Privacy

This policy applies to the Years & Yield website. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Controller

Roman Henggeler
Alte Landstrasse 84
6314 Unterägeri
Switzerland

Email: [email protected]

In short

• This website sets no cookies.
• We measure how often pages are viewed and where visitors come from with Cloudflare Web Analytics: without cookies and without recognizing you (see below). We use no other analytics, tracking or advertising services. In the newsletter we measure whether it is opened.
• The font and files load from our own server. The only exception is Cloudflare’s measurement script.
• Visiting a page creates technically necessary access data at our host.

Hosting and access data

The website is delivered through Cloudflare Pages (Cloudflare, Inc., USA). When you open a page, Cloudflare processes technically necessary data: IP address, time, requested address, browser and operating system. This serves to deliver the page and protect against attacks. The legal basis is our legitimate interest in a secure, working service.

Cloudflare may process data in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. For companies certified this way, the European Commission and, for Switzerland, the Federal Council have recognized an adequate level of protection. In addition, Cloudflare’s data processing addendum includes the European Commission’s standard contractual clauses, which also apply should the certification lapse.

Audience measurement

To see which articles are read and how readers find us, we use Cloudflare Web Analytics, a service of our host Cloudflare. For this, every page loads a small script from Cloudflare (static.cloudflareinsights.com). On each page view it sends Cloudflare the requested address without parameters, the page you came from, your browser, operating system and device type, and the page’s loading time. Cloudflare derives the country from the IP address.

Cloudflare stores nothing in your browser for this, sets no cookies and does not recognize you by your IP address, browser or any other attribute. We only see aggregated figures, such as how often an article was viewed, never individual people. The legal basis is our legitimate interest in improving the service. You can block the script with an ad or script blocker; the website works without it. Transfers to the United States are covered as described under hosting.

What your browser stores

When you tick steps in a checklist, use tools such as the training or retirement planner, or add something to “My program”, your browser stores this information locally on your device (local storage). It is not sent to us, and we cannot see it. You can save it as a file in “My program” and delete it there or in your browser settings at any time. The tools’ calculations run entirely in your browser.

Newsletter

We use Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France) for the newsletter. Brevo processes the data on our behalf.

• What is stored: your email address, language, the time of sign-up and confirmation, and the IP address used. This lets us show that you signed up yourself.
• Confirmation: after signing up you get an email with a link. You are subscribed only once you click it (double opt-in).
• Measuring results: Brevo records whether and when an issue is opened and which links in it are clicked. This shows us which topics interest readers. The measurement is part of the sign-up; if you do not want it, you can unsubscribe at any time.
• Unsubscribing: via the link at the end of every issue or by emailing us. We then remove your address from the mailing list; we keep a record of the unsubscription so that you receive no further emails.
• Legal basis: your consent when signing up. You can withdraw it at any time.

For some services, Brevo may process data outside the EU and Switzerland, according to its privacy policy in the United States and India. Brevo’s data processing agreement safeguards such transfers with the European Commission’s standard contractual clauses and supplementary measures. For the United States, Brevo may also rely on the Data Privacy Framework: its US company Brevo, Inc. is certified under the EU-U.S. and the Swiss-U.S. Data Privacy Framework.

Links to sources

Articles link to studies, authorities and other sources. The linked site learns about your visit only when you click such a link. Its operator is responsible for its own data processing.

Ads and affiliate links

The website currently shows no ads. Affiliate links are labeled; clicking one takes you to the provider, who may collect its own data. Before we switch on ads, we will extend this policy and ask for your consent.

Your rights

You can request information about your data, ask for correction or deletion, and object to processing. Write to the email address above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the supervisory authority of your country.

Changes

We update this policy when the website changes. The version published here applies.