STUDIO 17 SA (P.IVA CHE-108.026.386), in the person of its legal representative pro tempore, with registered office in Via Nassa, 32 - 6900 Lugano (Ticino), in its capacity as Data Controller, hereby informs you that, in compliance with the new Federal Data Protection Act (DPA), which regulates and governs the protection of personal data and their free circulation, your personal data will be processed in compliance with the aforementioned Federal Law, in accordance with the principles of correctness, lawfulness, proportionality of interests and transparency as well as the protection of your privacy and your rights, for the purposes, in the manner and under the terms set out below.

This privacy policy applies exclusively to the online activities of this site and is valid for visitors/users of the site. It does not apply to information collected through channels other than this website www.bluelight.ch. The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it. Your personal data will be processed exclusively for purposes that are strictly connected, instrumental and necessary to the fulfilment of the obligations inherent in the relationship with our Company; in particular:
The processing of personal data is carried out by means of the operations of collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction.
The processing of personal data shall be carried out by the data controller, the person(s) in charge and the authorised persons (appointees) by means of computerised means, in compliance with all precautionary measures guaranteeing security and confidentiality. The data will not be subject to profiling.
The data will be stored at the data controller and at the data processors designated by the data controller. In any event, your personal data will be stored and processed within the borders of the Helvetica Confederation and will only be transferred outside these borders with your express consent.
In the event that you provide comments and/or personal data for the purpose of requesting information and/or specific services requested by you (e.g. requesting commercial information, subscribing to our portal, subscribing to our newsletter), such data shall be deemed to have been voluntarily provided by you at the time of the request for the provision of the service. By entering a comment or other information, the user expressly accepts this privacy policy.
The data received will be used exclusively for the provision of the service requested and only for the time necessary for the provision of the service.
The information that users of the site decide to make public through the services and tools made available to them, is provided by the user knowingly and voluntarily, exempting this site from any liability for any violation of the law. It is up to the user to verify that he/she has the permissions to enter personal data of third parties or content protected by national and international regulations.
The data collected by the site during its operation are used exclusively for the above-mentioned purposes and stored for the time strictly necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by a judicial authority and only in the cases provided for by law.

Like all websites, this site makes use of log files in which information collected automatically during user visits is stored. The information collected may be as follows:
- Internet Protocol (IP) address;
- browser type and parameters of the device used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- The visitor's source (referral) and exit web pages;
- possibly the number of clicks.
- Your e-mail address in case you decide to subscribe to our newsletter, for which we will still need your explicit
consent.

The aforementioned information is processed automatically and collected in an exclusively aggregate form for the purpose of verifying the correct operation of the site, for security reasons and for the legitimate interests of the owner as provided for by current legislation. For security purposes (anti-spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the relevant laws in force, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used to identify or profile the user, but only for the purpose of protecting the site and its users and the legitimate interests of the Data Controller in the processing of data.By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including the possible disclosure to third parties if necessary for the provision of a service. Providing data and therefore consenting to the collection and processing of data is optional, however, denying consent may make it impossible to provide certain services and the site navigation experience may be compromised.

Consent to the use of your data for marketing and/or advertising purposes (sending of e-mails and/or communications with advertising offers, newsletters) is optional and requires on your part, in addition to the provision of your personal data, also an explicit request via the opt-in function on this website.

The data controller, data processors and persons authorised to process data (appointees) will process personal data for the time necessary to fulfil the above-mentioned purposes and, in any case, for no longer than 10 years from the termination of the relationship where this is provided for or made necessary by the regulations in force.With regard to the provision of data by you for receiving commercial information, newsletters and periodical information, the data will be processed until you request to unsubscribe.

Your personal data, for the purpose of the execution of the contract or the services you have requested and for the above-mentioned purposes, may be disclosed:

• to all natural and legal persons (by way of example but not limited to legal, administrative and tax consultancy firms, auditing firms, couriers and forwarding agents, data processing centres, IT consultants, suppliers, etc.) in cases where communication is necessary for the purposes described above;
• to banking institutions for the management of receipts and payments;
• to factoring or debt collection companies;
• to our specially appointed collaborators and employees and within the scope of their duties;
• to SMTP providers for sending Newsletters.

By calling +4191 922 97 33 or by writing to This email address is being protected from spambots. You need JavaScript enabled to view it. you may at any time exercise your rights vis-à-vis the data controller (Data Controller) under the Federal Data Protection Act LPD, which we reproduce here for your convenience.

The data subject has the right to obtain confirmation of the existence and/or of the fact that personal data concerning him/her is or is not being processed, even if not yet registered, as well as their communication in intelligible form. The data subject has the right to be informed:

• the origin of the personal data (with particular regard to the case where the data are not collected from the data subject and, in the case of data transfer to a third country, the existence of adequate safeguards, the purposes and methods of processing;
• the logic applied in the event of processing carried out with the aid of electronic instruments;
• the identification details of the holder, the persons responsible and the designated representative;
• of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, as managers or authorised parties;
• the categories of personal data being processed;
• the data retention period or the criteria used to determine that period;
• the existence of automated decision-making processes, with particular regard to profiling, and the logic applied to them;
• the right to obtain a copy of the personal data undergoing processing;

The data subject also has the right to obtain:

• updating, rectification or, when interested, integration of the data;
• the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
• the portability of data to other parties, for which an explicit request must be made to the following address +4191 922 97 33, This email address is being protected from spambots. You need JavaScript enabled to view it.
• deletion of the data in our files (so-called right to be forgotten), by notification to +4191 922 97 33, This email address is being protected from spambots. You need JavaScript enabled to view it.
• to restrict data processing in accordance with the Federal Data Protection Act (DPA)

The data subject has the right to object, in whole or in part, to the processing of data:

• for legitimate reasons relating to his particular situation, even if the processing is relevant to the purpose of the collection;
• the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
• data processing including profiling on the basis of these provisions.

Where data processing is based on the consent of the data subject, the data subject has the right to revoke this consent at any time by making an explicit request to the following address +4191 922 97 33, This email address is being protected from spambots. You need JavaScript enabled to view it..
The data subject also has the right to lodge a complaint with the Supervisory Authority. The aforementioned rights may be exercised by making a request to the Data Controller or Data Processor by telephone, by email
to the above-mentioned addresses or by registered letter with acknowledgement of receipt.

Consent of the data subject

In requesting your express expression of consent to processing (which we will consider to have been given orally in the event that you do not return this undersigned letter), we will consider you, as of now, to be informed about the processing carried out by us, pursuant to and for the purposes of the Federal Data Protection Act.