Privacy Policy

This policy explains how Prospecter Ventures AG processes personal data when you visit the Alembic website at alembic.ch, sign up to follow the build, or apply for early access. It does not cover the Alembic product itself, which will have its own policy before anyone can sign up.

1. Who is responsible

The controller of your personal data is:

You can contact us at this address with any question about this policy or your data.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to our processing, for example because we offer the website to people in the EU, we also comply with it, and the legal bases below refer to the GDPR.

2. Visiting the website

When you visit the website, your browser automatically sends connection data so the page can be delivered. This includes your IP address, the date and time of the request, the page or file requested, the referring page, your browser and operating system, and the HTTP status and size of the response.

We use this data only to deliver the website, keep it secure and stable, and investigate misuse. It is written to server logs, which are deleted after 14 days. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

The website is hosted on Amazon Web Services (AWS) servers in Frankfurt, Germany (region eu-central-1). Fonts are served from our own server; no request is made to Google Fonts or any other font service.

3. Cookies and similar technologies

The website sets one cookie: NEXT_LOCALE, which remembers the language version of the site. It contains no personal information, is strictly necessary for the site to work, and expires at the end of your session.

We do not use advertising cookies, tracking pixels, fingerprinting or third-party analytics on the website.

4. Following the build (newsletter)

If you sign up to follow the build, we process your email address to send you an occasional note about what we have shipped and learned, roughly monthly.

• How sign-up works. We use a double opt-in. When you enter your email address, we store it with the time of your request and send you an email with a confirmation link, both through Amazon Web Services in Frankfurt. Only when you click the link is your address added to the list. If you don't confirm within 7 days, we delete the request.
• Provider. Once you have confirmed, the list and the emails are run by Loops (Loops.so, Inc., United States), which processes your email address and sign-up details on our behalf.
• Opens and clicks. Our emails may measure whether they were opened and which links were clicked, so we can see which notes are useful. You can prevent this by turning off images in your email program.
• Unsubscribing. Every email contains a one-click unsubscribe link. You can also write to us at the address above.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. We keep your address until you unsubscribe, and then delete it from the list.

5. Applying for early access

If you apply, we process your name, email address and the message you write, together with the time of your application.

• Where it goes. Your application is stored in a database (Amazon DynamoDB) on AWS servers in Frankfurt, and a copy is emailed to our team through Amazon Simple Email Service (SES) in the same region.
• What we use it for. To read your application, reply to you and, if it fits, set up your early access.
• Legal basis. Steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in replying to you (Art. 6(1)(f) GDPR).
• How long we keep it. Until 24 months after our last contact with you, or until you ask us to delete it, whichever comes first. If we start working together, the early-access agreement sets how long we keep it from then on.

6. Who we share data with

We share personal data only where the law allows it, for example with your consent, to meet a legal obligation, or to defend legal claims.

We use service providers who process data on our behalf and under our instructions:

We have a data processing agreement with both: the AWS one is part of its service terms, and Loops publishes its agreement at loops.so/dpa.

We do not sell personal data, and we do not share it with anyone to build products for others.

7. Transfers outside Switzerland and the EU

AWS stores our data in Frankfurt, Germany. Germany is recognised by Switzerland as providing adequate data protection.

Loops is based in the United States. Transfers to Loops rely on the standard contractual clauses approved by the European Commission, with the adjustments for Swiss law recognised by the Federal Data Protection and Information Commissioner, as set out in Loops' data processing agreement.

8. How long we keep data

We keep personal data only as long as we need it for the purposes above, then delete it, unless the law requires us to keep it longer or we need it to establish, exercise or defend legal claims.

9. Your rights

Under the FADP and, where it applies, the GDPR, you have the right to:

• ask what personal data we hold about you and receive a copy;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to our processing, including at any time to direct marketing;
• receive your data in a portable format;
• withdraw any consent you have given, with effect for the future.

To exercise these rights, write to us at info@prospecter.com. We keep a record of such requests and our replies for up to three years, to show that we handled them properly.

You also have the right to complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority in the country where you live or work, or where you think an infringement happened.

10. Security

Connections to the website are encrypted (HTTPS). Data is stored on AWS in Frankfurt with access limited to the people and systems that need it.

11. Changes to this policy

We will update this policy when the website or the law changes, and we will change the version and date at the top when we do. The Alembic product will have its own privacy policy before anyone can sign up.