Contents
Who We Are
Controller
Cybersecurity Strategy Consulting
Address
Bielstrasse 15, 3294 Büren an der Aare, Seeland, Switzerland
Applicable Law
Swiss nDSG (Federal Act on Data Protection) — EU GDPR where applicable
Our Core Principle

We do not want your data. We do not collect, store, or process any personal information beyond the strict minimum required to fulfil your transaction and comply with Swiss financial record-keeping law.

No cookies. No trackers. No analytics. No advertising. No profiling. No data brokering. No newsletter lists. What you buy and what you ask is yours — not ours.

What We Do Not Collect
No cookies No tracking pixels No analytics No advertising IDs No browser fingerprinting No session recordings No marketing lists No third-party data sharing

This website does not use cookies of any kind — functional, analytical, or marketing. No consent banner is displayed because there is nothing to consent to. No third-party script has access to your browsing behaviour on this site.

We do not track which pages you visit, how long you stay, where you came from, or what device you use. We have no interest in this information and have taken deliberate technical steps to ensure it is not collected.

What We Do Collect

We collect only two categories of data, and only when you initiate a transaction or a request:

We do not collect your name, postal address, phone number, IP address, or any other identifying information unless you explicitly provide it as part of an on-demand request — and even then, it is anonymised before any further processing occurs.

Payment Processing

All payments on this website are processed by Stripe, Inc. (or Stripe Payments Europe, Ltd. for EU customers). When you click a purchase button, you are directed to a Stripe-hosted payment page. We never see, handle, or store your card details. Stripe is PCI-DSS Level 1 certified.

Stripe collects and processes your payment data under their own Privacy Policy, which you can review at stripe.com/privacy. Their processing is independent of ours.

After a successful payment, Stripe confirms the transaction to our system. We retain a record containing: your email address (for product delivery), the product purchased, the transaction amount, the transaction date, and Stripe's transaction reference. This record is kept for 10 years as required by Swiss accounting law (OR Art. 958f) and is not used for any other purpose.

We do not send marketing emails. Your email address is used once: to deliver your product download link. It is not added to any list and is not shared with any third party.

On-Demand Requests

On-demand service requests are submitted by email to contact@seconsulting.ch. When you send a request:

We ask that you do not include sensitive personal information, confidential business data, or third-party personal data in your initial request email. If your project requires such information, we will establish a secure channel for it.

Request Anonymisation

After an on-demand request is fulfilled, the request is anonymised by an automated process before being retained for any operational purpose. This process:

Why we retain anonymised request records: Our AI agents review the anonymised history of past requests to verify that no pattern of requests — whether from one party or aggregated — could produce a product that is dangerous, malicious, or in breach of our ethical policies. No personal data is involved in this review. The record contains only what was built, not who asked for it.

Once anonymised, the record cannot be re-linked to you. We consider anonymised records to be outside the scope of personal data under Swiss nDSG and EU GDPR, as re-identification is not possible.

Geolocation Data

For certain operational and compliance purposes, our systems may associate a completed request with a geographic region. This is done at the regional level — for example, the municipality (e.g. Büren an der Aare) or, if that level is considered personal data under applicable law, the administrative region (e.g. Seeland, Canton of Bern).

We do not record IP addresses, GPS coordinates, precise location data, or any identifier that could be used to pinpoint an individual's location. The geographic label attached to an anonymised request record is used solely to verify that the request originates from a jurisdiction where our services are offered and to support our compliance review process.

Before applying any geolocation label, our systems verify that the level of geographic granularity used does not constitute personal data under Swiss nDSG or GDPR in the context of the data held. If there is any doubt, the broader regional label is used.

Data Retention
Transactional records
10 years from the date of transaction — required by Swiss law (OR Art. 958f). Held securely and not used for any other purpose.
Email communications
Retained only until the request is fulfilled and delivery is confirmed. Permanently deleted thereafter.
Anonymised request records
Retained indefinitely in anonymised form for compliance review. No personal data is present in these records.
Everything else
Not collected — not retained.
Third-Party Services

We use the following third-party services in the operation of this website. These are the only external parties that may process data in connection with your use of elisalab.net:

Stripe
Payment processing. Processes your payment data under their own privacy policy. PCI-DSS Level 1 certified. Stripe Payments Europe, Ltd. for EU customers. stripe.com/privacy
Cloudflare
Website hosting, content delivery, and security (DDoS protection). Cloudflare processes network-level request data as part of their infrastructure service. They do not receive your personal data from us. cloudflare.com/privacypolicy

No other third-party services are used. No social media plugins, no advertising networks, no analytics platforms, no comment systems, no embedded content from external sources.

Your Rights

Under Swiss nDSG and, where applicable, EU GDPR, you have the following rights with respect to your personal data:

To exercise any of these rights, contact us at contact@seconsulting.ch. We will respond within 30 days. No fee is charged for exercising these rights.

If you believe your rights have not been respected, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) of Switzerland at edoeb.admin.ch, or with the supervisory authority in your EU member state if applicable.

Contact & Changes to This Policy

For any privacy-related questions or requests, contact us at contact@seconsulting.ch. We aim to respond within 2 business days.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, the “last updated” date below will change. We recommend reviewing this page periodically.

Last updated: 30 March 2026