Privacy policy

[Draft — to be reviewed and approved by the team. Fill in everything in square brackets.]

This policy explains which personal data we process on selnau.xyz, for what purpose and for how long. It follows the Swiss Federal Act on Data Protection (FADP).

Controller

Verein Haus im Haus
Selnaustrasse 25
8001 Zurich
hello@selnau.xyz

Visiting the website

When you open the website, our hosting provider processes technical data such as IP address, time, page requested and browser details in server logs. This is necessary for secure operation (legal basis: overriding interest). The logs are kept briefly and not linked to other data.

The website uses no analytics or tracking services. [Add here if analytics is introduced.]

Applying to an open call

When you apply through the form, you give us your name, email address, a portfolio link and/or a PDF, a statement and the language of your application. We also store the time of your consent.

Purpose: assessing the application and contacting you about it. Legal basis: your consent given in the form. Access is limited to the team members handling the call. A confirmation and the internal notification are sent by email.

Retention: until the call has been decided and for [6 months] afterwards; the application and the PDF are then deleted. You can request earlier deletion at any time.

Newsletter

When you sign up we store your email address, the chosen language and the time of signup — nothing else. We use the address solely for the Selnau newsletter and do not pass it on. Unsubscribe any time by email to hello@selnau.xyz; the address is then deleted. [If a newsletter service is used: add provider and location.]

Abuse protection

To protect the forms against automated submissions we store, for 24 hours, a salted hash (never the plain text) of the IP address a form was sent from. It is deleted automatically afterwards.

Service providers

To run the website we work with providers that process data on our behalf:

Vercel Inc., USA — hosting, delivery of the website and file storage. Uploaded portfolio PDFs are stored there under random, unlisted addresses.

Neon Inc., USA — database; the data is held on servers in Frankfurt (EU).

Postmark (ActiveCampaign LLC), USA — sending of confirmation and notification emails.

Data may be transferred to the USA in the process. The providers commit contractually to adequate data protection (standard contractual clauses or the Swiss-U.S. Data Privacy Framework). [Check the providers’ contracts/certifications.]

Cookies and local storage

The website sets a single cookie ("selnau-locale", one year) that remembers the chosen language, plus one entry in the browser’s local storage ("selnau-theme") for light/dark mode. Both are technically necessary and contain no personal data. There are no advertising or tracking cookies.

Your rights

You have the right to information about your data, to rectification, deletion and data portability, and to withdraw consent at any time. Write to hello@selnau.xyz. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Changes

We update this policy when the website or the law changes. The version published here applies; the date of the last change is shown at the top.