Last updated: September 29, 2026
This privacy policy explains how personal data is processed when you visit steffenschaffhausen.com, create an account, get in touch or make a purchase. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Steffen J. Schaffhausen
Ursprungstrasse 1B
8044 Zurich
Switzerland
Email: steffen.schaffhausen@googlemail.com
For any question about your data or to exercise your rights, simply write to the email address above.
2. Visiting the website
Hosting and server logs. This website is hosted by Infomaniak Network SA, Geneva, Switzerland. When you open a page, the server automatically records technical information: IP address, date and time, the page requested, the referring page, browser and operating system. This is necessary to deliver the website and keep it secure (e.g. to detect attacks). The logs are kept for a limited period and then deleted, unless they are needed to investigate a security incident.
Legal basis (GDPR): legitimate interest in a secure and working website (Art. 6(1)(f)).
Encryption. The entire website is delivered over an encrypted connection (HTTPS/TLS).
Fonts. Fonts are served from this website’s own server. No connection is made to Google or other font providers.
3. Account and sign-in
Most of this website is available to registered members only. When you create an account, the following data is processed:
- username and email address,
- your password (stored only in encrypted, hashed form),
- date of registration and technical sign-in data (e.g. time of the last sign-in),
- which member areas are unlocked for your account.
This data is used to provide your account, give you access to the members’ area and send you emails related to your account (e.g. setting or resetting your password). Your account data is kept as long as your account exists. You can ask for your account to be deleted at any time.
Legal basis (GDPR): performance of a contract, i.e. providing the account you requested (Art. 6(1)(b)).
4. Cookies
Cookies are small text files stored by your browser. This website uses two kinds:
Strictly necessary cookies are needed for the website to work and cannot be switched off. They do not require your consent.
| Cookie | Purpose | Duration |
|---|---|---|
| wordpress_test_cookie | Checks whether your browser accepts cookies before sign-in | Session |
| wordpress_logged_in_…, wordpress_sec_… | Keep you signed in and protect your session | Session, or 14 days with “Keep me signed in” |
| sjs_consent | Stores your cookie choices so you are not asked again | 12 months |
| Stripe (__stripe_mid, __stripe_sid) | Fraud prevention during payment, only on checkout | Up to 1 year / 30 minutes |
Analytics cookies are only set if you agree in the cookie banner (see section 7):
| Cookie | Purpose | Duration |
|---|---|---|
| _pk_id.… | Recognises a returning browser with a random ID (no name or email) | 13 months |
| _pk_ses.… | Groups the pages you view into one visit | 30 minutes |
| _pk_ref.… | Remembers which website you came from | 6 months |
You can change or withdraw your choice at any time via Cookie settings. When you withdraw, the analytics cookies are deleted.
Legal basis (GDPR): necessary cookies – legitimate interest (Art. 6(1)(f)); analytics cookies – your consent (Art. 6(1)(a)).
5. Contact form and email
If you use the contact form or write an email, your name, email address and message are processed to answer your request. Your message is kept only as long as needed to handle it and any follow-up questions, and then deleted.
Legal basis (GDPR): legitimate interest in answering your request, or steps prior to a contract (Art. 6(1)(f) and (b)).
6. Purchases and payments
Some member areas can be unlocked by purchase. Payments are handled by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland). You enter your payment details directly on Stripe’s secure checkout; this website never sees or stores your full card or bank details.
This website receives from Stripe: your name, email address, billing country or address, the item purchased, amount, date and payment status. This is used to unlock the purchased area, issue receipts and keep accounting records. Accounting records are kept for 10 years as required by Swiss law.
Stripe processes data as an independent controller for its own purposes, such as fraud prevention and meeting legal obligations, and may transfer data to Stripe, Inc. in the USA (see section 8). Details: stripe.com/privacy.
Legal basis (GDPR): performance of a contract (Art. 6(1)(b)) and legal obligations such as bookkeeping (Art. 6(1)(c)).
7. Analytics
With your consent, this website uses Matomo, an open-source analytics tool, to understand how pages are used, for example which pages are visited and for how long. Matomo runs on this website’s own server at Infomaniak in Switzerland; no analytics data is passed to the makers of Matomo or any other third party. IP addresses are shortened (anonymised) before storage. The results are used only in aggregated form to improve the website. Analytics data is deleted after 14 months.
If you do not agree, the Matomo script is not loaded, no analytics cookies are set and no analytics data is collected. You can withdraw your consent at any time via Cookie settings.
Legal basis (GDPR): your consent (Art. 6(1)(a)).
8. Service providers and transfers abroad
Personal data is not sold. It is shared only with service providers who help run this website, and only as far as necessary:
- Infomaniak Network SA, Switzerland – hosting and sending of account emails (e.g. password links),
- Google (Google Ireland Ltd., Ireland, and Google LLC, USA) – email provider for messages you send to the address above,
- Stripe – payments (EU and USA),
Switzerland is recognised by the European Commission as providing an adequate level of data protection. Where data is transferred to the USA, this happens on the basis of the EU-US and Swiss-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
9. Your rights
You have the right to:
- find out which personal data about you is processed (access),
- have incorrect data corrected,
- have your data deleted, unless it must be kept by law,
- restrict or object to processing,
- receive your data in a common, machine-readable format (portability),
- withdraw any consent you have given, with effect for the future.
Write to steffen.schaffhausen@googlemail.com. You may also lodge a complaint with a supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch), or in the EU the authority in your country of residence.
10. No automated decisions
No decisions based solely on automated processing, including profiling, are made about you.
11. Changes
This privacy policy may be updated when the website or the law changes. The current version is always available on this page.