pics4job.com

Privacy Policy

In accordance with the Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR).
Last updated: June 1, 2026

1. Controller

foto-huwi.ch Huwiler, Michael Huwiler
Signalstrasse 17, 9400 Rorschach, Switzerland
Email: support@pics4job.com
Full details in the Imprint.

2. What data we process

  • Account/contact data: email address, first name, optionally a password hash.
  • Order data: persona details (e.g. gender, age range, hair, glasses), chosen package, chosen backgrounds/outfits, billing details.
  • Uploaded selfies: the images of yourself that you upload (particularly sensitive biometric/image data).
  • Generated portraits: the AI-generated result images.
  • Payment data: handled by our payment provider (see section 5); we do not store card data.
  • Technical data: server logs, IP address, timestamps, browser type; partly only in hashed form to prevent abuse.

3. Purposes & legal bases

We process this data for the following purposes:

  • Performance of the contract, creation and delivery of the portraits (Art. 6(1)(b) GDPR).
  • Invoicing and compliance with statutory retention obligations (Art. 6(1)(c) GDPR).
  • Abuse prevention and security of our service (legitimate interest, Art. 6(1)(f) GDPR).
  • Analytics/reach measurement only with your consent (Art. 6(1)(a) GDPR).

The processing of the uploaded selfies (biometric image data) is based on your explicit consent and/or on the performance of the contract, and exclusively for the purpose of portrait generation.

4. AI processing by Google (Gemini API)

To create the portraits, we transmit your uploaded selfies and a technical image description (prompt) to Google’s paid (subscribed) Gemini API (Google Ireland Ltd. / Google LLC). Google processes this data as a processor exclusively to generate the requested images.

No use for training: Under the terms of the paid Gemini API, Google does not use the submitted content (prompts, images, files) or the generated results to train or improve its models and products. The data is only logged for a limited time to prevent abuse and comply with legal requirements. With paid use, there is no systematic manual review for training purposes. Source: ai.google.dev/gemini-api/terms.

As Google is a US company, processing may also take place outside Switzerland/the EU. The transfer is safeguarded by appropriate guarantees (EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework).

5. Other processors

  • Payrexx AG (Switzerland): processing of the online payment for customers in Switzerland/Liechtenstein (CHF). Payment data is processed directly at Payrexx.
  • Armitage Labs OÜ (“Creem”, Estonia): payment processing as “Merchant of Record” for orders outside Switzerland/Liechtenstein (EUR), including invoicing and VAT handling. Payment data is processed directly at Creem.
  • cyon GmbH (Switzerland): hosting of the website and database; a data processing agreement is in place.
  • Email delivery: sending of confirmations, invoices and notifications via our mail server.

6. Storage & deletion of your images

  • Uploaded selfies: stored encrypted (AES-256) and automatically deleted after 7 days. Abandoned orders (not completed) are removed entirely, including uploads, after just 24 hours.
  • Generated portraits: available to you for download for 30 days and then automatically deleted.
  • Account/contact data: until your account is deleted or the purpose ceases to apply.
  • Invoicing and accounting data: 10 years in accordance with the statutory retention obligation (Art. 958f Swiss Code of Obligations).
  • Security/server logs: briefly for abuse prevention, then deleted.

On request, we will also delete your uploaded selfies and generated images earlier, a short email to support@pics4job.com is sufficient.

7. Cookies & web analytics

We use technically necessary cookies (session, language and currency selection as well as consent status). These are required for operation and do not need consent.

Google Analytics 4: With your explicit consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), to analyse the use of our website anonymously and improve it. In doing so, cookies or similar identifiers are set and usage data (e.g. pages viewed, approximate location based on a truncated IP address, device/browser) is processed. GA4 truncates IP addresses and does not store any full IP address. The legal basis is your consent (Art. 6(1)(a) GDPR). We use Google Consent Mode v2, so that no analytics cookies are set and no measurement data is sent before you give your consent.

A transfer to the USA (Google LLC) is possible; it is safeguarded by EU Standard Contractual Clauses and the EU-US Data Privacy Framework. You can withdraw or adjust your consent at any time with effect for the future via the "Cookie settings" link at the bottom of the page.

8. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent given at any time with effect for the future. To do so, contact support@pics4job.com.

In addition, you have the right to lodge a complaint with a supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the competent data protection authority of your country.

9. Data security

Transmission is encrypted via HTTPS/TLS. Uploaded selfies are stored encrypted (AES-256). We take appropriate technical and organizational measures to protect your data.

10. Changes

We reserve the right to amend this Privacy Policy to adapt it to changed legal situations or services. The version published on this page applies.