Privacy notice

Controller

raphaelsaxer.com is operated by Aumivi AG, Lerchenfeldstrasse 3, 9014 St. Gallen, Switzerland. Its authorised representative is Raphael Saxer, CEO. Please send privacy requests in writing to this address.

Scope and legal bases

This notice covers use of raphaelsaxer.com. The Swiss Federal Act on Data Protection applies. Where the GDPR applies, necessary technical processing relies on our legitimate interest in secure website operation (Article 6(1)(f)), business communications on pre-contractual steps or contract performance (Article 6(1)(b)), and optional analytics cookies on your consent (Article 6(1)(a)).

Website operation and server logs

When a page is requested, the hosting infrastructure may process an IP address, time, requested URL, browser information and technical status data. These support delivery, troubleshooting and prevention of misuse. Fonts are served locally, without connecting to an external font service.

The binding allocation of production website, Appwrite and Matomo infrastructure, together with logging and deletion periods, is maintained in operating documentation and reviewed legally before public release. This notice does not make a blanket assurance that every service processes data exclusively in Switzerland or the EEA.

Audience measurement with Matomo

Cookieless measurement has been enabled for this deployment. Our self-hosted Matomo instance measures pageviews and selected interactions even without permission for analytics cookies. The basis for this baseline is the legitimate interest in improving the website with limited data, to be documented before approval and only where applicable law permits it. You can opt out of measurement entirely.

Matomo requests can involve an IP address at the transport layer, time, sanitised page addresses and technical access information. Cookieless does not automatically mean anonymous. The website tracker disables browser-feature detection, excludes arbitrary URL parameters and does not send external referrers. Server-side IP anonymisation, recognition settings and retention must also be checked in Matomo.

Measurements may include pageviews and defined enquiry/calendar-link clicks. When the separate contact form is introduced, only its start and confirmed receipt may be measured, without field values. Names, email addresses, companies, budgets, free text, user IDs and persistent substitute identifiers are not sent as event data. Session recordings, heatmaps and cross-domain tracking are not included.

Cookies, permission and full opt-out

Analytics cookies are off by default. With permission, Matomo may use cookies to recognise visits. You can withdraw that permission through Cookie settings in the footer. Applicable analytics cookies are then deleted; if the baseline is approved, measurement continues without cookies.

To stop all measurement, including its cookieless form, use the full opt-out on the Cookie information page. Do Not Track is also respected. A full opt-out is independent of cookie permission and applies to this browser. Withdrawing permission cannot recall requests already transmitted.

Contact enquiries, email and Google Calendar

When you submit the contact form, we process your name, company, business email, optional role, interest, workshop context, timeframe, budget selection and note, and your description of the situation. We also store language, an allowlisted internal source page, the time and version of your privacy acknowledgement, and technical workflow and email-delivery states. The enquiry is first saved in a private Appwrite table. Authorised staff use Appwrite Console to maintain status, next steps, follow-up and internal notes.

Resend processes the internal notification and localised receipt confirmation. A temporary email failure does not remove the saved enquiry; separate states support bounded retry attempts. A fixed internal mailbox receives the enquiry. Production recipients, Resend contractual/region information, retention and deletion periods require documented approval before launch. We do not claim that all communications data are processed exclusively in Europe.

The calendar is an external link, not an embedded service. A connection to Google is made only when you open that link. Google may process technical access information, cookies and booking details you provide. A click is not a confirmed booking.

Retention and recipients

Your cookie choice is stored in the browser for twelve months. A full opt-out remains until you withdraw it or clear browser data. The website does not store these preferences in a central profile database.

Enquiries are retained only as long as needed for handling, documentation, legal duties and misuse prevention. Binding production periods, cleanup of short-lived abuse counters and ownership must be set before launch. Browser-cookie lifetimes are not server-side retention periods.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, disclosure or portability, and object to processing. Consent can be withdrawn for the future. Please write to Aumivi AG to exercise your rights. Additional information may be needed to verify your identity.

You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you may also contact a competent supervisory authority in the EU or EEA.