1. Overview
Daniel Seyffardt (trading as Seyffardt Consulting / adoppio) takes the protection of your personal data seriously. This policy explains what personal data we process when you visit our website, for what purposes, and what rights you have.

2. Controller
The controller responsible for the processing of personal data described here is Daniel Seyffardt, at the address stated in our Legal Notice. For any data-protection matter, contact us at daniel@adoppio.com.

3. Legal basis
We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Whether and to what extent these laws apply depends on the individual case. Under the revFADP we generally do not require a specific justification to process personal data lawfully, in good faith and proportionately. Where the GDPR applies, we rely on: the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), for example when we respond to your enquiry; or our legitimate interests (Art. 6(1)(f) GDPR), in particular in the secure, stable and efficient operation of our website. We do not currently rely on consent-based processing (Art. 6(1)(a) GDPR), as we do not use analytics, marketing or newsletter tools at this time (see Section 7).

4. What personal data we process
Server log data. When you access our website, our hosting provider automatically processes technical data that your browser transmits, including your IP address, browser type and version, operating system, the referring URL, and the date and time of access. This data is technically necessary to deliver the website and to ensure its stability and security. IP addresses are deleted or anonymised after the end of use.

Contact data. If you contact us via the contact form, by email or by telephone, we process the data you provide (such as your name, organisation, email address and the content of your message) for the sole purpose of handling your enquiry and any resulting business relationship.

5. Hosting
Our website is operated on the platform of Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA. Squarespace processes the server log data described above on our behalf as our processor, and data may be transferred to and processed in the United States. Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework, extended to cover data transfers from Switzerland and the United Kingdom, which provides an adequate level of protection for such transfers. Further information: https://www.squarespace.com/privacy

6. Cookies
Our website uses cookies set by default by our platform (Squarespace), which are required for the basic functioning, security and delivery of the website (necessary cookies). We do not currently use analytics, marketing, or advertising cookies. You can manage cookie settings through your browser at any time; disabling necessary cookies may impair the functionality of the website.

7. Analytics, advertising and social media tools
We do not currently use web analytics (e.g. Google Analytics), advertising (e.g. Google Ads), or social media tracking tools (e.g. LinkedIn Insight Tag) on this website. Should this change, we will update this policy accordingly and, where required by law, obtain your consent via a cookie banner before activating such tools.

8. Disclosure to third parties
We disclose personal data to third parties only where permitted and appropriate, in particular to the service provider named above (acting as our processor), and to authorities, advisers or auditors where legally required or necessary. We do not sell your personal data.

9. Transfers abroad
Our hosting provider, Squarespace, processes data outside Switzerland and the EEA, in the United States. As described in Section 5, this transfer is covered by the EU-U.S. Data Privacy Framework and its Swiss and UK extensions. Should we engage further providers located in countries without an adequate level of data protection, we would rely on appropriate safeguards, in particular the European Commission's standard contractual clauses (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj).

10. Retention
We process and store personal data only for as long as necessary for the purposes described, or as required by applicable law, after which it is anonymised or deleted. Server log data is stored for a limited period only. Contact data is retained for as long as needed to handle your enquiry and any resulting relationship.

11. Your rights
Subject to applicable law, you have the right to request information about the personal data we hold about you (Art. 15 GDPR; Art. 25 revFADP), and to request its correction (Art. 16 GDPR; Art. 32 revFADP), deletion (Art. 17 GDPR), restriction (Art. 18 GDPR), or portability (Art. 20 GDPR; Art. 28 revFADP). Where processing is based on legitimate interests, you may object to it (Art. 21 GDPR). To exercise these rights, contact daniel@adoppio.com; we may request proof of identity. You also have the right to lodge a complaint with the competent supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch).

12. Links to other websites
Our website may link to sites we do not operate and which are not covered by this policy. We have no influence over their data processing, and the respective operator is responsible for their content and privacy practices.

13. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Please note that data transmission over the internet cannot be guaranteed to be fully secure.

14. Changes
We may amend this policy at any time to reflect changes in our practices or legal requirements. The version published on this website applies.