Privacy Policy

Last updated: 11 April 2026

1. Data Controller

The data controller is Alessandro Brenci, MERCOSUR Trade Hub, Geneva, Switzerland. Contact: [email protected]. Data processing is governed by the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR).

2. Data Collected

We collect the following categories of data: • Identification data: name, surname, email address, company, position — voluntarily provided through our forms (contact, quote, newsletter, training registration). • Browsing data: IP address, browser type, pages visited, visit duration — automatically collected via analytical cookies. • Payment data: transactions are processed by Stripe Inc. We do not store card numbers, CVV, or expiration dates. Only Stripe transaction identifiers are retained. • Communication data: content of messages sent via contact and quote request forms.

3. Purpose of Processing

Your data is processed for the following purposes: • Responding to your contact and quote requests (legal basis: legitimate interest, Art. 6(1)(f) GDPR). • Managing newsletter subscriptions and sending commercial communications (legal basis: consent, Art. 6(1)(a) GDPR). • Processing purchases and managing subscriptions via Stripe (legal basis: performance of contract, Art. 6(1)(b) GDPR). • Managing training and certification registrations (legal basis: performance of contract). • Analysing site traffic to improve our services (legal basis: legitimate interest). • Complying with our legal and tax obligations (legal basis: legal obligation, Art. 6(1)(c) GDPR).

4. Data Recipients

Your data may be shared with the following service providers, strictly within the scope of the purposes described above: • Stripe Inc. (United States) — payment processing, certified Privacy Shield / standard contractual clauses. • Resend Inc. — transactional email delivery. • Manus (platform hosting). • Calendly — appointment scheduling. No data is sold to third parties. Transfers outside Switzerland/EEA are governed by standard contractual clauses (SCCs) or adequacy decisions.

5. Data Retention

• Contact and quote data: 3 years after the last exchange. • Newsletter data: until unsubscription. • Payment data (Stripe identifiers): 10 years (Swiss accounting obligations, Art. 958f CO). • Training/certification data: certificate validity period + 5 years. • Analytical cookies: 13 months maximum. • Navigation logs: 12 months.

6. Your Rights

Under the GDPR and nFADP, you have the following rights: • Right of access: obtain confirmation of the processing of your data and receive a copy. • Right to rectification: have inaccurate or incomplete data corrected. • Right to erasure: request deletion of your data (subject to legal retention obligations). • Right to restriction: restrict processing in certain circumstances. • Right to data portability: receive your data in a structured, machine-readable format. • Right to object: object to processing based on legitimate interest. • Right to withdraw consent: withdraw your consent at any time (newsletter, cookies). To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or the competent supervisory authority in your country of residence.

7. Cookies

Our site uses cookies: • Essential cookies: necessary for site operation (session, authentication). Legal basis: legitimate interest. • Analytical cookies: anonymised audience measurement. Legal basis: consent (via the cookie banner). You can manage your cookie preferences at any time via the consent banner or your browser settings.

8. Data Security

We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, restricted data access, secure hosting, payments processed exclusively by Stripe (PCI DSS certified).

9. Changes

We reserve the right to modify this policy at any time. The date of the last update is indicated at the top of this page. In the event of a substantial change, we will inform you by email or via a notice on the site.

10. Contact

For any questions regarding the protection of your personal data, you can contact us at: