Privacy Policy.

Effective date: 30 July 2026 · Last updated: 25 August 2026

1. Who I Am

This website is published by Dr Tyson Welzel, Zürich, Switzerland, in a personal capacity. I am the controller of personal data processed through this site. It is a personal professional profile and is not operated by Acuvera Consulting GmbH or any other organisation with which I am associated. You can reach me using the contact form on this website. This policy is written to meet the Swiss FADP and, where applicable, the EU and UK GDPR and South Africa's POPIA.

2. What I Collect

(a) What you send through the contact form: your name, your email address, an optional subject line, and your message. (b) Technical information processed when you visit: your IP address, browser user agent and the pages you request, handled by Cloudflare as hosting and security provider. No analytics, advertising, heatmap or session-recording tools are used on this website.

3. How I Use It

To read and reply to your enquiry, to keep the site available and secure, to limit automated abuse of the contact form, and to meet legal obligations. There is no automated decision-making and no profiling. Your information is never sold, rented or traded.

4. Retention

Messages sent through the contact form arrive as email and are kept only as long as needed to deal with the enquiry and any correspondence arising from it. Nothing submitted through the form is written to a database on this website. IP addresses used for rate limiting are stored only as a salted hash and expire after one hour.

5. Who Else Processes It

Cloudflare, Inc. handles hosting, content delivery and the Turnstile anti-automation check. Scaleway SAS in France delivers contact-form messages by email, processed within the EU. Both are engaged under a data processing agreement. Your message is then delivered into my personal mailbox, which is provided by a third-party email service under its own published terms rather than under a data processing agreement with me, and which may store and process the message outside Switzerland and the EEA. No one else receives your data.

6. International Transfers

This site is served from Cloudflare's global network, so requests may be handled by data centres outside Switzerland and the EEA. Email delivery through Scaleway is processed within the EU. For the providers I engage under contract, Standard Contractual Clauses or an equivalent safeguard apply where data leaves Switzerland or the EEA. My personal mailbox is hosted outside Switzerland and the EEA, and messages sent through the contact form are stored there under that provider's own terms. If you would prefer your message not to be stored outside Switzerland and the EEA, please contact me via LinkedIn instead.

7. Your Rights

You may request access to your data, correction, deletion, restriction or portability, and you may object to processing or withdraw consent. Use the contact form to make a request. You may also complain to the FDPIC in Switzerland, your national supervisory authority in the EEA, the ICO in the United Kingdom, or the Information Regulator in South Africa.

8. Security

The site is served over HTTPS. Contact-form submissions are validated and rate-limited on the server and are not stored on this website. Access to the receiving mailbox is restricted.

9. Cookies and Similar Technologies

This website sets no analytics, advertising or tracking cookies. Cloudflare may set strictly necessary cookies for security and bot management, and the Turnstile check on the contact page may store a short-lived token. See the Cookie Policy.

10. Contact Form

The contact form collects your name, email address, an optional subject and your message. These details are transmitted to me by email and are not retained in any database on this website.

Cloudflare Turnstile is used to filter automated submissions. For that purpose, and for rate limiting, Cloudflare processes the visitor's IP address. The IP address is stored only as a salted hash, for up to one hour.

Email delivery is handled by Scaleway, a French provider processing data within the EU. The message is then stored in my personal mailbox, which is hosted outside Switzerland and the EEA. If you prefer not to use the form, you may instead make contact via LinkedIn.

11. Updates

I may update this policy. The current version is always published here.

12. Language Versions

This policy is also published in German and French. In the event of any discrepancy between the language versions, the English version governs.