Privacy policy
Draft – have this reviewed legally and replace the placeholders before going live. Last updated: [DATE]
Who is responsible?
[NAME / COMPANY], [ADDRESS], Zurich, Switzerland. Email: [CONTACT EMAIL].
For people in the EU: representative under Art. 27 GDPR: [EU REPRESENTATIVE or reason why not required].
What data we process
- Your email address and your consent (with timestamp).
- Optional: the country you are looking in, your answers to the 5 questions after signing up, and whether you would like to join a call or the beta.
- Where you came from (for example a referral or the website that linked to us) and your language.
- To prevent abuse, a hashed short form of your IP address, kept briefly.
What for
- To inform you about the ApplyPass launch (legal basis: your consent, Art. 6(1)(a) GDPR).
- To improve ApplyPass based on your optional answers (also your consent).
- To protect the waitlist from spam (legitimate interest, Art. 6(1)(f) GDPR).
We do not sell your data or share it with third parties for their own purposes. We use no tracking cookies and no third-party analytics. Fonts are served from our own server.
Where the data is stored
The website and database are hosted by Cloudflare, Inc. (USA), with the database stored in the EU. Emails are sent via Resend (Plus Five Five, Inc., USA). Data processing agreements including EU Standard Contractual Clauses are in place with both. [accept DPAs in Cloudflare and Resend accounts] We do not store your IP address, only an irreversible hash, kept for at most 24 hours to prevent abuse.
How long
If you do not confirm your sign-up within 7 days, we delete your address. Otherwise we keep your data until ApplyPass launches and at most 12 months after – or until you unsubscribe.
Your rights
You can request access, correction or deletion and withdraw your consent at any time – easiest via the unsubscribe link in every email or on Unsubscribe, or by emailing [CONTACT EMAIL]. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in the EU.