KIURO / Information
Privacy notice
Information about this website, your data and your choices.
Last updated: 19 October 2026
1. Controller
Kiuro is the service brand used on this website by the following sole proprietorship:
Juan Manuel Ovalles CastroZürcherstrasse 149
8102 Oberengstringen
Switzerland
hello@kiuro.ch
- Legal form
- Sole proprietorship (Einzelunternehmen)
- UID
- CHE-271.517.430
- Commercial register
- Canton of Zurich, CH-020.1.104.139-2
Official Swiss UID register entry
This notice concerns kiuro.ch and explains the personal data processing on this website.
2. Delivering and protecting the website
When you request a page, hosting and network providers receive technical information such as your IP address, requested URL, time, browser and operating system. This is used for delivery, security and troubleshooting. The website is deployed through Hostinger. The hosting dashboard lists the server in Frankfurt, Germany, and backups in France. The hosting provider and its technical suppliers may process the data needed for these purposes.
The website application does not maintain a separate visitor log. Technical logs at the hosting and network level follow the service’s retention and security settings and support operation, security and troubleshooting. See the Hostinger privacy policy for further provider information. Fonts and project images are served by this website. There are no embedded third-party videos, maps or social feeds.
3. Contact form and email
When you submit the contact form, we process your name, email address and message, plus any company and phone details you choose to provide. The language and originating page are included to help us understand your enquiry. We use these details to reply, prepare proposals and, where relevant, take pre-contractual steps or perform a contract. Submitting the form does not subscribe you to marketing. You can also contact us directly by email.
The server validates the details and sends your message through Resend (Plus Five Five, Inc., United States) to the Google email inbox used for our business. Resend and the email providers involved process message content and technical delivery data. Processing may take place in the United States. See the Resend privacy policy and Resend data processing terms.
To prevent abuse, we use a hidden check field, server-side input validation and temporary IP identifiers hashed with a random server salt for a sending limit lasting no more than one hour. Random request identifiers and content checksums remain in server memory for up to 24 hours to prevent duplicate messages. The website server does not store messages in its own database. Email and delivery logs follow the providers’ service settings. We keep enquiries as long as needed for communication, a business relationship or applicable retention obligations. Please do not send sensitive information without arranging an appropriate channel.
4. Optional Google Analytics
Google Analytics 4 is loaded only after you explicitly allow analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google LLC in the United States.
It measures page visits and selected interactions such as project views, successfully submitted contact forms and email contact-link clicks, alongside browser, device and approximate location information. Your IP address is processed as part of the technical transmission. Page and referrer addresses sent to Analytics omit query parameters and fragments. Kiuro does not send names, email addresses or message contents to Analytics.
Advertising storage, advertising personalisation and Google signals are disabled. We use analytics to improve content and usability. The current property settings retain event data for 2 months and user data for 14 months; the reset-on-new-activity option is off. These controls do not determine the retention of most aggregated standard reports. You can withdraw your permission at any time for future processing. Measurement then stops and accessible Analytics cookies from this website are removed. This does not retroactively delete data already transferred to Google.
5. Storage on your device
Your analytics choice is saved in local browser storage for 180 days. Analytics cookies are also configured to expire after 180 days. Your colour preference stays in local storage until changed or cleared. The motion preference is stored for the browser session. See the detailed inventory under Cookies & preferences.
6. Recipients and international processing
Data may be disclosed to technical hosting, network, email and analytics providers as needed for the purposes described above. Google Analytics and Google Mail involve Ireland and the United States in particular; email delivery through Resend involves the United States. The relevant provider’s applicable privacy and data processing terms govern its service.
This website’s hosting and backup locations are Germany and France. Hostinger’s privacy policy also identifies the United Kingdom, the Netherlands, Lithuania and Cyprus as possible locations for service processing. Hostinger’s data processing terms identify its technical subprocessors and provide for Standard Contractual Clauses or another applicable transfer basis for covered onward transfers outside the EEA. Google’s data processing terms provide for Standard Contractual Clauses or a recognised alternative transfer solution for covered transfers from Switzerland to countries without adequate protection. Resend’s data processing terms provide for adapted EU Standard Contractual Clauses for transfers from Switzerland. You can request information about the applicable safeguards from us. Hostinger data processing terms · Google data processing terms.
7. Your rights
You can request access to your personal data and, where applicable, its correction or deletion. Other rights may apply, including release or transfer of certain data. Contact us using the postal or email address above. We may require proportionate proof of identity.
You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies to a particular situation, its corresponding rights remain unaffected.
8. Updates
We update this notice when the website or its services change. The date above identifies the current version.