// Privacy
Privacy policy
Last updated: [set on publication]
This privacy policy explains how Reto Haeni ("we", "us") processes personal data when you visit this website or contact us, in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is Reto Haeni, Switzerland — email hello@arcproficiency.com. If and when ARC Proficiency is incorporated, the controller will become the company and this policy will be updated. We have not appointed an EU representative, on the basis that processing through this website is occasional and low-risk.
2. What data we process
When you contact us. If you use our contact or early-access form, or email us, we process the information you provide: your name, email address, the role you select (individual, team, or academy), and your message.
Technical access data. When you visit, our hosting provider automatically processes data needed to deliver the site securely, such as IP address, browser type, and the date and time of the request.
Analytics. We use Cloudflare Web Analytics, a privacy-friendly, cookieless service that measures aggregate usage without setting tracking cookies or profiling visitors.
Cookies. This website uses only cookies strictly necessary to function and sets no advertising, profiling, or cross-site tracking cookies, so no cookie-consent banner is shown.
No profiling. We do not use your personal data for automated decision-making or profiling.
3. Purposes and legal bases
We process your contact data to respond to your enquiry and take steps at your request before any contract (GDPR Art. 6(1)(a)/(b)). We process technical and aggregate analytics data to operate, secure, and improve the website, which is our legitimate interest (Art. 6(1)(f)). Under the FADP this processing is justified by these purposes and, where relevant, your consent. Providing your data is voluntary, but without the form data we cannot reply.
4. Who we share it with
We share personal data only with processors acting on our behalf under a data-processing agreement: website hosting, content delivery, and cookieless analytics (Cloudflare, Inc.); contact-form handling (our hosting platform); and the email provider used to receive and reply to messages. We do not sell personal data and disclose it to authorities only where legally required.
5. Transfers abroad
Some providers may process data outside Switzerland or the EU/EEA, including in the United States. Where data is transferred to a country without an adequate level of protection, we rely on appropriate safeguards — the EU Standard Contractual Clauses with the Swiss addendum, and/or certification under the EU–US and Swiss–US Data Privacy Framework. Request details at hello@arcproficiency.com.
6. How long we keep it
We keep personal data only as long as necessary: enquiry data for up to 12 months after our last contact, and technical access logs for a short period (typically up to 90 days), unless a longer period is legally required.
7. Your rights
Subject to the FADP and GDPR, you may access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and — where processing is based on consent — withdraw that consent at any time. We handle requests free of charge and, under the FADP, within 30 days. Contact hello@arcproficiency.com.
8. Complaints
If you believe your data is processed unlawfully, you may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies to you, the authority in your country of residence.
9. Data security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No internet transmission is completely secure.
10. Changes
We may update this policy as the website or our processing changes. The current version, with its last-updated date, is always published here.