What we collect,
and why.
Written against what this site actually stores, rather than from a template. If something here does not match what happens, that is a fault — tell us and it gets fixed.
Who is responsible
Bionic Thinking SARL, Vevey, Switzerland, is the controller for the personal data described here. For anything on this page — a question, a correction, or a request to erase your data — write to hello@bionicthinking.ch. A person reads that inbox.
Because the audience is mostly in the EU and Switzerland, this notice is written to satisfy both the GDPR and the Swiss FADP. Where the two differ, the stricter reading applies.
There are no cookies
This site sets no cookies, runs no analytics or advertising scripts, and there is nothing to consent to on arrival — which is why you were not asked. Reading these pages leaves nothing behind on your device and nothing about you in our database.
The one exception is the readiness scorecard, and only once you start it. It stores two values in your browser’s sessionStorage: a random identifier for the sitting, so a refresh does not look like a second person, and how you arrived, so we can tell which links bring people to it. Both are deleted by your browser when you close the tab. Neither identifies you, and neither follows you between visits.
The readiness scorecard
Completing the scorecard writes one row to our database. It happens when your result appears, before any email address is asked for — most people read their score and leave, and those answers are what tell us what the market actually looks like.
| What | Why | Lawful basis |
|---|---|---|
| Your nine answers, the total, the three dimension scores and the band | To show your result, to build your report, and to understand how ready the market is in aggregate | Legitimate interest |
| Your IP address, and the country, region, city and time zone our host derives from it | To know roughly where interest comes from, and to recognise abuse of the form | Legitimate interest |
| Your browser’s user-agent and language, the page that referred you, and any campaign tags in the link you followed | To tell which channels bring people here, and to see the page working on real devices | Legitimate interest |
| A session identifier, when you started and finished, and how long it took | To tell an abandoned attempt from a completed one, and to see whether the questions are too long | Legitimate interest |
| Your email address, when you asked for it, and whether the report sent or failed | To send you the PDF you asked for, and to notice when one does not arrive | To provide what you requested |
Your email address is not added to any list unless you tick the separate box that says so. The report is sent either way. If you do tick it, we store the exact wording you agreed to, word for word, so that changing the wording later cannot change what you consented to.
The newsletter
Ticking the box does two things: it subscribes your address with Buttondown, who send you a confirmation email you also have to act on, and it writes a consent record here — your address, the page you were on, your IP address, and the wording you agreed to.
The lawful basis is your consent, and you can withdraw it at any time using the unsubscribe link in any email, or by writing to us. Withdrawing stops the emails. The consent record itself is kept, because its whole purpose is to evidence that the subscription was asked for.
Where it goes
Four companies process data on our behalf. We do not sell anything to anyone, and nothing here is shared for advertising.
- Supabase — the database holding everything above. Hosted in the European Union.
- Netlify — serves these pages and runs the two small programs behind the scorecard. A United States company; its servers see the same request data any web host would.
- Resend — delivers the report email. Configured to its EU region, so bounce handling stays in Europe.
- Buttondown — the newsletter, and only if you tick the box. A United States company.
Transfers to the United States rely on the standard contractual clauses in those providers’ data processing terms.
How long it is kept
The rule the law sets is that personal data is kept no longer than the purpose it was collected for requires, and that we tell you either the period or how we arrive at it. There is no statutory number. These are the periods we hold ourselves to, and the reason for each.
- Scorecard submissions — 24 months, then deleted. The purpose is to see how ready the market is and how it changes; two years covers two compliance cycles, and anything older tells us about a regulatory landscape that no longer exists.
- Newsletter consent records — while you are subscribed, and three years after you unsubscribe. The purpose is to be able to show that you asked to be on the list, and a record deleted the moment it might be questioned is not evidence of anything. Three years is the ordinary limitation period for the kind of complaint it would answer.
- Email correspondence — kept while the conversation is live business, and not used for anything else.
Asking us to delete something does not wait for any of these. See below.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our processing it on the grounds of legitimate interest, ask us to restrict it, or ask for it in a portable form. Where processing rests on your consent, you can withdraw that consent at any time without affecting what was done before.
One email to hello@bionicthinking.ch is enough, and there is no form to fill in. We will answer within a month. Deleting a scorecard submission deletes the whole row, including the answers and the technical details — there is no retained marker that a request was made, because a marker like that is the thing the request was about.
If you think we have handled your data badly, you can complain to the Swiss Federal Data Protection and Information Commissioner, or to the supervisory authority in the EU country where you live.
Changes
When this notice changes the date at the top changes with it. It is reviewed whenever the site starts collecting something it did not collect before, which in practice means whenever the scorecard’s database table gains a column.