Privacy Notice
Datenschutzerklärung
Last updated: 2026-07-02
LOG-LAB is a film photography lab. This notice explains what personal data we collect when you order our services, use our customer portal, or visit this website, why we process it, how long we keep it, and the rights you have. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / revDSG). Where the EU General Data Protection Regulation (GDPR) applies to you, the corresponding rights and legal bases also apply.
1. Who is responsible (controller)
LOG-LAB Hügli (sole proprietorship), Leon Hügli
Jurastrasse 1, CH-3013 Bern, Switzerland
Email: info@log-lab.dev ·
Phone: +41 77 520 57 63
UID: CHE-312.476.405
For any privacy request, contact us at the address above (subject line "Datenschutz" / "Privacy" helps us route it).
2. What data we collect, and why
We only collect what we need to develop and scan your film, deliver your photos, invoice you, and answer your questions.
a) When you place an order (send-in or in-store form)
- Your name, email address, and optionally phone number and Instagram handle.
- Your postal / shipping address, where you ask us to return film or photos by mail.
- Your order details: film rolls, formats, development and scanning options, turnaround, and any notes you add.
- The fact that you accepted our Terms (AGB), including the date/time and version accepted.
Purpose: to perform the contract — receive, develop, scan, deliver, and invoice your order.
b) Technical data when you submit a form
Your IP address is recorded with the submission. Purpose: to prevent abuse and spam of our intake system and to keep an audit trail of orders.
c) When you use the customer portal (to download your photos)
Your email address and a securely hashed password (we never store your password in readable form), plus the time of your last login and basic access logs (how often a gallery was viewed/downloaded). Purpose: to give you secure access to your own photos and to operate the portal.
d) Your photographs
The scans of your film are personal data and may show identifiable people. We store them so you can download them and, where agreed, to fulfil your order. We treat them as confidential. See retention in section 5.
e) If you submit a photo to our Community gallery (entirely optional)
Only if you actively choose to: the selected image, an optional caption, and the Instagram handle you provide for attribution. Approved submissions are shown publicly on this website. This is voluntary and based on your consent, which you can withdraw at any time (section 6).
f) When you contact us
The contact details and content of your message (email, phone), to answer you.
g) Website analytics (Google Analytics 4) — only with your consent
With your consent, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use this website — for example which pages are viewed, approximate region, and device type — so we can improve it. Analytics cookies and any data collection start only after you click "Accept" in our cookie banner. If you reject or ignore the banner, no analytics cookies are set and no analytics data is collected. We use IP anonymisation and do not use Google Analytics for advertising or cross-site profiling. You can withdraw your consent at any time via "cookie settings" in the footer. Legal basis: your consent. See section 4 (cookies) and section 8 (where analytics data is processed).
Apart from the analytics described in (g), we do not run advertising trackers or profiling tools on this website, and we do not sell your data.
3. Legal bases
Under the FADP we process data where it is necessary to perform our contract with you, to comply with legal obligations (e.g. accounting), or based on our legitimate interest in operating and securing our service — and, for optional things like the Community gallery and website analytics, on your consent. Where the GDPR applies, the corresponding bases are Art. 6(1)(b) (contract), (c) (legal obligation), (f) (legitimate interest) and (a) (consent).
4. Cookies and similar technologies
We use two kinds of cookies:
- Strictly necessary cookies — a session cookie that keeps you logged into the portal and protects our forms, plus a small cookie that remembers your consent choice. These are always active and require no consent.
- Analytics cookies (optional) — set by Google Analytics 4 only after you click "Accept" in our cookie banner, to measure how the site is used. If you reject or ignore the banner, these are never set.
We set no advertising or cross-site tracking cookies. You can change or withdraw your choice at any time via "cookie settings" in the footer.
5. How long we keep your data
| Data | Retention |
|---|---|
| Order, invoicing and accounting data (name, contact, order, invoices) | 10 years, as required by Swiss accounting law |
| Digital scans available for download in the portal | 30 days after delivery, then automatically and permanently deleted from our storage |
| Physical negatives / film | 3 months after completion of the order, then destroyed (unless otherwise agreed in writing) |
| Customer account in the portal | for the duration of the customer relationship; on deletion the account is anonymised/removed |
| Community submissions shown publicly | until you ask us to remove them, or you withdraw consent |
| Website analytics (if you consent) | aggregated usage statistics retained by Google Analytics for up to 14 months |
When you ask us to delete your personal data, we comply except where the law requires us to keep certain records (e.g. invoices for the 10-year period). In that case we restrict the data instead of deleting it.
6. Your rights
Under the FADP (and the GDPR where it applies), you have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- request deletion of your data (subject to legal retention),
- receive your data in a portable form / have it handed out,
- object to processing based on legitimate interest, and
- withdraw consent at any time (e.g. remove a Community submission, or turn off analytics via "cookie settings"), without affecting prior processing.
To exercise any of these, email us at info@log-lab.dev. We will respond as quickly as possible and within the legally required timeframe. You can identify yourself using the email address associated with your orders.
If you believe we process your data unlawfully, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern (edoeb.admin.ch). If you are in the EU/EEA, you may complain to your local supervisory authority.
7. Who we share data with (recipients / processors)
We do not sell your data and disclose it only as needed to provide our service:
- Email provider — to send you order confirmations, delivery notifications and password emails.
- Shipping / postal service — only when you ask us to return film or photos by mail (name and address are passed for that delivery).
- IT / hosting and storage used to operate this website, the portal, and the file delivery system.
- Google (Google Ireland Limited / Google LLC) — website analytics (Google Analytics 4), only where you have given consent via the cookie banner. See section 8 for where this data is processed.
Where a recipient processes data on our behalf, they may only use it to provide their service to us, under a corresponding agreement. We do not disclose your data to authorities except where legally required (see also AGB §7.7).
8. Where your data is stored
Our systems and the storage holding your scans are operated on infrastructure located in Switzerland. We do not transfer your personal data abroad as part of our normal operations.
The one exception is our optional website analytics: if you consent to analytics, Google may process the collected usage data on servers in the EU and the United States. For transfers to the US, Google relies on the EU/Swiss Standard Contractual Clauses (and the EU-U.S. / Swiss-U.S. Data Privacy Framework, where applicable) as a safeguard. If you do not consent, no analytics data is collected and no such transfer takes place.
9. How we protect your data
We use HTTPS/TLS encryption in transit, store passwords only in hashed form, restrict portal access so each customer can see only their own photos, expire download links and delete delivered files automatically after 30 days, and operate our back-office systems in a separate, access-controlled internal environment.
10. Children
Our services are directed at adults. We do not knowingly collect data from children. If a minor's photos are submitted, they are handled under the same confidentiality and retention rules and the consent of a parent/guardian is assumed for the order.
11. Changes to this notice
We may update this notice as our service or the law changes. The current version is always published here with its "Last updated" date.