Skip to content
Bailey AI Consulting

Legal

Privacy Policy

Last updated: November 2026

Protecting personal data and respecting data sovereignty are core operational principles of Bailey AI Consulting GmbH. This Privacy Policy informs you about how personal data is processed when you visit this website or contact us, in accordance with the Swiss Federal Act on Data Protection (FADP / revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for data processing on this website is:

Bailey AI Consulting GmbH
Roosstrasse 54
8832 Wollerau, Switzerland
Email: contact@baileyaiconsulting.com

2. Visiting This Website

When you access this website, our hosting and edge infrastructure technically processes connection data required to deliver content securely and protect against cyberattacks (such as DDoS incidents). This data includes:

  • IP address of the requesting device
  • Date, time, and URI of the request
  • Browser type, version, and operating system
  • HTTP referrer header

Privacy by Design:

  • This website does not deploy tracking, targeting, or advertising cookies.
  • No third-party web analytics tools (such as Google Analytics) are embedded.
  • Web fonts, stylesheets, and scripts are self-hosted directly from our infrastructure rather than loaded from external third-party CDNs.
  • Where automated abuse protection is used on web forms, we use privacy-preserving human-verification solutions (Cloudflare Turnstile) that operate without storing cross-site tracking profiles.

3. Contact Form and Business Communication

When you contact us via the contact form or direct email, we collect the details you provide (e.g., name, business email address, company name, scope of your inquiry, and message content).

  • Purpose: To evaluate, answer, and process your business inquiry, and, where applicable, to prepare and execute contractual consulting engagements.
  • Legal Basis: Under the FADP, our legitimate business interest in processing your communication and the fulfillment or preparation of a contract. Under the GDPR, Art. 6(1)(b) (pre-contractual/contractual measures) and Art. 6(1)(f) (legitimate interest).

4. Service Providers and International Data Transfers

We partner with selected service providers to maintain the security, reliability, and administration of our digital infrastructure.

Personal data is primarily processed in Switzerland and the European Union / European Economic Area (EU/EEA). To operate our edge infrastructure, security shielding, and cloud enterprise services, certain technical data may be processed by providers operating internationally or based in the United States (such as Cloudflare, Inc. for edge distribution/DDoS mitigation, and enterprise cloud communication platforms).

Where personal data is transferred to countries that do not have an adequacy decision recognized by the Swiss Federal Council or the European Commission, transfers are conducted under recognized legal safeguards pursuant to Art. 16 revDSG and Art. 46 GDPR, specifically:

  • The Swiss–US Data Privacy Framework and the EU–US Data Privacy Framework, where the recipient is certified; and/or
  • Standard Contractual Clauses (SCCs) approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission, supplemented by technical encryption and organizational measures.

5. Storage and Retention

Personal data submitted through inquiries is retained only as long as necessary to resolve your request and conclude any subsequent commercial discussions. If a formal consulting engagement or contract materializes, correspondence and relevant transactional data are retained in compliance with Swiss statutory record-retention requirements (e.g., Art. 958f of the Swiss Code of Obligations, prescribing a 10-year retention period for commercial correspondence and accounting records). Inactive inquiries with no statutory retention obligations are periodically deleted.

6. Your Rights

Under applicable data protection law (revDSG and GDPR), you have the following rights regarding your personal data:

  • Right of access: You may request confirmation of whether and which personal data concerning you is processed.
  • Right to rectification: You may demand the correction of inaccurate or incomplete data.
  • Right to erasure: You may request the deletion of your personal data, provided statutory retention obligations or overriding legitimate interests do not apply.
  • Right to restriction and objection: You may object to the processing of your data or request that processing be restricted.
  • Right to data portability: Where applicable, you may request your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, contact us directly at contact@baileyaiconsulting.com.

You also have the right to lodge a complaint with the competent supervisory authority:

  • In Switzerland: Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern.
  • In the EU: The relevant national data protection supervisory authority in your member state.

7. Updates

We may update this Privacy Policy periodically to reflect technological adjustments or changes in legal requirements. The version published on this page is the current applicable version.