Privacy policy
Last updated: October 2026
This privacy policy explains which personal data is processed when you visit nicolasschmid.ch, for what purpose and by whom. It follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to visitors from the EU, the relevant legal bases are named as well.
Controller
Nicolas Schmid
Nünenenweg 45
3123 Belp, Switzerland
Email: hello@nicolasschmid.ch
For questions about data protection or to exercise your rights, an email to this address is enough.
Engagements, courses and workshops run through my company Halvic Labs GmbH, Bern. Where Halvic Labs processes data itself, for example for the newsletter or booked calls, the Halvic Labs privacy policy applies in addition.
Overview
- No analytics or advertising service is loaded without your consent.
- The website itself sets no cookies. Cookies only come from the services listed below, if you allow or use them.
- Spotify players and the Calendly booking window load only when you click them.
- Fonts and icons are served from my own server, not from Google or any other provider.
Hosting and server log files
The website runs on the AnvilHosted platform, operated by Halvic Labs GmbH. The servers are in a data centre of Infomaniak Network SA in Geneva, Switzerland.
On every request, the web server stores technically necessary information: IP address, date and time, requested address, amount of data transferred, the previous page (referrer), and browser and operating system. I need this data to deliver the website, find errors and fend off attacks. It is not combined with other data and is kept only as long as needed for these purposes.
Legal basis under the GDPR: legitimate interest in secure and stable operation (Art. 6(1)(f)).
Consent and cookie settings
On your first visit, a notice lets you allow or decline Google Analytics and the OpenAI advertising pixel. These services are loaded only after you click "Accept".
Your choice is stored in your browser's local storage (entry "ga-consent") so the notice does not appear on every page. This entry is not sent to me.
You can withdraw or give consent at any time using the "Cookie settings" link at the bottom of every page. A withdrawal takes effect from the next page view.
Legal basis under the GDPR: consent (Art. 6(1)(a)).
Google Analytics
With your consent, I use Google Analytics 4 to understand which pages are read and how visitors find the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA.
Among other things, it records pages viewed, time on page, clicks on external links, approximate location, device type, browser and operating system. Google Analytics sets cookies for this (for example "_ga") that recognise your browser. Google Analytics 4 does not store IP addresses.
More information: Google privacy policy.
OpenAI advertising pixel
With your consent, I load the OpenAI advertising pixel. It lets me measure whether ads in ChatGPT lead to visits and booked calls. The provider is OpenAI, based in San Francisco, USA.
It transmits page views on this website, browser and device information, your IP address, and technical identifiers that allow OpenAI to match a visit to an ad shown earlier. If you book a call in the booking window, the event "appointment scheduled" is also transmitted. I do not pass your name, email address or any other booking details to OpenAI.
More information: OpenAI privacy policy.
Booking calls via Calendly
For intro calls I use Calendly, provided by Calendly LLC, Atlanta, USA. When you click "Book an intro call" or another booking link, a Calendly booking window opens on this website. Only this click connects your browser to Calendly.
Calendly then receives your IP address and technical information about your browser and may set cookies. If you book a call, Calendly also processes what you enter, such as name, email address, chosen time and your answers to any questions. I use this information to prepare and hold the call. Bookings are managed through the Halvic Labs GmbH account.
Legal basis under the GDPR: steps taken at your request before entering into a contract (Art. 6(1)(b)).
More information: Calendly privacy policy.
Newsletter
If you subscribe to the newsletter, your email address is sent to Halvic Labs GmbH, which sends the newsletter. You first receive an email with a confirmation link. You are added to the list only after confirming. You can unsubscribe at any time with the link in every issue.
Legal basis under the GDPR: consent (Art. 6(1)(a)). Details on sending are in the Halvic Labs privacy policy.
Spotify audiobook previews
The pages of the individual audiobooks can show a player from Spotify, provided by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. The player is loaded only when you click "Load player". Until then, no connection to Spotify is made.
After the click, Spotify receives your IP address and technical information about your browser and may set cookies. If you are logged in to Spotify, Spotify can link the visit to your account.
Legal basis under the GDPR: consent given by clicking "Load player" (Art. 6(1)(a)).
More information: Spotify privacy policy.
Contact by email
If you email me, I process your address and the content of your message to answer your request. Emails are stored with Hostpoint AG in Switzerland. I delete them once they are no longer needed for the request and any statutory retention duties.
Links to other websites
The website links to Spotify, Apple Books, Google Play, YouTube, LinkedIn, GitHub and others. These links are plain references. No data is transferred until you click one. From then on, the privacy policy of that provider applies.
Transfers abroad
Google, OpenAI and Calendly may process data in the USA. Where a provider is certified under the EU-US or Swiss-US Data Privacy Framework, the transfer relies on it. Otherwise it relies on the European Commission's standard contractual clauses, which the Swiss Federal Data Protection and Information Commissioner (FDPIC) also recognises.
Your rights
At any time you can:
- ask which data I process about you,
- have incorrect data corrected,
- request deletion of your data,
- object to the processing,
- receive your data in a common format,
- withdraw consent with effect for the future.
Write to hello@nicolasschmid.ch. You can also lodge a complaint with the FDPIC. If you live in the EU, the data protection authority of your country is also available to you.
Changes
I update this policy when the website or the services it uses change. The version published on this page applies.