Privacy Policy

ICC - Insubriae Contract Couture, Via dei Gorini 2, 6900 Lugano, Svizzera, operates this website; the Design Business Courses section is run together with NAD - Nuova Accademia del Design (Hdemygroup). For any question about your data, write to info@icc-design.ch.

Our printed materials and social profiles carry personalised QR codes and short links (addresses of the form /r/…). When you open one, our server records that the code was used, so that we can see which invitations work. For each visit we store: the date and time, the device type, operating system and browser family, the approximate location derived from your IP address (country, region and city, as estimated by our hosting provider; this is not precise and is never your exact position), whether the link was scanned as a QR code or opened as a plain link, the address of the page that referred you (if your browser sends one), and a one-way hash of your IP address and browser signature that lets us count unique visitors. We do not store your IP address itself, and the hash cannot be reversed into it. You are then forwarded to the page the code points to.

We use only the cookies listed below, all set for this site alone. Nothing is shared with advertising networks. You can accept or decline them in the banner shown on your first visit; declining removes the reference cookie, keeps analytics switched off, and we will not set either again while your choice is remembered.

When you arrive through a QR code, the same reference code may also appear briefly in the page address (?ref=…). That is not a cookie and stores nothing on your device.

The “Enquire” and “Contact” buttons open a contact form on this site. You enter your name, your email address, an optional phone number and your message. Before anything is sent, we email a 6-digit code to the address you gave and ask you to enter it - this confirms the address is yours and keeps automated spam out. Your message is then emailed to the recipient you chose (our office, a member of the ICC team, NAD or one of the course instructors); messages to anyone other than the office are copied to our office so that we can follow up.

If you arrived through one of our QR codes, our server attaches the invitation’s reference (which partner and channel) to the message. It identifies the invitation, never you. If you came here directly, the message simply says so.

We keep a copy of each sent message (your details, the text and the invitation reference) for 24 months so that our office can answer follow-up questions. A form that is not confirmed with the code is deleted after 24 hours. To limit abuse, each record also carries a hashed, non-reversible fingerprint of the connection it came from.

The people and organisations who share our QR codes (our partners) are managed by our office in an internal dashboard that holds their name, contact details and the codes assigned to them. Changes to these records - creating, editing, archiving or removing a partner or a code - are written to an activity log that shows who made the change and when. The log is visible only to administrators, keeps the partner’s name as it was at the time of the change, and entries are deleted automatically after 24 months. A partner who asks to be removed is anonymised in the dashboard right away; the historical log entries then expire on the same 24-month schedule.

The same log also records failed attempts to sign in to the dashboard: the e-mail address typed into the sign-in form and the reason the attempt was rejected (for example a wrong password or a wrong verification code). Access is by invitation only, so these entries normally concern our own team. They are used solely to detect misuse and are deleted on the same 24-month schedule.

The website runs on Vercel (functions in Frankfurt, Germany) and stores QR statistics in a Supabase database hosted in the European Union. Both act as processors on our behalf. Fonts are served from this site, not from third-party font services. Emails from the contact form, both the verification code and the message forwarded to our office, are delivered by Resend, a transactional email service, which processes the sender’s name, email address, phone number and message for that purpose.

We use Google Analytics 4 to understand how many people visit this site, which pages they read and how they found us (for example through a search engine or one of our QR codes). It runs only after you accept cookies in the banner; if you decline, or before you choose, nothing is loaded and nothing is sent to Google. Advertising features, remarketing and Google Signals are switched off, so the data is not used to build advertising profiles.

Google Analytics does not log or store your IP address and truncates it before any location is estimated. What it keeps is a random identifier in the _ga cookie, the pages you open, rough device and browser details and the country or region you connect from. Reports are retained for 14 months. Google (Google Ireland Ltd. for visitors in Europe) processes this data on our behalf under its data processing terms and may transfer it to servers in the United States under the EU-US and Swiss-US Data Privacy Frameworks. You can also block Google Analytics in any browser with the Google Analytics opt-out add-on.

Under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR), you may ask us what data we hold about you, request its correction or deletion, and object to its processing. As the QR statistics contain no directly identifying data, in most cases there is simply nothing to look up - but do write to us at info@icc-design.ch and we will help. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

We will update this page whenever the way the site handles data changes. The date at the top tells you when.