Data Protection & Privacy Policy

We, LFG Labs (“Movila/we”), welcome your use of our website and web app (“Our Services”). In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data when using our services. Personal data refers to any information that relates to an identified or identifiable natural person. This includes, in particular, your name, email address, and any photos you upload.

In addition to the General Data Protection Regulation (GDPR), we also comply with the Swiss Federal Act on Data Protection (nFADP), as applicable.

1. Provider

The provider and responsible party for data processing (“controller” under the GDPR and “responsible party” under the Swiss nFADP) is:

2. Data Processing to Enable Use

Whenever you access the content of our services, connection data is transmitted to our web server. This connection data includes:

• The IP address of the user
• The date and time of the request
• The referring URL
• Device numbers such as UDID and comparable device numbers, device information (e.g., device type)
• Browser type / browser version

This connection data is not used to infer the identity of the user or merged with data from other sources. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Photo Data Processing

When you use our heritage film creation service, we process your uploaded photos as follows:

3.1. Photo Upload and Storage

Photos you upload are:

• Encrypted during upload and storage using industry-standard encryption.
• Processed only for the purpose of creating your heritage film.
• Deleted from our servers within 30 days of delivering your completed film.

Purpose: Creating your personalized heritage film.
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract fulfillment).

3.2. Contact and Orders

For placing orders and contacting us, we collect:

• Email address: for communication and delivery.
• Name: for personalized communication.
• Payment information: processed securely through our payment providers.

4. Data Processing for Service Optimization

Our services use cookies to ensure functionality and analyze user behavior. Some cookies are necessary for website functionality (e.g., session cookies), while others are used for analysis. You can manage or disable cookies via your browser settings, but this may limit the website’s functionality.

The storage of necessary and functional cookies is based on Art. 6 para. 1 lit. f GDPR, while all others are based on your consent under Art. 6 para. 1 lit. a GDPR.

5. Data Transfer

We only transfer your data when it is necessary for the provision of our services, you have consented, a legal obligation exists, or another legal basis applies. Your photos are never shared with third parties except as strictly necessary to process your order.

5.1. Data Transfer to Non-EU Countries

Your data may also be transferred to recipients outside Switzerland or the EU. Where no adequacy decision exists, we rely primarily on Standard Contractual Clauses (SCCs). In limited cases, data may be transferred based on your explicit consent or other derogations under Art. 49 GDPR.

6. Storage Duration

We store your data only as long as necessary to fulfill the purposes for which it was processed:

• Photos: Deleted within 30 days of film delivery.
• Account data: Retained until account deletion or legal retention periods expire.
• Order records: Retained as required by applicable tax and commercial laws.

6.1. Security Measures

We protect your data with technical and organizational measures against unauthorized access and loss, including encryption of photos during upload and storage.

7. Your Rights

You have the right to access, correct, delete, restrict processing, and object to the processing of your personal data. You also have the right to data portability and to lodge a complaint with a supervisory authority.

If you believe your data has been unlawfully processed, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a relevant EU supervisory authority if you reside in the EU.

8. Right to Object

You can object to the processing of your data at any time, particularly for processing based on legitimate interests (Art. 6 para. 1 lit. f GDPR).

9. Changes to the Privacy Policy

We will update this privacy policy as necessary. The current version is always available on our website. We will notify you of significant changes.