Privacy Policy

1 Controller

The controller responsible for personal-data processing on this website is:

This policy provides information required by the Swiss Federal Act on Data Protection (FADP) and, where it applies to the processing of personal data of individuals in the European Union, the EU General Data Protection Regulation (GDPR).

2 Data collected

Contact enquiries

When you use the contact form or contact me by email, I process the information you provide. This may include your name, email address, organisation, service interest and message, as well as the date and status of your enquiry.

Technical data

When you visit this website, Vercel may process technical data necessary to deliver and secure the website. This may include IP address, date and time of access, requested pages, browser and device information, referral information, and error or security logs.

Website analytics

I use Vercel Web Analytics to understand aggregate website use and performance. Vercel Web Analytics does not use third-party cookies or track visitors across websites. It uses short-lived hashed request data to produce aggregate analytics and performance metrics.

I do not use Google Analytics, advertising pixels or marketing trackers.

Prospective client contacts

I contact selected organisations that are, based on their public track record, likely to be preparing or coordinating EU research and innovation proposals in my areas of focus. For this purpose I process business contact data of relevant individuals — such as name, role, organisation and business email address — obtained from public sources, including the European Commission's CORDIS database, organisational websites, professional networks and event or partner-search platforms.

If you receive such a message from me and do not wish to be contacted again, a short reply is sufficient; your details are then placed on a suppression list and not used for outreach again. You can also contact privacy@haedra.ch at any time.

3 Purposes

I process personal data to:

• ·respond to enquiries and arrange introductory calls;
• ·assess whether a prospective engagement is a good fit;
• ·communicate about, enter into and perform consulting engagements;
• ·operate, secure and improve the website; and
• ·comply with legal, accounting or record-keeping obligations.

4 Legal bases

Where the GDPR applies, I process personal data on the following legal bases:

• ·Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) — responding to your enquiries, assessing a prospective engagement, and entering into and performing consulting engagements.
• ·Legitimate interests (Art. 6(1)(f) GDPR) — contacting prospective clients about relevant services based on their public professional activity; operating, securing and improving this website; and establishing, exercising or defending legal claims. You may object to processing based on legitimate interests at any time; for direct outreach, an objection is always honoured without requiring any justification.
• ·Legal obligation (Art. 6(1)(c) GDPR) — retaining records required by accounting, tax or other legal requirements.
• ·Consent (Art. 6(1)(a) GDPR) — where I ask for it for a specific purpose; consent can be withdrawn at any time with effect for the future.

Under the Swiss FADP, the same processing is carried out in accordance with the principles of lawfulness, proportionality and purpose limitation.

5 Recipients and service providers

I use the following service providers to operate this website and manage enquiries:

• ·Vercel Inc. — website hosting, content delivery and web analytics;
• ·Resend Inc. — email delivery service used to forward contact-form enquiries.

I do not sell personal data.

6 International transfers

Vercel operates a global hosting and delivery network and may process technical data outside Switzerland. Where personal data is transferred to a country without an adequate level of data protection, I use appropriate safeguards or another lawful transfer mechanism as required by applicable law.

Resend operates from the United States. Contact-form data forwarded by email is processed in accordance with Resend's data-processing terms.

7 Retention

Unconverted contact enquiries are normally deleted within 12 months of the last relevant interaction, unless longer retention is necessary for legal claims, security or another legitimate purpose.

Records relating to a concluded engagement may be retained for the period required by applicable legal, accounting and contractual obligations.

8 Your rights

Subject to applicable law, you may request information about the personal data processed about you and request correction, deletion, restriction or objection to processing. Where the GDPR applies, this includes the right to object at any time to processing based on legitimate interests — including to direct outreach, which is then stopped without further conditions — and the right to data portability. Where applicable, you may also request a copy of certain data in a commonly used electronic format.

To make a request, contact privacy@haedra.ch. I may need to verify your identity before responding.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) if you believe your data-protection rights have been infringed.

If you are in the European Union, you may also lodge a complaint with your local data-protection supervisory authority.

9 Cookies and similar technologies

This website does not use non-essential cookies, advertising cookies or marketing trackers. Vercel Web Analytics is designed to operate without third-party cookies.

If non-essential cookies or tracking technologies are added in the future, this policy will be updated and an appropriate consent mechanism will be implemented before they are activated.

10 Security

I use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

No internet transmission or storage system can be guaranteed completely secure.

11 Changes to this policy

I may update this Privacy Policy when processing activities or legal requirements change. The current version is published on this page with its last-updated date.