Privacy Policy — Swiss Security Insights

This privacy policy explains how Swiss Security Insights (swisssecurityinsights.ch) collects, uses, and protects personal data in accordance with the Swiss Federal Act on Data Protection (nDSG) and applicable telecommunications legislation.

1. Data Controller

Marco Scarito
Lugano, Switzerland
Email: marco.scarito@swisssecurityinsights.ch

2. Data We Collect

2.1 Analytics (Google Analytics 4)

This website uses Google Analytics 4 to understand how visitors interact with the site. It collects pages visited, approximate geographic location, device type, and referring source. Data is transmitted to Google LLC servers in the United States under the Swiss-U.S. Data Privacy Framework. You may opt out via cookie settings or the Google Analytics opt-out browser add-on.

2.2 Newsletter Subscription

If you subscribe to the weekly briefing, we collect your email address, stored and processed by Infomaniak Network SA (Geneva, Switzerland). Your email is used exclusively to send Swiss Security Insights articles and is never sold or shared. Unsubscribe at any time via the link in any newsletter email, or contact marco.scarito@swisssecurityinsights.ch.

2.3 Server Logs

Our hosting provider (Infomaniak Network SA, Geneva, Switzerland) automatically records IP addresses, access times, and requested URLs. This data is retained for a maximum of 30 days.

3. Legal Basis for Processing

Analytics: Your consent, given by clicking "Accept" on the cookie banner — Google Analytics is not loaded until you consent
Newsletter: Your explicit consent at the time of subscription (double opt-in)
Server logs: Legitimate interest in website security and operational continuity

4. International Data Transfers

Google Analytics transfers data to the United States under the Swiss-U.S. Data Privacy Framework, the extension recognised by the Federal Data Protection and Information Commissioner (FDPIC) as providing an adequate level of protection for data transfers from Switzerland to the United States. Newsletter data is processed by Infomaniak Network SA exclusively on servers in Switzerland.

5. Your Rights

Under the nDSG, you have the right to access, rectify, erase, and port your personal data, and to withdraw consent at any time. Contact: marco.scarito@swisssecurityinsights.ch. Response within 30 days.

6. Cookies

_ga, _ga_XXXXXXX — Google Analytics 4 (2 years). Set only with your consent.
ssi_cookie_consent — Stores your cookie preference (1 year). Always set.

7. Data Retention

Analytics data: 14 months. Newsletter data: until you unsubscribe. Server logs: 30 days.

8. Contact and Complaints

Privacy questions: marco.scarito@swisssecurityinsights.ch
Supervisory authority: www.edoeb.admin.ch (FDPIC)

9. Changes to This Policy

This policy may be updated periodically. The date of the last revision is shown above.