Privacy policy

1. Controller

For questions about privacy or to exercise your rights, please contact Julian Venzke at the email address above.

2. Visiting the website

The website is hosted through OpenAI’s ChatGPT Sites using Cloudflare infrastructure. Technical connection data is processed to deliver, troubleshoot and protect the website. This may include your IP address, request time and destination, browser information, and error and security information. A ChatGPT account is not required to visit the public website.

3. Enquiries

When you contact us, we process your name, email address, organisation if provided, and message. We use this information to reply to your enquiry and discuss a possible engagement. The recipient mailbox julian.venzke@venzke-ikm.ch is operated through Microsoft 365.

Contact form messages are sent using Resend (Plus Five Five, Inc., United States), with Ireland selected as the sending region. Open and click tracking are disabled. Message content is not stored in the website’s own database. Direct emails are not sent through Resend.

To prevent automated misuse, the form uses a short-lived security token and time-limited sending counters. An identifier is derived from the IP address using a secret key. Sending counters expire within 24 hours and are removed on the next form submission. The website database stores neither the original IP address nor message content.

Please do not submit patient information or other sensitive personal data. We need a working email address to reply.

4. Media and cookies

Fonts, images and video are served with the website. The film does not use an embedded player or connect to Higgsfield, YouTube or Vimeo. The website code includes no analytics tools, advertising pixels or marketing cookies. The hosting platform may use technically necessary security features.

5. Purposes and legal bases

We process personal data to operate this website securely and respond to business enquiries under Swiss data protection law. Where the GDPR applies, specific pre-contract enquiries rely on Article 6(1)(b), while secure operation and general business correspondence rely on Article 6(1)(f). Our legitimate interests are a reliable website and responding to enquiries. The website does not make automated decisions about people or create personal profiles.

6. Providers and international processing

OpenAI, Cloudflare, Resend and Microsoft provide hosting, security and communication services. These international providers may process data outside Switzerland, particularly in the United States and the European Economic Area, including Ireland for Resend. Selecting a sending region does not guarantee that all processing occurs in Ireland. The providers describe international transfers, subprocessors and contractual safeguards, including standard contractual clauses, in the privacy information linked below.

7. Retention

We keep enquiries for as long as needed to respond, support a subsequent engagement or fulfil legal obligations. Statutory retention requirements for business records remain applicable. Technical delivery and security logs are processed by the respective providers under their operational and retention policies.

8. Your rights

Depending on applicable data protection law, you may request access, correction, deletion, restriction or portability and object to processing. Where processing relies on consent, you may withdraw it for future processing. Statutory conditions and exceptions apply.

You may contact Julian Venzke and the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner. In the EEA, you may in particular contact the authority where you live or work.

EDÖB / FDPIC