nFADP · GDPR
Privacy policy
Designed to protect your data with a high standard of care, this privacy policy aims for transparency, compliance and security. You focus on your work; I look after the protection of your information.
Last updated: 18 October 2026
At a glance
- Swiss Federal Act on Data Protection (nFADP) and, where applicable, the GDPR.
- Site hosted in Switzerland, with no cookies of its own and no audience measurement; your preferences stay in your browser.
- Contact form: message sent by email via Microsoft 365 (data stored in Switzerland), without your IP address.
- Fonts hosted on the site; weather relayed by the server without passing on your IP address.
- YouTube videos in privacy-enhanced mode, loaded from Google’s servers when you open the articles concerned.
- Access, rectification, erasure, objection: just write to michel@aguilera.ch.
1. Preamble
I place great importance on privacy, including personal data. This document explains how personal data is processed on aguilera.ch and in the course of my activity as a senior IT trainer and consultant: what data may be collected, for what purposes and on what legal basis. This policy forms part of my commitments to data subjects.
2. General principles
I undertake to comply with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR — EU 2016/679). This includes responding to data-subject requests, providing access to personal data where required by law, and cooperating with competent authorities.
3. Data controller
When I act as data controller, I may collect and manage certain personal data, including:
- contact details you share with me (name, email address, phone number, message) via the contact form or by email;
- professional information useful for a business or training relationship (role, organisation, stated need);
- basic technical data related to visiting the site (e.g. IP address, browser type), as necessary for operation, security or — only with your consent — future audience measurement.
This data is processed to respond to your requests, manage professional relationships, organise consulting or training services, and handle administrative follow-up. Appropriate technical and organisational measures are in place to protect personal data.
4. Client engagements and data
In the course of a consulting, training or project-management engagement, I may process personal data on behalf of a client. In that case the client generally remains the data controller; I process data only according to contractual instructions and as needed to perform the mandate.
Content and data entrusted to me are not read, modified or assessed beyond what is necessary for the service, unless otherwise agreed. Suitable security measures apply. At the end of the mandate, data is returned or destroyed as agreed, subject to legal retention duties.
Unless otherwise stated in the contract, processing primarily takes place from Switzerland.
5. Third parties
In some cases third-party providers may be involved (website hosting, email, technical tools) and have limited access to data needed for their role. In that case:
- access is limited and controlled to what is strictly necessary;
- third parties must process data in line with applicable law;
- only information required for the service is shared.
No tracking or analytics tool is activated without your prior consent via the cookie banner, except for the embedded YouTube video players described in section 8. Refusing does not prevent you from browsing the site.
6. Website hosting
The aguilera.ch website is hosted in Switzerland by Infomaniak Network SA. Like any web server, the hosting server automatically records technical logs for each visit: IP address, date and time, requested page, response code, browser and system type (user agent) and, where applicable, the referring page.
These logs are used solely for the operation, security and troubleshooting of the site. They are kept for a limited period in line with the hosting provider’s practices and are not used to build profiles.
The site consists of static pages: it sets no cookies of its own and uses no audience measurement tool.
7. Contact form and email
When you use the contact form, the information you enter — name, email address, subject (optional) and message — is sent encrypted (HTTPS) to the website’s server. It is not stored in a database: it is immediately formatted as an email and sent to my professional mailbox via Microsoft 365 (Microsoft Graph). This email contains only the information you entered and the date it was sent; your IP address is not included.
My professional mailbox is hosted by Microsoft (Microsoft 365 / Exchange Online), acting as a processor; the data in my mailbox is stored in Switzerland. The same applies to emails you send me directly. Messages are kept in my mailbox for as long as necessary to handle your request and follow up on the relationship, then deleted, subject to legal retention obligations.
A hidden field filters out automated submissions; no third-party anti-spam service (captcha) is used.
8. Embedded third-party services
Some features of the site rely on external services, described below. When a service is loaded directly by your browser, the provider technically receives your IP address and standard information about your browser; some of these providers may process data outside Switzerland.
Weather — Open-Meteo
The weather widget in the header shows the weather for the selected town (Courtelary by default). Your browser only contacts the website’s server, which forwards the request to the Open-Meteo service and briefly keeps the result (cache). Open-Meteo therefore receives the name of the town or, if you click “My location” and allow it in your browser, coordinates rounded to about one kilometre; it does not receive your IP address. The result is kept in the server’s cache for at most 15 minutes, with no link to your identity. To prevent abuse, the server keeps for a few minutes an identifier derived from your IP address in irreversibly encrypted form (hash), without logging it.
Fonts
The Outfit and Syne fonts are hosted on the website’s server; displaying them involves no connection to a third-party service.
Videos — YouTube
Some blog articles embed YouTube (Google) video players in privacy-enhanced mode (youtube-nocookie.com). When you open such an article, the player is loaded from Google and YouTube servers, which receive your IP address and information about your browser. Before any playback, this player sets no cookies, but it already stores technical data in your browser’s storage (local storage and an IndexedDB database linked to youtube-nocookie.com).
When you start a video, it is streamed from Google’s servers and YouTube may store additional data; this processing is governed by Google’s privacy policy. If you do not want this, you can block such content in your browser or watch the videos directly on YouTube.
External links and RSS feed
The site contains links to external services (LinkedIn, Facebook, X, GitLab, YouTube, the portal.aguilera.ch portal, the Feedly and Inoreader RSS readers). No data is sent to these services until you click a link; once on their site, their own privacy rules apply. The RSS feed is a simple file published on the site, with no tracking mechanism.
9. Local storage in your browser
The site sets no cookies of its own. To remember your preferences, it uses your browser’s local storage (localStorage). This information stays on your device, is not sent to me and can be deleted at any time in your browser settings:
- cookie-consent
- your choice in the cookie banner (accepted or refused);
- aguilera-lang
- the language chosen with the language switcher;
- aguilera-tz
- the time zone chosen for the clock;
- aguilera-weather-city
- the town you searched for in the weather widget (nothing is stored until you choose one).
These items serve only the features you use; they are used neither for tracking nor for audience measurement. Any data stored by the embedded third-party services (see section 8) falls under those services.
10. Your rights
Under the nFADP and, where applicable, the GDPR, you may at any time:
- ask whether data concerning you is being processed and obtain a copy (right of access);
- have inaccurate or incomplete data corrected;
- request the erasure of your data or the restriction of its processing, subject to legal retention obligations;
- object to processing or withdraw consent you have given, without retroactive effect;
- receive the data you provided to me in a common format, where the law provides for it (portability).
To exercise these rights, simply write to me at michel@aguilera.ch; proof of identity may be requested to avoid disclosure to a third party. I generally reply within 30 days.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the supervisory authority of your country.
11. Changes to this policy
This policy may be adapted as the site, the services used or the law evolve. The version in force is the one published on this page; the date of the last update is shown below.
12. Contact
For any question about personal data, you can contact me at: michel@aguilera.ch.
Data controller: Michel Aguilera, reachable at michel@aguilera.ch.
Last updated: 18 October 2026