Privacy policy

1. Who we are

The controller responsible for processing your personal data is: QNM Advice Holzer, owner Fabia Holzer, Edenstrasse 5, 8045 Zurich, Switzerland UID: CHE-214.728.586 Email: hello@qnma.ch

If you have questions about data protection, you can reach us at this address.

2. What data we process

• Contact form and email: name, email address, phone number (optional), company (optional), your topic and your message.
• QNMA Network: first name, last name, email address, phone number (optional), location (optional), role, description, LinkedIn profile and website (optional), comments (optional), one uploaded file (optional, PDF or image) and your consents.
• Phone: your number and the content of the call, as far as we note it to handle your request.
• Visiting the website: when you open the website, technical data such as IP address, date and time, page visited, browser and operating system are stored (server log files).
• Clients: contact and contract data we need for proposals, engagements and invoices.

3. Why we use the data

We do not sell your data and we do not use it for automated individual decisions. We process it to answer your request, prepare proposals, carry out and invoice engagements, connect members of the QNMA Network with each other, run the website securely and meet legal obligations, for example record-keeping duties.

4. QNMA Network

If you sign up for the QNMA Network, we use your details to find suitable contacts for you. We only share your contact details with other people if you have agreed in each individual case. You can leave the network at any time by emailing hello@qnma.ch. Your data will then be deleted, unless we are required to keep it. Your sign-up and any uploaded file are stored in a protected database that only we can access. If you have agreed, we email you updates from the network. You can withdraw this consent at any time.

5. Legal bases (for people in the EU)

Where the GDPR applies, we rely on Art. 6(1)(b) GDPR (contract and pre-contractual requests), (c) (legal obligations), (f) (legitimate interest, for example running the website securely) and (a) (consent, for example for sharing contact details within the QNMA Network and for updates by email).

6. Who receives the data

We only share your data when our work requires it. For this we use service providers who process data on our behalf:

• Website and hosting: Lovable (Lovable Labs Incorporated AB, Sweden) and Cloudflare, Inc., USA
• Database and file storage for forms: Supabase, Inc., USA (via Lovable Cloud)
• Email delivery for forms: Resend, Inc., USA
• Email: Microsoft 365, Microsoft Corporation, USA
• Accounting and contact management: bexio AG, Switzerland
• AI tools in engagements: providers of AI services based in Switzerland and the USA

If an engagement includes matching you with an expert, we only share the necessary details with your consent.

7. Use of AI tools

In engagements we sometimes use AI tools, for example for analyses or drafts. We only enter personal data where the assignment requires it, and only with providers that do not use this data to train their models.

8. Transfers abroad

Some service providers process data outside Switzerland, namely in the EU and the USA. The EU is considered to have an adequate level of data protection. For the USA, we ensure protection through appropriate safeguards, in particular certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

9. Cookies and analytics

This website only uses technically necessary cookies. We do not use analytics or marketing tools.

10. Links to other services

The website and the digital business card contain links to LinkedIn and WhatsApp. Only when you click such a link are you taken to that provider. Its own privacy policy then applies.

11. How long we keep data

We delete requests once they are closed and no engagement follows, at the latest after 12 months. Business records such as contracts and invoices are kept for the statutory period of ten years. Server log files are deleted according to the rules of our hosting provider.

12. Security

We protect your data with appropriate technical and organisational measures. The website is encrypted with SSL/TLS.

13. Your rights

You can at any time request information about your data, have incorrect data corrected or deleted, object to processing, withdraw your consent and receive your data in a common format. To do so, write to hello@qnma.ch. We may ask for proof of identity. You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority in your country of residence.

14. Changes

We may update this privacy policy. The version published on this website applies.