Legal & Privacy

1. What this page is

willen.org carries a name and one line about what it stands for. It offers nothing, sells nothing, collects no registrations and runs no contact form. There is no shop, no login, no newsletter and no account.

The site is built to be operated by keyboard, to carry a visible focus indicator, to respect a request for reduced motion and to stay readable at 200 percent zoom.

For anything concerning this website, including data protection requests, write to [email protected].

2. What happens when you visit

Opening a page here transmits the usual technical data from your browser to the hosting provider, which records it in server log files:

• IP address
• Date and time of the request
• Requested address and HTTP status
• Volume of data transferred
• Referring page, browser type and operating system

That is the entire processing that takes place when you look at this website. It is necessary for secure and reliable operation and complies with the principles of Art. 6 DSG. Where the GDPR applies in addition, it rests on the legitimate interest in operating and securing the site (Art. 6 para. 1 lit. f GDPR).

These entries are created and held by the hosting provider. This website consists of static files. No server of our own is operated, and no copy of the log files is kept here.

3. No cookies, nothing stored, nothing loaded from elsewhere

This website sets no cookies at all, neither its own nor anyone else's, and writes nothing to your browser's local storage or session storage. There is therefore no cookie banner and nothing for you to consent to or withdraw.

It also loads nothing from a third-party server. The fonts, the stylesheet and the small amount of script it uses are all served from willen.org itself. Opening any page here establishes no connection to any company other than the hosting provider.

4. Hosting and transfer abroad

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The technical data described in Section 2 is processed on Cloudflare's servers, which may sit outside Switzerland and the European Economic Area.

Cloudflare states that it is certified under both the Swiss-U.S. and the EU-U.S. Data Privacy Framework. Switzerland recognises the United States as providing an adequate level of data protection for organisations holding that certification (Annex 1 no. 44 of the Data Protection Ordinance, DSV, SR 235.11), so the disclosure rests on Art. 16 para. 1 DSG and needs no additional safeguards. Where the GDPR applies in addition, Cloudflare relies on its EU-U.S. DPF certification and on the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914).

Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

The mailbox behind the address given on this page is operated by Google Workspace (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), so writing an email is the second and last disclosure abroad. Google states that it complies with the Swiss-U.S. Data Privacy Framework, so the same recognition under Annex 1 no. 44 DSV applies and the disclosure likewise rests on Art. 16 para. 1 DSG. No further transfer abroad takes place: there is no analytics provider, no advertising network and no other recipient.

5. If you write an email

There is no contact form; contact is by email only. If you write to [email protected], your message travels via Google Workspace (see Section 4) and what you choose to include, typically your name, your address and the content of your message, is processed solely to answer you.

Under Swiss law this is permitted in principle. Where the GDPR applies in addition, the basis is pre-contractual measures at your request or the legitimate interest in responding (Art. 6 para. 1 lit. b and lit. f GDPR).

Please note that ordinary email is not an encrypted channel. Your message is kept for as long as the matter requires and for any applicable statutory retention period, then deleted.

6. Your rights

Under the Swiss DSG and, where applicable, the GDPR, you may request information about the data held about you (Art. 25 DSG; Art. 15 GDPR), have inaccurate data corrected (Art. 32 para. 1 DSG; Art. 16 GDPR), request deletion (Art. 17 GDPR; under Swiss law Art. 32 para. 2 DSG together with Art. 28 ff. of the Civil Code), request restriction (Art. 18 GDPR), receive your data in a machine-readable form (Art. 28 DSG; Art. 20 GDPR) and object to processing based on legitimate interests (Art. 21 GDPR).

The scope of these rights here is limited by what is processed. There are no accounts, no logins, no mailing list, no analytics profiles and no contact form. Unless you have written by email, the only data relating to your visit is a server log entry held by the hosting provider. That entry is neither read nor copied here; requests about it go to Cloudflare as the party holding it.

To exercise your rights, write to [email protected]. You will receive a reply within 30 days.

You may also report a suspected breach to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, https://www.edoeb.admin.ch. Swiss law provides for a report leading to a supervisory investigation under Art. 49 DSG rather than a right of appeal; under Art. 52 para. 2 DSG the reporting person is not a party to it. To enforce your rights directly you may bring a civil claim under Art. 32 DSG. Where the GDPR applies, you may lodge a complaint with a competent EU supervisory authority.

7. Security, changes and content

All traffic is encrypted in transit via TLS and access to the hosting infrastructure is restricted. A Content Security Policy confines the browser to content served from willen.org itself. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

The name WILLEN:ORG, the wordmark and the arrangement of this website belong to their author. The two typefaces used here, Raleway and IBM Plex Mono, do not: they belong to their authors and are used under the SIL Open Font License 1.1.

This page may be updated to reflect changes in practice or in the law. The current version always carries the date of its last update, shown above.