Skip to content
01

Privacy

How Swiss Product Studio handles personal data collected through this website, enquiries, bookings, website guide requests and LinkedIn lead forms.

01

Controller

Swiss Product Studio by Kivlenieks, Hardturmstrasse 161, 8005 Zürich, Switzerland, is responsible for the processing described on this page.

For privacy questions, contact [email protected].

02

What we process

We process the information you choose to send us by email or when making a booking request, such as your name, contact details, company information, and the message or context you provide.

Technical data may also be processed when you visit this website, including device and browser information, IP address, requested pages, and the date and time of access. This data is used to operate and secure the website.

For a guide requested on this website, we record the personal LinkedIn URL you submit and its normalized form, the guide requested, request time, website and file languages, and technical request and delivery status. When profile enrichment is enabled, we may retrieve public professional information such as your name, headline and employment history to identify the contact and complete our contact records.

When you request a PDF or other resource through a LinkedIn lead form, we receive the information you submit. Depending on the form, this may include your name, email address, company, job title and answers to additional questions.

We also record the resource requested, the source and date of your submission, and any marketing consent you give, including the wording presented to you. When we email you, we process information needed to deliver the message and handle delivery failures or unsubscribe requests.

03

Cookies and conversion measurement

We use CookieYes to present cookie choices and record your consent preferences. Necessary technology is used to operate the site. You can change your preferences at any time through the consent settings.

We use Plausible Analytics to understand how this website is used. It does not use cookies or collect personal data for advertising. It records page views, referring sites, and basic device information. Plausible’s own privacy information applies to its service.

For website guides, anonymous analytics events identify the guide and whether a request was saved, a download was initiated or the help link was clicked. We do not send your submitted LinkedIn URL, name, contact or request identifiers, or download ticket to Plausible. A download initiation does not establish that you saved or opened the file.

If you consent to advertising cookies, we may load the OpenAI ChatGPT Ads measurement pixel and the LinkedIn Insight Tag to measure whether an advert resulted in an Operations Review booking. We send a booking-conversion event only; we do not send the attendee’s name, email address, meeting time, or meeting link with that event. These providers may process online identifiers and device or browser information under their own privacy terms. If you do not consent, these advertising measurement tools are not loaded and no conversion event is sent.

04

Booking calendar

Our booking page is provided through Cal.com. When you use the calendar, the information you enter is processed by Cal.com and by us to arrange and prepare the meeting.

Where available, an agent-assisted booking feature sends the name, email address, time zone, selected meeting time and any short context you provide to our server-side booking service and Cal.com to arrange the meeting. We do not use that feature to make decisions about you beyond arranging the requested meeting.

05

Website resources, LinkedIn and email follow-up

For website guide requests, we validate the format of your personal LinkedIn URL and save the request before providing a download. Profile existence or ownership is not a condition for delivery, and a submitted URL does not prove that the profile belongs to you. We match known profile URLs to existing contacts without scraping or changing their profile data. Unknown profiles may be enriched separately from public professional information when that process is enabled.

We might reach out to ask for feedback on the guide you requested. No spam or cold selling. We hate those messages too. This request does not subscribe you to marketing. The LinkedIn help button takes you to Karlis’s profile; any message is your choice. We do not request an email address or send a resource email as part of this website flow.

For resources requested through a LinkedIn lead form, we use the information you submit to provide the resource and email you a copy or download link. We may also use it to respond to questions you send us about the resource.

If you separately opt in, we may send you follow-up emails, practical insights about automation and AI, and information about Swiss Product Studio’s services. This consent is optional and is not required to receive the requested resource.

You can withdraw your marketing consent at any time using the unsubscribe link in our marketing emails or by contacting [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

LinkedIn also processes personal data under its own Privacy Policy.

06

Purpose and legal basis

We process personal data to respond to enquiries, arrange meetings, provide services and requested resources, operate and protect our website, and meet legal obligations. We use contact details for the optional marketing emails described above only where you have given consent.

We process personal data in accordance with the Swiss Federal Act on Data Protection. Where the GDPR applies, we rely on Article 6(1)(b) for processing necessary for a contract or steps you request before entering a contract, Article 6(1)(f) for our legitimate interests in responding to enquiries and operating and securing our services, Article 6(1)(c) for legal obligations, and Article 6(1)(a) for consent-based marketing.

07

Retention and sharing

We keep personal data only for as long as needed for the purpose for which it was collected or to meet legal obligations. To prevent duplicate bookings and protect the booking service from abuse, we retain limited technical booking-attempt records: an idempotency key and request digest, status, opaque provider identifiers, timestamps, safe diagnostic codes, and an IP-address-based rate-limit subject. These records do not contain the attendee name, email address, booking context, provider response, or meeting link.

We use specialist providers to operate this process: Cloudflare hosts the website and server-side booking service, Supabase stores the limited technical booking-attempt records in our Switzerland-based project, and Cal.com processes booking details. Where you opt in to advertising measurement, CookieYes records your consent choice and OpenAI and LinkedIn process the conversion measurement. Cloudflare, Cal.com, OpenAI and LinkedIn may process data outside Switzerland, including in the United States. Their privacy information applies to their processing: Cloudflare, Cal.com, OpenAI, and LinkedIn.

08

Lead storage and email delivery

For website guide requests, Supabase stores request and contact data and private guide files. Railway runs the capture, download and background processing service. When profile enrichment is enabled, Apify receives the submitted personal profile URL to retrieve public professional profile information. This processing may involve providers outside Switzerland.

We store LinkedIn form submissions and associated consent records in Supabase, using a database hosted in Zürich, Switzerland.

We use Resend (Plus Five Five, Inc.) to deliver emails. Resend processes recipient email addresses, message content and technical delivery information on our behalf. Its primary processing operations take place in the United States, so email delivery involves processing outside Switzerland.

Resend’s Data Processing Addendum provides for European Commission Standard Contractual Clauses adapted for transfers subject to Swiss data-protection law.

09

Lead retention

Personal data held solely for a website guide request is deleted or anonymized within 90 days from that request, including if no download starts or profile enrichment fails. Download and processing retries do not extend this deadline. Each new request has its own deadline. We remove the expired request’s contribution to contact and profile records, including provider data, unless another unexpired request or a separate documented enquiry, customer relationship or legal purpose requires the relevant data. Independently justified existing CRM records are preserved; a guide request alone does not justify keeping them longer.

For resources requested through a LinkedIn lead form without opting into marketing, we delete your lead record within 90 days after delivery, unless you begin a further enquiry or customer relationship with us, or retention is necessary to meet legal obligations or establish, exercise or defend legal claims.

If you opt into marketing, we retain your contact details for that purpose until you withdraw consent or we determine they are no longer needed. We review marketing contact records at least annually.

After you unsubscribe, we may retain a minimal suppression record to ensure that we respect your choice, and limited evidence of consent where necessary to establish, exercise or defend legal claims. Such records are not used to send marketing.

10

Your rights

You may ask for access to, correction of, or deletion of your personal data, or object to or request restriction of processing where applicable. Contact us at the email address above. You may also have the right to complain to the competent data-protection authority.

11

External links

This website may link to external websites. Their privacy practices are governed by their own notices, not this one.