Privacy notice

1. Controller

2. Scope and principles

This privacy notice applies to the Santos Security Advisory website and to business contacts. Personal data is processed in accordance with Swiss data protection law, lawfully, proportionately, for specified purposes and as transparently as possible.

3. Technical data when visiting the website

When the website is accessed, the hosting and security infrastructure may process technical log data. This includes, in particular, IP address, date and time, requested address, amount of data transferred, status code, referring page and information about the browser, operating system and device.

This data is used to deliver the website, maintain its stability and security, investigate technical errors and prevent misuse. Log data is retained only for as long as necessary for these purposes or to comply with legal obligations.

4. Hosting and recipients

The website is provided through ChatGPT Sites. For users in Switzerland, this service is provided by OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes technical data to the extent necessary to host, deliver, maintain, secure and support the website. This may include, in particular, the log data listed in section 3.

OpenAI may use subprocessors and infrastructure or content-delivery providers for the technical operation of the site. Personal data may therefore also be processed outside Switzerland and the European Economic Area, particularly in the United States. According to OpenAI, such transfers rely on applicable legal mechanisms and appropriate safeguards. Hostpoint AG provides the domain, DNS and email services but does not host the website content.

Further information: Privacy and data processing for ChatGPT Sites

5. Contact by email

When you contact us by email, the data you provide is processed. This may include your name, company, function, contact details, message content, attachments and technical communication metadata. Processing is carried out to answer your enquiry, prepare a proposal, perform an engagement and document business communications.

The data is retained for as long as necessary to process the enquiry, maintain an existing or potential business relationship and comply with statutory documentation and retention duties. The email service is provided by Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland; emails are also transmitted through the systems of your own email provider.

6. Cookies, analytics and advertising

Santos Security Advisory currently uses no first-party analytics tools, advertising pixels, personalised advertising, social media plugins or non-essential cookies on this website. The hosting and security infrastructure may use technically necessary cookies or comparable information, for example for access protection, session management or misuse prevention.

7. Other data disclosures

Personal data is disclosed only where necessary to provide services, where required by law, where legitimate interests need to be protected or where you have consented. Potential recipients include IT, hosting, email and other appointed specialist service providers. They receive only the data necessary for their task.

8. Data security

Santos Security Advisory takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and disclosure. However, completely risk-free transmission or storage cannot be guaranteed. Particularly confidential information should not be sent by unencrypted email.

9. Your rights

Subject to applicable law, you may request access to your personal data, its correction or deletion, restriction of processing, delivery of certain data or object to processing. Consent may be withdrawn for the future.

Please send requests to info@santosadvisory.ch. Proof of identity may be required to prevent unauthorised disclosure. You may also contact the Federal Data Protection and Information Commissioner.

10. Changes

This privacy notice may be amended if services, data processing activities or legal requirements change. The version published on this website at the relevant time applies.