Draft — pending legal review.
Privacy policy
Last updated: October 2026
This policy explains which personal data is processed when you visit this website or use the contact form. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Jakub ZajícHochfeldstrasse 32
3012 Bern
Switzerland
2. Visiting the website
The website runs on a server I operate myself in Switzerland and is delivered through Cloudflare, Inc. (USA), which protects it and speeds it up. When you open a page, Cloudflare automatically processes technical data such as IP address, date and time, requested page and browser information to deliver the site and protect it against misuse. My server keeps no access logs and the website sets no cookies.
To see how the website is used, my server keeps anonymous visit statistics without cookies: the page viewed, the referring website, campaign parameters in the link (utm), the page sections viewed and the time on the page, clicks on contact, package and outbound links, browser and device type, browser language, and the country and city that Cloudflare derives from the IP address. The IP address itself is not stored. To count visitors, it is combined with the browser identification into a hash using a key that changes daily and is then discarded, so visits cannot be linked across days. Nothing is stored in your browser. The statistics stay on my server in Switzerland, are not passed on and are deleted after 13 months. Legal basis under the GDPR: legitimate interest in understanding and improving the website (Art. 6(1)(f)).
3. Contact form and e-mail
If you contact me, I process the data you provide (name, company, e-mail address, optional phone number, topic, preferred engagement and start date, message) to answer your request and, where applicable, to prepare an offer or contract. Form submissions are stored on my server in Switzerland and forwarded to me by e-mail via Resend (Resend, Inc., USA). Legal basis under the GDPR: steps prior to entering into a contract and legitimate interest (Art. 6(1)(b) and (f)).
4. Disclosure and transfers abroad
Data is only shared with the service providers named above, which process it on my behalf. They may process data in the USA. Transfers rely on the Swiss–U.S. and EU–U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses.
5. Retention
Enquiries are kept as long as needed to handle them and are deleted after 24 months at the latest if no business relationship results. Statutory retention obligations remain reserved.
6. Your rights
You may request information about your data and ask for it to be corrected, deleted or restricted, object to its processing and receive it in a portable format. Please write to the e-mail address above. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a data protection authority in the EU.
7. Changes
This policy may be updated. The version published on this website applies.