Privacy policy

2. Data processed when visiting the website

Server and security data

When the website is accessed, technically necessary access data may be processed, such as IP address, date and time, requested URL, referrer, browser type, operating system, and server logs. This is used to provide and secure the website. Hosted by Infomaniak Network SA (Geneva, Switzerland).

Audience measurement with Umami (cookie-free)

We use Umami Analytics by Umami Software, Inc. for anonymous audience measurement. Umami works cookie-free and does not collect personal data or build user profiles. Anonymous statistics are recorded such as pages visited, time on page, browser language, country (via IP lookup, IP is not stored), and approximate device type. No re-identification of individual visitors takes place. Provider: Umami Software, Inc. (USA). More at umami.is/privacy.

3. Cookies and similar technologies

Technically necessary cookie (cookie notice)

We use one technically necessary cookie named sarenga_cookie_notice so the cookie notice does not reappear on every page view. Storage up to 180 days.

Cloudflare Turnstile (bot protection)

On the contact form and admin login we use Cloudflare Turnstile as a privacy-friendly alternative to reCAPTCHA. Turnstile sets a technically necessary first-party cookie for session and bot detection. No tracking cookies or personal profiles are created. Provider: Cloudflare, Inc. (USA). More at cloudflare.com/privacypolicy.

No tracking or advertising cookies

No advertising, marketing, or profiling cookies are used. The cookie info can be reopened any time via the footer.

4. Contact form and direct communication

Contact form on this website

Entries in the contact form (name, email, phone, topic, message) are submitted by email to our mailbox info@bengalensarenga.com. Delivery is handled by our hosting provider's mail server (Infomaniak, Switzerland). Cloudflare Turnstile checks the request for bot activity before submission.

Phone or WhatsApp inquiries

For phone calls or WhatsApp inquiries, we process the information you provide to handle your request. WhatsApp opens only after your active click on a corresponding link; in that case, the privacy terms of WhatsApp / Meta Platforms apply.

Retention

Emails and inquiries are retained only as long as necessary to handle your request or to comply with statutory obligations.

5. Security logging in the admin area

The admin area of this website is for the owner only. To protect against abusive login attempts, we log login attempts in an internal database (MariaDB at Infomaniak) including IP address, username, browser identifier (user-agent), timestamp and success/failure. This data does not concern regular website visitors and is only created when an admin login is attempted. Retention up to 30 days for the purpose of detecting and mitigating brute-force attacks.

6. External links and external content

• Google Maps is not embedded — it is provided as an external link only and opens after an active click.
• WhatsApp opens only after an active click on a corresponding link.
• External links to bengal-data.com, pawpeds.com, calingo.ch, or other third-party sites are opened only after your active selection.
• Web fonts are loaded locally from our own server — no connection to Google Fonts or other third-party providers.

7. Purposes and, where applicable, legal bases

• Secure delivery and stability of the website
• Handling inquiries before a contract or for general communication
• Protection against abusive login attempts in the admin area
• Anonymous audience measurement with Umami (legitimate interest, cookie-free, no profiles)
• Storing the technically necessary cookie notice state
• Where the GDPR applies, processing is generally based on legitimate interests (Art. 6(1)(f) GDPR), pre-contractual communication (Art. 6(1)(b) GDPR), or your active action when opening external services.

8. Recipients, retention, and international access

Categories of recipients

• Infomaniak Network SA (Geneva, Switzerland) – hosting, MariaDB database, email delivery (SMTP)
• Cloudflare, Inc. (USA) – bot protection on contact form & login (Turnstile)
• Umami Software, Inc. (USA) – cookie-free audience measurement
• Third parties you access yourself through an active click, in particular Google Maps or WhatsApp / Meta

Retention

Personal data is retained only as long as necessary for the relevant purpose or as required by law. Login logs up to 30 days. Contact form inquiries are deleted after the communication is concluded, unless statutory obligations require longer retention.

International transfers

When using Cloudflare, Umami, or external providers (e.g. WhatsApp), processing may also take place outside Switzerland or the EEA (in particular the USA). The respective providers apply protective mechanisms such as EU Standard Contractual Clauses. In addition, the privacy terms of the respective third-party provider apply.

9. Your rights

• Access to personal data processed about you
• Correction of inaccurate data
• Deletion or restriction where no retention duties prevent it
• Data portability (where the GDPR applies)
• Objection to certain processing where applicable
• Complaint to a competent data protection authority

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner: edoeb.admin.ch. If the GDPR also applies to you, you may additionally contact a competent supervisory authority in the EEA.