enquiry. We then process:

• Required: first and last name, email address and your message, plus your confirmation that you understand the privacy note.
• Optional: company, website, the topics you picked and whether you’d like a newsletter.
• Automatically: the page you send the enquiry from.

Your browser sends the form, encrypted, to the address /api/contact on our own domain. There, a small program at Cloudflare (a “Worker”) checks your details and the spam protection. It then sends your enquiry through Cloudflare Email Service as an email from website@ceek.ch to our inbox info@ceek.ch, with your email address as the reply-to address. You then get a short confirmation by email. It includes your first name, but not your message.

The website itself does not store your enquiry: there is no database and no form archive. It is kept as an email in our inbox, which is hosted by Zoho Mail in a data centre in the EU.

Cloudflare keeps these technical traces:

• A log of every request to /api/contact with the time, IP address, browser details, rough location and result, but not the content of your message. It is deleted after 7 days.
• A sending log of every email with sender, recipient, subject (which contains your name and, if given, your company), time and delivery status. It is deleted after 31 days.
• A preview of sent emails including their content, so also your enquiry, for about 7 days. [Placeholder: delete this point once “Email preview” is switched off at Cloudflare]

If sending ever fails, the page opens your own email app with a message to info@ceek.ch ready to go. Whether you send it is up to you.

Without the required details we can’t reply to your enquiry.

Legal basis under the GDPR: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

04Spam protection with Cloudflare Turnstile

To keep bots from abusing our form, we use Cloudflare Turnstile. It is loaded only on the two form pages, from challenges.cloudflare.com. In the background, Turnstile checks technical features of your browser, such as IP address, TLS fingerprint and user agent, along with the site it runs on, and only asks you a short question when it’s unsure. Turnstile does not read what you type into the form. When you send the form, our Worker has Cloudflare confirm the result and passes on your IP address for that.

Cloudflare processes this data on our behalf to detect bots. It also uses it, as a controller in its own right, to improve its bot detection. Details: Turnstile Privacy Addendum and Cloudflare’s privacy policy.

Legal basis under the GDPR: our legitimate interest in protecting the form from spam and abuse (Art. 6(1)(f) GDPR).

05The newsletter tick box

In the form you can tick that you’d like a monthly newsletter from CEEK. At the moment we don’t send a newsletter and don’t use a newsletter tool. Your choice only appears as one line (“Monthly newsletter: Yes, please” or “No”) in the email with your enquiry.

If we start a newsletter, only people who ticked the box will get it, and you can unsubscribe at any time. We will update this policy first. You can withdraw your consent at any time by emailing info@ceek.ch.

Legal basis under the GDPR: your consent (Art. 6(1)(a) GDPR).

06Cookies and browser storage

This website sets no cookies and uses no analytics, advertising or tracking tools. To work as intended, it keeps a few small entries in your browser’s storage. They stay on your device and are never sent to us or anyone else:

ceek:seen ceek:nav

Remember that the logo animation has already played at the start of your visit, and that you are moving to another page.Session storage · deleted when you close the tab

ceek:projects-view

Remembers whether you chose the grid or the list view on the Projects page.Local storage · stays until you delete it

ceek:bg ceek:bg-picker

Remember the background you picked, but only when a page is opened with ?bg= added, our internal tool for comparing backgrounds.Session storage · deleted when you close the tab

You can delete these entries at any time in your browser’s settings, under stored site data. For Turnstile on the form pages, Cloudflare’s information in the Turnstile Privacy Addendum applies.

07Links and videos

Our pages link to LinkedIn, Facebook and Instagram, to amox.gr and to our clients’ websites. These are plain links: only when you click one do you connect to that provider, and from then on its privacy policy applies. We don’t embed social media plugins. Our showreel is a video file on our own website; we don’t use YouTube, Vimeo or similar services for it.

08Data abroad

Cloudflare also processes data outside Switzerland and the EU:

• USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. The EU and Switzerland recognise an adequate level of data protection for companies certified this way. For transfers to other countries, Cloudflare uses the European Commission’s standard contractual clauses. Cloudflare’s network has data centres in many countries; your requests usually go through the nearest one.

Our email inbox at Zoho Mail is in a data centre in the EU.

09How long we keep data

• Your enquiry: as long as we need it to reply and for any work together. If no work comes of it, we delete it after [Placeholder: period, e.g. 12 months]. If it leads to a project, we keep business correspondence for as long as the law requires.
• Technical logs at Cloudflare: 7 days for the form, 31 days for the sending log, about 7 days for the email preview [Placeholder: delete once “Email preview” is off] and roughly 31 days for the samples of page requests.
• Entries in your browser: until you close the tab or delete them.

10Your rights

You have the right to:

• find out whether and what personal data we process about you, and get a copy;
• have incorrect data corrected;
• have your data deleted, unless we have to keep it;
• ask us to restrict processing;
• receive your data in a common electronic format, or have it passed to someone else;
• object to processing that is based on our legitimate interest;
• withdraw any consent, for example for the newsletter, at any time with effect for the future.

To do so, write to info@ceek.ch. We usually reply within 30 days. So that your data doesn’t end up with someone else, we may ask you to confirm who you are. We make no automated individual decisions and do no profiling.

11Complaints to a supervisory authority

If you think we are not handling your data properly, please tell us first. You can also complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the data protection authority where you live or work, or the Hellenic Data Protection Authority in Greece, which is responsible for AMOX.

12Security

We protect your data with appropriate technical and organisational measures. The whole website and the form run encrypted over HTTPS. Still, no one can guarantee complete security for data sent over the internet.

13Changes

We update this policy when our website or the services we use change. The version published here applies. Last updated: 30 October 2026.