Privacy Policy

Last updated: 10 October 2026

This Privacy Policy explains which personal data are processed when you visit benjamin-fontannaz.ch or contact me through it, why, on which legal basis, with whom they are shared and which rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (nFADP), US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), the Brazilian LGPD, the Canadian PIPEDA and Quebec Law 25, and comparable laws elsewhere.

1. Who is responsible

The controller responsible for the processing of your personal data is:

Benjamin Fontannaz
22, Rue aux Grands-Champs, 25160 Malbuisson, France

For any question about your data or to exercise your rights, use the contact form.

2. Summary

3. Data processed, purposes and legal bases

3.1 Visiting the website (server log files)

When you open a page, the hosting provider of the website automatically records technical data: IP address, date and time, page requested, browser and operating system, referring page and data volume. These data are needed to deliver the website, to keep it secure and to investigate attacks or errors.

Legal basis: legitimate interest in a secure and working website (GDPR art. 6(1)(f); nFADP art. 31). The log files are kept only as long as necessary for these purposes, generally a few weeks, unless an incident must be investigated.

3.2 Libraries loaded from content delivery networks

To display the website, your browser loads code libraries and stylesheets (jQuery, Bootstrap, Font Awesome icons, carousel and popup components) from the content delivery networks cdnjs (operated by Cloudflare, Inc., USA) and unpkg. For this, your IP address and browser information are transmitted to these providers. They do not set cookies for this website.

Legal basis: legitimate interest in a fast and reliable display of the website (GDPR art. 6(1)(f)).

3.3 Contact form

When you use the contact form, the data you enter (name, phone number if given, email address, subject and message) are sent to the form-to-email service FormSubmit (formsubmit.co), which forwards them to my email inbox hosted by Google (Gmail). They are used only to answer your request and for any follow-up exchange.

Legal basis: steps taken at your request before a possible contract (GDPR art. 6(1)(b)) and my legitimate interest in answering enquiries (GDPR art. 6(1)(f)). Your data are kept as long as necessary to handle your request and the related exchange, then deleted, unless a legal obligation requires a longer retention.

You can also contact me directly by email instead of using the form.

3.4 Map: picture or Google Maps (your choice)

By default, the map in the footer is a still picture stored on this website, made from OpenStreetMap data (© OpenStreetMap contributors): displaying it sends no data to any third party and sets no cookies. If you click it, the address opens in Google Maps in a new tab.

With your choice, the interactive Google Maps map, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA), is shown instead. Your IP address and information about your browser are then sent to Google, and Google can set cookies and use the data according to its own privacy policy, including for advertising.

The interactive map is only loaded if you allow “External media” in the cookie banner (outside the United States), or unless you opt out (in the United States). Legal basis: your consent (GDPR art. 6(1)(a) and art. 5(3) of the ePrivacy Directive), which you can withdraw at any time through “Cookie settings” at the bottom of each page; the picture is then shown again. The withdrawal does not affect the lawfulness of the processing before it.

3.5 Your cookie choice

Your choice in the cookie banner is stored in your own browser (local storage, entry “fc-consent”) so that it is not asked again on every page. It contains only the choice, its date and the type of banner shown, and is never sent to me. It is asked again after 12 months. Legal basis: legal obligation to respect and document your choice (GDPR art. 6(1)(c)) and strict necessity. See the Cookie Policy.

3.6 Links to other websites

The website links to other websites (for example LinkedIn, X, Credly, GitHub, Notion, Goodreads or former employers). Nothing is loaded from them until you click a link; their own privacy policies then apply.

4. Recipients and processors

Your personal data are shared only with the following categories of recipients, as described above:

5. International data transfers

Some of these providers are located, or process data, outside Switzerland, the European Economic Area and the United Kingdom, in particular in the United States. Google LLC and Cloudflare, Inc. are certified under the EU-U.S. Data Privacy Framework, its UK extension and the Swiss-U.S. Data Privacy Framework, which the European Commission, the UK and Switzerland recognise as providing an adequate level of protection. For other transfers, the providers' standard contractual clauses apply or, for the contact form, the transfer is necessary to answer the request you send (GDPR art. 49(1)(b); nFADP art. 17).

6. How long data are kept

Personal data are kept only as long as needed for the purpose for which they were collected (see section 3), then deleted, unless a legal retention obligation applies.

7. Your rights (EU, EEA, UK, Switzerland)

Under the GDPR, the UK GDPR and the nFADP you have the right to:

To exercise them, use the contact form. You also have the right to lodge a complaint with a data protection authority, in particular the CNIL in France (cnil.fr), the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch), the UK Information Commissioner's Office (ico.org.uk) or the authority of your country of residence.

8. United States residents (California and other states)

In the last 12 months, the website collected the following categories of personal information, for the purposes described in section 3: identifiers (IP address, and the name, email address and phone number you give in the contact form), internet or other electronic network activity information (browser and page data), and the content of your messages. No sensitive personal information is collected.

I do not sell personal information for money. When the interactive Google Maps map is shown, Google may use the data for cross-context behavioural advertising, which some state laws consider a “sharing” of personal information. You can opt out at any time with Your Privacy Choices (“Do Not Sell or Share My Personal Information”): a map picture is then shown instead. A Global Privacy Control (GPC) signal sent by your browser is honoured as an opt-out.

You have the right to know which personal information is collected, used and disclosed, to access it, to have it corrected or deleted, to opt out of any sale or sharing, and not to be discriminated against for exercising these rights. To submit a request, use the contact form; you can also use an authorised agent. I will verify your request with the information you provide and answer within 45 days.

9. Other regions

Brazil (LGPD): you have the rights listed in art. 18 LGPD (confirmation, access, correction, anonymisation or deletion, portability, information about sharing, revocation of consent) and can complain to the ANPD. Canada (PIPEDA, Quebec Law 25): you can access and correct your personal information and withdraw your consent; complaints can be made to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec. The person responsible for the protection of personal information is Benjamin Fontannaz. Other countries: you can exercise the rights granted by your local law through the contact form.

10. Children

The website is intended for professionals and is not directed at children under 16. I do not knowingly collect their personal data.

11. Automated decisions and security

No automated decision-making or profiling takes place. The website is served over an encrypted HTTPS connection, and appropriate technical and organisational measures protect your data.

12. Changes

This Privacy Policy may be updated when the website or the law changes. The date at the top shows the latest version.