Test site: This website does not offer anything for sale; it serves as a sample.
In short: This website does not set cookies, does not store anything on your device and does not use any analytics or advertising tools. When accessed, our host in the USA processes technically necessary connection data. If you write to us, we only use your details to answer your enquiry.
Responsible
Responsible for data processing is Andres Krattinger (nextcoach), Holunderstrasse 27, 4153 Reinach, Switzerland. Contact: via the contact form on this page.
Contact form and e-mail
- Data: Name, e-mail address, optionally business, your message.
- Purpose: Answering your enquiry. The form does not store anything on the web server; the details are transmitted to us as an e-mail and deleted once processed.
- Protection against misuse: To protect against spam, we store a pseudonymised check value (hash) of your IP address together with the time of the enquiry for a maximum of one hour (maximum five enquiries per hour); after that it is deleted.
Question window (Bob)
- Data: Your question verbatim, the parts of this page that were found for it, the course of the conversation so far and the time. We do not ask for names or contact details here.
- Purpose: Answering your question from the content of this page.
- Route: The question is stored on the web server (GoDaddy, USA); a computer on our premises in Switzerland collects it, answers it with a local language model and puts the answer back. A third-party language model is not used.
- Retention: Question and answer are deleted after 24 hours.
- Protection against misuse: To protect against overload, we store a pseudonymised check value (hash) of your IP address for a maximum of one hour; six questions per minute are permitted.
Basis (Switzerland)
We process your information according to the principles of Art. 6 FADP: only for the stated purpose and only as long as necessary. Consent is not required for this.
Legal bases (for visitors from the EU)
Answering your enquiry: Art. 6 para. 1 lit. b GDPR (pre-contractual measures). Server logs and protection against misuse: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation). Question window (Bob): Art. 6 para. 1 lit. f GDPR – legitimate interest in answering questions about our own website without taking a detour via a third-party provider.
Hosting and recipients
The website is hosted by GoDaddy (USA) and delivered via its protection service Sucuri (USA). In its server logs, the host processes technically necessary connection data (IP address, time, accessed page, browser identifier); the retention period depends on the provider.
The host adds its own measurement script for performance measurement to every delivered page. Our security policy (Content-Security-Policy) prevents this script from being executed in your browser; as a result, no data is transmitted to the host.
Contact requests are delivered by e-mail to our mailbox at Outlook.com (Hotmail), a Microsoft service. For users in Switzerland the responsible entity is Microsoft Ireland Operations Limited (Ireland); Microsoft may also store and process the data in the United States and processes it under its own privacy statement (Microsoft Privacy Statement, last updated September 2026). We delete requests once they have been dealt with; according to the provider, deleted messages may remain in its systems for up to 30 days.
Disclosure abroad
The host and e-mail service can process data in the USA. An adequate level of protection is guaranteed for the host: GoDaddy Operating Company, LLC is certified under the Swiss-US Data Privacy Framework (checked on 24 September 2026 in the register of the US Department of Commerce, certification valid until 1 December 2026); as GoDaddy Media Temple, Inc., the protection service Sucuri belongs to the same company and is co-certified. For the e-mail service an adequate level of protection is ensured: Microsoft Corporation is certified under the Swiss-U.S. Data Privacy Framework (verified on 3 October 2026 in the register of the U.S. Department of Commerce, entry Microsoft Corporation, status «Active - Re-certification under Review», i.e. active with renewal under way, next renewal due 31 August 2027); Microsoft Ireland Operations Limited is established in Ireland, a country with adequate data protection (Annex 1 of the Swiss Data Protection Ordinance). For visitors from the EU: Microsoft Corporation is also certified under the EU-U.S. Data Privacy Framework (adequacy decision (EU) 2023/1795).
Cookies
This website does not use cookies or any comparable technologies (for example local storage in the browser).
Your rights
You can request information about your data at any time (Art. 25 FADP, Art. 15 GDPR), its release (Art. 28 FADP, Art. 20 GDPR) as well as rectification and deletion (Art. 32 FADP, Art. 16 and 17 GDPR); visitors from the EU can additionally request the restriction of processing (Art. 18 GDPR). Write to us via the contact form. You can complain to the Federal Data Protection and Information Commissioner (FDPIC) or to a supervisory authority in the EU (Art. 77 GDPR).
Right to object: Insofar as we process data on the basis of a legitimate interest (server logs, abuse protection, question window), you can object to this processing at any time for reasons arising from your particular situation (Art. 21 GDPR).
As of: 3 October 2026
