privacy policy

1. controller

the controller responsible for the processing described in this policy is:

netz & nagel klg
seestrasse 62
8806 bäch
switzerland
email: kontakt@netzundnagel.ch

the relevant newspaper is a product of netz & nagel klg. additional company information is available in the imprint.

2. website delivery and technical request data

this website is delivered through cloudflare pages and cloudflare pages functions. cloudflare, inc., 101 townsend street, san francisco, california 94107, united states, acts as our processor.

when the website or a file such as the whitepaper is requested, cloudflare processes technical connection and request data needed to deliver and protect the service. this may include the ip address, requested url or file, request time, routing information, referrer, browser, device and operating-system information, and security or diagnostic data.

this processing is used to deliver the website, maintain availability and security, and prevent abuse. we do not create our own visitor profiles from these request data, do not operate a separate application-level access log, and do not write the visitor’s ip address to the waitlist database.

3. early-access waitlist

when the early-access form is submitted, we store the normalised email address, the registration time, an internal database id and the version of the consent notice in a non-public cloudflare d1 database. the hidden anti-bot field is not stored. duplicate submissions of the same address do not create additional waitlist entries.

we use this information solely to send one launch and early-access email for the relevant. this is not a recurring newsletter. no confirmation email is sent, and we do not verify that the person submitting the form controls the entered address.

the processing is based on the consent given when the form is submitted. consent can be withdrawn before the launch email is sent by contacting kontakt@netzundnagel.ch. withdrawal does not affect processing that took place before the withdrawal.

4. delivery of the one-time email

the form does not transmit the email address to postmark. only when the single launch email is sent do we transmit the recipient address, message content and delivery-related metadata to postmark, a service operated by ac pm llc, 1 north dearborn street, 5th floor, chicago, illinois 60602, united states.

the message is sent through a broadcast message stream with postmark-managed unsubscribe handling. postmark adds an unsubscribe option and suppression handling. open and link tracking are disabled for this mailing. postmark still processes delivery, bounce, spam-complaint and unsubscribe events required to operate the email service.

5. processors, locations and international transfers

cloudflare processes website-delivery data and stores the active waitlist on our behalf. the d1 waitlist database is configured with eu jurisdiction, which restricts where the database itself runs and persists data to the european union. cloudflare’s global network, support operations and subprocessors may nevertheless process technical or support data in switzerland, the european economic area, the united kingdom, the united states, canada, australia, india, japan, singapore, south korea, mexico, malaysia and the united arab emirates.

postmark and its infrastructure providers process the mailing data described above primarily in the united states. cloudflare’s and postmark’s data-processing terms provide for recognised transfer mechanisms where required, including the applicable data privacy framework and standard contractual clauses with the relevant swiss adaptations.

current provider information is available in the cloudflare data processing addendum, the cloudflare subprocessor list, the postmark data processing addendum and the postmark subprocessor information.

6. retention and deletion

we retain an active waitlist entry until consent is withdrawn or the launch email has been sent. following the launch mailing, we delete the address from the active waitlist within 30 days. residual copies may remain in protected cloudflare backup history until the applicable backup cycle expires and are not used for ordinary processing.

postmark retains message content and activity metadata for 45 days by default. a limited suppression record may remain for longer when needed to respect an unsubscribe, hard bounce or spam complaint. provider-level security and diagnostic data are retained according to the applicable service configuration and provider obligations.

7. cookies, analytics and browser storage

we do not use analytics, advertising or marketing cookies, tracking pixels, behavioural analytics, local storage or session storage on this landing page. the early-access popup uses temporary in-memory state only. fonts, images, icons and the whitepaper are served directly from this website.

cloudflare may use strictly necessary security mechanisms at network level when required to protect the website. we do not use the data for advertising or cross-site tracking.

8. contact by email

when someone contacts us by email, we process the sender address, message content and related transmission metadata to answer the request, manage follow-up communication and, where necessary, establish, exercise or defend legal claims. the email providers involved in transmission process the information required to deliver the message. contact data are retained only for as long as needed for these purposes or applicable legal obligations.

9. security

we use appropriate technical and organisational measures for the scope of this landing page. transmission uses https, the waitlist database is not public, database writes use parameterised statements, and there is no public endpoint for reading or exporting addresses. no method of transmission or storage can guarantee absolute security.

10. rights

subject to applicable law, individuals may request information about and access to their personal data, correction of inaccurate data, deletion, restriction or objection to processing, and surrender or portability of data where applicable. consent can be withdrawn at any time with effect for the future.

requests can be sent to kontakt@netzundnagel.ch. individuals may also contact the swiss federal data protection and information commissioner or another competent supervisory authority.

11. automated decisions

we do not use the data described in this policy for profiling or automated individual decision-making.

12. current version

this policy describes the current landing page and the services identified above. material changes to the processing are published on this page and reflected in the updated date.