This policy describes how personal data is handled on this website.
Data Controller
Olaf H. Nitz Advisory
Proprietor: Olaf H. Nitz
Zurich, Switzerland
Email: contact@olafhnitz.com
Personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP).
Because advisory services are offered to clients in the European Economic Area and visitor behaviour on this site is analysed, the General Data Protection Regulation (GDPR) also applies to the processing described here.
This website is built and hosted with Framer, operated by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands.
When you visit the site, technical data is processed to deliver and secure it. This includes your IP address, browser and device characteristics, the page requested, the referring page and the time of access. Framer's hosting environment runs on Amazon Web Services, with servers located in the United States. For these transfers Framer applies the mechanisms required under Chapter V GDPR, being an adequacy decision where the recipient is certified under the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
Log data is retained only as long as necessary to operate and secure the site, in line with the retention periods documented by the hosting provider.
Legal basis: legitimate interest in operating and securing the website, Art. 6(1)(f) GDPR.
If you write to me through the contact form or by email, the data you provide is processed so that I can respond, and where a professional relationship develops, so that the correspondence can be maintained. This includes your name, your email address and the content of your message.
Messages sent through the form are delivered to my mailbox, which is hosted by Infomaniak Network SA in Switzerland.
Legal basis: steps taken at your request prior to a possible engagement, Art. 6(1)(b) GDPR, and legitimate interest in responding to enquiries, Art. 6(1)(f) GDPR.
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is used to understand how the site is used, for example which pages are visited and how visitors arrive.
Google Analytics sets cookies and processes data including a randomly generated identifier, approximate location derived from your IP address, and information about your device, browser and behaviour on the site. Google Analytics 4 does not log or store IP addresses in its reports. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Standard Contractual Clauses apply in addition.
Google Analytics is only loaded after you have given consent. If you decline, no analytics cookies are set and no analytics data is collected.
Legal basis: your consent, Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future [via the cookie settings link in the footer how.
Data collected through Google Analytics is retained for 12 months and then deleted automatically.
Cookies strictly necessary for the website to function are set without consent, as permitted. No analytics or marketing tools are loaded in this category.
All other cookies, currently those set by Google Analytics, are set only after you have accepted them in the consent banner shown on your first visit. You can decline, and the site works normally if you do.
Recipient / Role / Location
Framer B.V. / Hosting and site delivery / Netherlands, with hosting infrastructure in the United States
Google Ireland Limited / Website analytics, only with consent / Ireland, with transfers to the United States
Infomaniak Network SA / Email hosting / Switzerland
Server log data is retained by the hosting provider only as long as necessary to operate and secure the website, in line with the retention periods documented by that provider.
Analytics data is retained for 12 months and is then deleted automatically.
Enquiries that lead to a professional relationship are retained for the duration of that relationship and any applicable statutory retention period. Enquiries that do not lead to a professional relationship are deleted after 12 months.
You have the right to request access to the personal data held about you, to have inaccurate data corrected, to request its deletion, and to request that processing be restricted.
Where the GDPR applies, you additionally have the right to object to processing based on legitimate interest, the right to receive data you provided in a structured, commonly used and machine-readable format, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Some requests may be limited where data has to be retained to comply with a legal obligation or to establish, exercise or defend legal claims. Where that applies, you will be told why.
To exercise any of these rights, write to contact@olafhnitz.com.
You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). In the EEA it is the supervisory authority of the country where you live, work, or where you believe an infringement occurred.
This policy was last updated on 01 September 2026. It will be amended when the website or the processing changes.