Privacy policy

Who is responsible

Nicolas Gerig is responsible, at the address above. Thuul is being founded; once the company exists, it will take over this role and we will update this policy.

Visiting the website

The website is hosted by Vercel Inc. (USA) and delivered through its global network. When you open a page, Vercel processes technical data such as your IP address, the time, the page requested, the referring page and browser details, in order to deliver the page and protect it against misuse.

We serve fonts and videos ourselves through Vercel. The website loads no content from Google Fonts, YouTube or social networks, and sets no advertising cookies.

Usage statistics

We use Vercel Web Analytics and Vercel Speed Insights to understand which pages and sections are read and how fast the website loads. They record page views, the referring page, country, device and browser type, loading times and individual events such as button clicks, opened questions and sections reached.

No cookies are set and no profiles are built across websites. Details from the booking form are never part of these statistics; for a booking we only record that one was made, and in which language.

Booking a demo

For bookings, the demo page embeds the calendar of Cal.com, Inc. (USA). When the page opens, your browser loads the calendar from Cal.com, which receives technical data such as your IP address.

When you book, we process your name, email address, the chosen time, your time zone and anything you choose to tell us about your needs. The meeting is added to our Google calendar and takes place on Google Meet (Google Ireland Limited, Ireland, and Google LLC, USA). We use this data only to arrange, hold and follow up on the conversation.

Writing to us

When you write to us, we use your details to answer your request. Our email is hosted by Infomaniak Network SA in Switzerland.

Legal basis under the GDPR

Where the GDPR applies, we process data to answer your request or take steps before a possible contract (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in a secure, well-functioning website and in communicating with interested companies (Art. 6(1)(f) GDPR).

Data abroad

Vercel, Cal.com and Google may process data in the USA. Where these providers are certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, transfers rely on that certification; otherwise they rely on the standard contractual clauses in the providers' data processing agreements.

How long we keep data

We keep booking and contact details for as long as the conversation and any possible cooperation require, and delete them no later than two years after our last contact, unless the law requires us to keep them longer. Usage statistics are only evaluated in aggregate.

Your rights

You may ask what personal data we hold about you, have it corrected or deleted, and object to its processing. Where the GDPR applies, you may also ask us to restrict processing and to hand over your data. Write to us at the address above.

You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority of your country.

Changes

We update this policy when our processing changes, and at the latest once the company is founded. The version published here applies.