This privacy policy explains how Swiss Security Insights (swisssecurityinsights.ch) collects, uses, and protects personal data in accordance with the Swiss Federal Act on Data Protection (nDSG) and applicable telecommunications legislation.
1. Data Controller
Marco Scarito
Lugano, Switzerland
Email: contact@swisssecurityinsights.ch
2. Data We Collect
2.1 Analytics (Google Analytics 4)
This website uses Google Analytics 4 to understand how visitors interact with the site. It collects pages visited, approximate geographic location, device type, and referring source. Data is transmitted to Google LLC servers in the United States under the Swiss-U.S. Data Privacy Framework. You may opt out via cookie settings or the Google Analytics opt-out browser add-on.
2.2 Newsletter Subscription
If you subscribe to the weekly briefing, we collect your email address, stored and processed by Infomaniak Network SA (Geneva, Switzerland). Your email is used exclusively to send Swiss Security Insights articles and is never sold or shared. Unsubscribe at any time via the link in any newsletter email, or contact contact@swisssecurityinsights.ch.
2.3 Server Logs
Our hosting provider (Infomaniak Network SA, Geneva, Switzerland) automatically records IP addresses, access times, and requested URLs. This data is retained for a maximum of 30 days.
3. Legal Basis for Processing
- Analytics: Your consent, given by clicking "Accept" on the cookie banner — Google Analytics is not loaded until you consent
- Newsletter: Your explicit consent at the time of subscription (double opt-in)
- Server logs: Legitimate interest in website security and operational continuity
4. International Data Transfers
Google Analytics transfers data to the United States under the Swiss-U.S. Data Privacy Framework, the extension recognised by the Federal Data Protection and Information Commissioner (FDPIC) as providing an adequate level of protection for data transfers from Switzerland to the United States. Newsletter data is processed by Infomaniak Network SA exclusively on servers in Switzerland.
5. Your Rights
Under the nDSG, you have the right to access, rectify, erase, and port your personal data, and to withdraw consent at any time. Contact: contact@swisssecurityinsights.ch. Response within 30 days.
6. Cookies
- _ga, _ga_XXXXXXX — Google Analytics 4 (2 years). Set only with your consent.
- ssi_cookie_consent — Stores your cookie preference (1 year). Always set.
7. Data Retention
Analytics data: 14 months. Newsletter data: until you unsubscribe. Server logs: 30 days.
8. Contact and Complaints
Privacy questions: contact@swisssecurityinsights.ch
Supervisory authority: www.edoeb.admin.ch (FDPIC)
9. Changes to This Policy
This policy may be updated periodically. The date of the last revision is shown above.