Privacy

Data, purposes and service providers

We use the following services, which receive data for their respective purposes:

• Cloudflare: hosting, DNS, content delivery and security; IP addresses, device information and connection/request logs.
• Google Analytics and PostHog: website and campaign analysis using page views, referrals, interactions, approximate location, device information and online identifiers. PostHog and Hotjar also record website interactions, including clicks, scrolling and cursor movements, to improve the website.
• Google Search Console: search-performance reports. Google Tag Manager: loading and managing website tags.
• Google Ads, Microsoft Advertising (Bing), LinkedIn Ads and OpenAI Ads: advertising, audience matching and conversion measurement using online identifiers, ad clicks, page visits and conversion events. Advertising providers can associate these events with their own user data.
• YouCanBookMe: appointment scheduling using contact details, booking information and answers you submit.
• Attio and Google Workspace: managing enquiries, client relationships, email, calendars and documents using the contact details, business information and correspondence you provide.

Analytics and advertising use cookies and similar technologies. We associate campaign, enquiry and booking information to understand which marketing generates business.

Recipients and international processing

These providers and their subprocessors receive data for the purposes above. Provider countries include the USA (Cloudflare and PostHog), Ireland and the USA (Google, Microsoft, LinkedIn and OpenAI), Malta (Hotjar), and the United Kingdom (Attio and YouCanBookMe). We select EU storage where available; this does not exclude access from abroad. Where a destination lacks adequate legal protection, we require recognised standard data protection clauses or another safeguard permitted by Swiss law.

Retention

Our retention limits are:

• Technical logs: 30 days.
• Session recordings: 90 days.
• Raw analytics and conversion data: 14 months.
• Inactive enquiries and booking records: 24 months after the last meaningful contact or appointment.
• Client records: for the business relationship and subsequently as needed for legal obligations or claims; accounting records subject to statutory retention are kept for 10 years.

Data is then deleted or anonymised. Providers processing data for their own purposes apply their own retention rules.

Your choices and rights

You can block or delete cookies and use tracking protection in your browser, and adjust advertising preferences with the relevant platforms. These controls do not prevent every data transfer. You can also object to processing by emailing mi@matthias-isler.com.

Use the same address for questions or requests for access, correction, deletion or data portability, subject to the conditions and limits of Swiss law. Where processing relies on your consent, you can withdraw it.