Privacy Notice

Conservative privacy baseline for a non-monetized evergreen publication.

Controller and scope

This privacy notice explains how the operator of this website processes personal data in connection with the dashboard, the legal pages, optional browser storage, support requests, and basic hosting and security operations.

Controller
Torsten Sauter
Address
Alte Landtstr. 77, 8706 Meilen, Switzerland
General contact
torsten.sauter@icloud.com
Privacy contact
torsten.sauter@icloud.com
EU representative
Not appointed at this stage.
UK representative
Not appointed at this stage.
DPO
No separate data-protection adviser or DPO has been appointed at this stage.

Data minimization by design

Default privacy mode: no advertising scripts, no analytics scripts, no user accounts, no chat widget, no newsletter tracking, no social-media pixels, and no optional personalization scripts are active in this non-monetized build. The site is deliberately designed to collect as little personal data as practical.

The main categories of personal data processed are limited to ordinary web-server and security logs, the consent or acknowledgement record stored in the browser, optional preference storage chosen by the visitor, and any information the visitor voluntarily sends by email if you later publish a contact address.

Purposes and legal bases

ProcessingPurposeLikely legal basis
Hosting and access logsDeliver the site, maintain security, detect abuse, defend rights, and troubleshoot availability issues.Legitimate interests, and legal obligations where applicable.
Consent and acknowledgement recordRemember whether the visitor has accepted essential-only mode, preference storage, and the legal gate.Legitimate interests for proof and service continuity, and consent where the choice relates to optional storage.
Optional preference storageRemember chart horizon, view, and selected lines only when the visitor chooses to allow preference storage.Consent.
Support emailsAnswer enquiries, manage rights requests, and address operational issues.Legitimate interests, consent, or pre-contractual steps depending on the context.

Recipients, international transfers, and retention

Your hosting provider, DNS provider, email provider, version-control platform, and technical contractors may process data on your behalf. List them here once chosen. If any provider is outside the EEA, UK, or Switzerland, document the transfer mechanism you rely on and keep it current.

Hosting provider
Planned publication setup: GitHub Pages, subject to final deployment choice.
DNS provider
Planned publication setup: Namecheap DNS for goaskbid.com, subject to final deployment choice.
Email provider
Apple iCloud Mail for the published contact address.
Typical server log retention
Depends on the final hosting provider configuration. Confirm this value at go-live.
Consent or acknowledgement retention
Until the visitor clears browser storage, or until the site changes its consent version and asks again.
Support email retention
Handled case by case. Messages are kept only as long as reasonably necessary for correspondence, legal defence, or administrative follow-up.

Regional rights and requests

Depending on the law that applies, visitors may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. For residents of the EEA, UK, and Switzerland, these rights generally apply to personal data processed about them. For residents of California and other similar US states, additional notice and access, deletion, or correction rights may apply where the relevant thresholds or definitions are met.

This non-monetized build is designed so that there is no sale or sharing of personal information for cross-context behavioural advertising, no user profiling for legal or similarly significant effects, and no sensitive personal-data collection by design.

Send privacy requests to torsten.sauter@icloud.com.

Accuracy and transparency

Keep this notice aligned with reality. The Swiss FDPIC specifically warns that privacy statements should be consistent with actual data processing and that vague “we may do this” formulations should be avoided. If you add analytics, ads, embedded videos, social widgets, forms, accounts, or any third-party SDK, this notice and the cookies notice must be updated before those features go live.