PRIVACY / UPDATED 03 NOVEMBER 2026
A clear overview of what this website processes and the choices you have.
We are marco berto media gmbh, Münzerstrasse 6, 8472 Seuzach, Switzerland. We operate marcoberto.ch and are responsible for the processing described here. For privacy questions or to exercise your rights, use our contact form — Privacy request or write to our postal address.
This notice explains how we process personal data when you browse this website, contact us or activate external media. Swiss data protection law applies. Where the EU GDPR applies, we rely on consent for optional analytics and media (Art. 6(1)(a)), steps requested before a contract or performance of a contract (Art. 6(1)(b)), legitimate interests in secure operation and responding to other enquiries (Art. 6(1)(f)), and legal obligations where relevant (Art. 6(1)(c)). We do not sell your personal data or make automated decisions with legal or similarly significant effects.
Our hosting and email service provider is green.ch AG, Switzerland. When you visit, technical connection data may include your IP address, requested address, access time, browser, operating system, referrer and response status. These data enable delivery, fault diagnosis and protection against abuse. Hosting logs and backups are subject to Green’s service-specific retention periods and any applicable legal obligations; they are not used by us for advertising. See Green’s privacy notice. We use access controls, encrypted connections and limited technical records. No internet service can guarantee absolute security.
The form requires your name, email address, enquiry category and message. Booking enquiries additionally require the date, venue, city, country and a fee offer with currency. Event name, planned line-up, capacity, preferred set time and set duration are optional. A track/link is optional for remix enquiries. Providing these details is voluntary, but we need the required fields to reply. We send your message through Green to our Bluewin mailbox (Swisscom, Switzerland). No copy of the message is stored in the website database; copies remain in the relevant mailboxes. Correspondence is retained for as long as necessary to handle the enquiry, any resulting business relationship, legal obligations or the establishment, exercise or defence of claims. Email traffic can cross borders even between Swiss correspondents; Swisscom’s privacy information describes its processing and safeguards. Please avoid sending sensitive information that is not needed. We do not add you to a mailing list.
Your language choice is stored locally in your browser so the website can remember it. This preference is separate from analytics consent and is not used for advertising or tracking.
The contact form and private administration use a first-party session cookie (mb_site), with HttpOnly and SameSite protection; production also requires Secure/HTTPS. The cookie lasts for the browser session. Your analytics choice is saved in local storage for up to 180 days. Security limits use a keyed hash derived from the IP address, with windows of 15 minutes for login attempts and one hour for contact requests. Expired limit records are cleared on subsequent checks. Random, hashed submission references prevent duplicate emails and are cleared after 24 hours on subsequent submissions. They contain no message text. These functions are necessary for your requested service and the protection of the website.
Google Analytics is loaded only after you select Allow. Declining leaves the website and contact form available. Provider: Google Ireland Limited, Ireland, with processing by Google LLC and other Google entities, including in the United States. Analytics processes online identifiers, browser/device information, approximate location, validated campaign tags, page visits and selected actions such as music links, player activation and successful business enquiries. Names, email addresses and message contents from the form are not sent to Analytics. Privacy requests are excluded from enquiry conversion events. Google Signals and personalised advertising are disabled. We do not use advertising consent or remarketing on this website. Google’s account-level support, recommendations and aggregate modelling sharing settings remain enabled; sharing for Google products and services is disabled.
Analytics may set _ga and _ga_* cookies with a configured lifetime of up to two years, subject to browser limits. Our currently reviewed property settings retain event-level data for two months and user-level data for 14 months; user retention can restart on new activity. Retention controls do not apply to every aggregated report. You can change your choice at any time using in the footer. Withdrawal stops future measurement, removes accessible Analytics cookies for this site and reloads the page if necessary. It does not reverse processing already carried out. See Google’s privacy notice and retention information.
The SoundCloud, Mixcloud and Apple Podcasts players are blocked until you activate the selected provider. Only one player runs at a time, without autoplay. Loading a player consents to connecting to that provider and its infrastructure. Providers receive connection and usage data, including your IP address and referring website, may use cookies and may associate listening with a logged-in account. Providers include SoundCloud Global Limited & Co. KG (Germany), Mixcloud Limited (United Kingdom) and Apple (including Apple Inc., United States; the responsible Apple entity depends on your region). Processing can also take place in Ireland, the United States and other countries used by these providers. Their notices explain retention and further processing: SoundCloud, Mixcloud and Apple. Remove Player or switching tabs removes the active player and stops its further activity on this page; it cannot undo data already sent. YouTube currently opens as an external playlist link because embedded playback is unavailable. If YouTube embedding is enabled after verification, it will also require separate activation and use Google’s privacy-enhanced player; Google Ireland Limited and Google LLC (United States) process connection/playback data under Google’s privacy notice. No external player, map or social tracking widget loads on page view. External links to platforms and Google Maps connect to the destination only when followed. To keep the mix selection current, our server reads public SoundCloud, Mixcloud and YouTube feeds and caches catalogue metadata for up to 15 minutes; visitor IP addresses, cookies and browser headers are not forwarded to these feeds. Provider publication and indexing delays can still affect when new mixes appear.
Only people who need the data to handle enquiries or operate the site, and the service providers described above, receive access for these purposes. We may disclose data where required by law or necessary to establish or defend legal claims. Optional Google, SoundCloud, Mixcloud and Apple services can involve transfers to Ireland, Germany, the United Kingdom, the United States and other countries where their service providers operate. Applicable safeguards include recognised adequacy decisions, the Swiss–US or EU–US Data Privacy Framework for certified recipients, or standard contractual clauses with necessary supplementary safeguards. Google describes its mechanisms here. Activating a service does not remove our obligations regarding international transfers.
Subject to applicable law, you can request information and access, correction, deletion, restriction, data portability or transfer, object to processing and withdraw consent for future processing. Legal retention duties and other statutory exceptions may limit these rights. We may request proportionate verification of your identity. Use the privacy contact above. You may contact the Swiss Federal Data Protection and Information Commissioner or, where the GDPR applies, your competent supervisory authority. We update this notice when our services or legal requirements change.