Privacy policy

Last updated: October 2026

1. What this is about

This privacy policy explains which personal data we process on mokkaa.at, why, and what rights you have. We comply with the Swiss Federal Act on Data Protection (FADP) and – where applicable, for example for visitors from the EU – the General Data Protection Regulation (GDPR).

In short: this website uses no tracking or marketing cookies and no analytics tool. Fonts and images are hosted on our own web space. We only collect data when you contact us.

2. Controller

Mokkaa
Owner: Sarah Zemlyak
Badenerstrasse 580
8048 Zurich
Switzerland
Email: hi@mokkaa.at

3. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich (owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). The servers are located in Germany. When you visit the website, the server processes technically necessary data so the pages can be delivered and the website stays secure: IP address, date and time, page requested, browser and operating system, and the previously visited page (referrer).

This data is not combined with other data and is stored only briefly to ensure security and stability. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). A data processing agreement is in place with the host.

4. Contact form

If you write to us through the contact form, we process the details you enter (name, email, business or website, requested service, timing, message) to answer your inquiry and prepare an offer. The form is processed on our server in Germany and forwarded to us by email.

The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Only name and email are required.

We delete inquiries once they are dealt with and no retention obligation applies. If a contract is concluded, we keep business records as required by law (in Switzerland usually ten years).

5. Contact by email

Our email runs on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). If you email us, your message and contact details are stored there. Google may also process data in the USA; Google is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework. Retention is the same as for the contact form.

6. Fonts

The EB Garamond typeface is hosted locally on our web space. No connection to Google or other font providers is made when the website loads.

7. Cookies

This website does not set cookies for statistics, marketing or tracking, which is why there is no cookie banner. If we later use services that rely on cookies, we will ask for your consent first and update this policy.

8. Links to Instagram

We link to our Instagram profile. This is a plain link: data is only transferred to Meta Platforms Ireland Limited when you click it and visit Instagram, where Meta's privacy policy applies.

9. Services we use when working together

When you work with us or contact us, we use the following services depending on the situation. Only the data needed for the respective purpose is processed. The legal basis is usually the performance or preparation of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in efficient collaboration (Art. 6(1)(f) GDPR); for the newsletter, your consent (Art. 6(1)(a) GDPR).

Some of these providers also process data in the USA or other countries outside Switzerland and the EU. Transfers are based on the EU-U.S. or Swiss-U.S. Data Privacy Framework, adequacy decisions or standard contractual clauses. Details can be found in each provider's privacy policy.

10. Social media

We are present on Instagram, Facebook and Pinterest. When you visit or interact with our profiles, the platforms process your data under their own privacy policies (Meta Platforms Ireland Limited, Dublin; Pinterest Europe Limited, Dublin). For the statistics on our profiles (e.g. Instagram or Facebook Insights), we are jointly responsible with Meta; we only see aggregated, anonymous reports. No social media plugins are embedded on this website – only plain links.

11. Sharing data

We never sell data. We only share it where necessary for the purposes above – with the service providers named here, who work on our behalf – or where required by law.

12. Your rights

You have the right to access the data we hold about you, to have it corrected, deleted or its processing restricted, to receive or transfer your data, and to object to processing or withdraw consent. Simply write to hi@mokkaa.at.

You may also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority in your country of residence.

13. Security

The website is delivered exclusively over encrypted HTTPS. We protect your data with appropriate technical and organisational measures.

14. Changes

We update this policy when the website or the services we use change. The version published here applies.