1. What data we collect and why

Server logs. When you visit this site, your browser automatically sends technical data (IP address, browser type, OS, referrer, timestamp) to the server. This is processed to keep the site functional and secure, deleted after each session. Legal basis: Art. 6(1)(f) GDPR. Hosting is provided by Infomaniak Network SA, Geneva, Switzerland.

Email contact. If you email me, I process your name, email address, and message content to respond to your inquiry. Data is kept until the matter is resolved, or up to 10 years if it relates to a contract. Legal basis: Art. 6(1)(b) or (f) GDPR.

Appointment scheduling. Booking a call uses Google Calendar (Google Ireland Limited, Dublin). The data you enter — name, email, reason for the call — is processed by Google and may be transferred to the USA under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR.

Newsletter. If you subscribe, your email address is processed by MailPoet via Automattic’s infrastructure (USA), covered by a Data Processing Agreement and Standard Contractual Clauses. Sign-up uses double opt-in: you are only subscribed after clicking the confirmation link sent to your email. The sign-up is logged (timestamp, IP) for legal documentation. You can unsubscribe at any time via the link in any email. Legal basis: Art. 6(1)(a) GDPR.

Google Analytics. This site uses Google Analytics to understand how visitors use it. IP anonymization is enabled. Cookies are only set with your consent (managed via the cookie banner). Data may be transferred to Google servers in the USA under the EU–U.S. Data Privacy Framework. You can opt out via the Google Analytics opt-out add-on. Legal basis: Art. 6(1)(a) GDPR.

YouTube. Some pages embed YouTube videos (Google Ireland Limited, Dublin). When you play a video, Google receives your IP address and browser data. If you are logged into a Google account, YouTube may link this to your profile. Data may be transferred to the USA under the EU–U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR.

Cookie consent (Cookiebot). Consent decisions are recorded and stored by Cookiebot (Cybot A/S, Copenhagen). This is required to document compliance. Legal basis: Art. 6(1)(c) GDPR.

Spam protection (Google reCAPTCHA). Contact forms use reCAPTCHA (Google Ireland Limited) to prevent automated submissions. IP address and form interaction data may be transferred to Google servers in the USA under the EU–U.S. Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.

E-learning samples. Interactive samples linked from this site are hosted on Amazon Web Services (USA). When you access them, technical data such as your IP address is processed on AWS servers under Standard Contractual Clauses. Legal basis: Art. 6(1)(f) GDPR.