BAI-EPN

Legal

Privacy policy

This website is built to need very little about you. What it does handle is set out below, in the order it happens.

Who is responsible

Swissi Holding AG, Baarerstrasse 78, 6300 Zug, Switzerland, operates this website and decides how the data described here is handled. Questions and requests about your data go to privacy@swissi-ai.institute. Further company details are in the imprint.

Contact for the European Union: Dr. Walter Kurz is our contact person for data protection matters concerning people in the European Union and the European Economic Area, reachable at privacy@swissi-ai.institute.

We process personal data under the Swiss Federal Act on Data Protection and, where it applies to you, the EU General Data Protection Regulation. For each use below we name its legal basis under the GDPR. No decision about you is made by automated means alone.

When you visit

Every request to a website leaves a technical trace: the IP address it came from, the page requested, the time, and the browser and device type. Our hosting provider records this so the page can be delivered and so a fault or an attack can be recognised. It is not used to build a profile of you or to identify you. Legal basis: our legitimate interest in delivering and securing the website (Art. 6(1)(f) GDPR).

Fonts, images and videos are served from this website itself. Nothing on these pages is loaded or embedded from a third party, and there is no analytics, advertising or tracking.

Cookies

The public pages set no cookies. One strictly necessary cookie is set when an investor signs in to the investor area:

  • __Host-bai-investor: a signed session marker that keeps you signed in. It contains no personal details, expires after eight hours and is removed when you sign out.

Because it is needed to provide the area you asked to open, it does not require separate consent. Legal basis: our legitimate interest in restricting the investor area to authorised visitors (Art. 6(1)(f) GDPR).

Investor access

Access to the investor area is granted by password. To protect it against guessing, sign-in attempts are counted per IP address for fifteen minutes. The count is held in the server's working memory under a one-way digest of the address and then discarded. Passwords you enter are checked and never stored or logged.

Company waitlist

Companies that join the BAI-EPN pilot waitlist give us their company name, contact name, work email and profile details so we can review pilot interest and contact them about participation. Legal basis: your consent to waitlist contact and steps you request before a possible pilot agreement (Art. 6(1)(a) and (b) GDPR). The waitlist privacy notice describes each detail, how long it is kept and how to stop waitlist emails.

When you write to us

Your email address and whatever you tell us arrive in a mailbox and stay there while the matter is open, and afterwards for as long as the law asks a company to keep its correspondence. Legal basis: answering your request, preparing an agreement you ask about, and statutory retention (Art. 6(1)(b), (c) and (f) GDPR).

Service providers

We work with infrastructure providers who act on our instructions and may not use the data for their own purposes:

  • Vercel: hosting and request handling for this website.
  • Neon: database for waitlist records.
  • Resend: delivery of waitlist emails.
  • Hostinger: our mailboxes, including the one that receives your emails.

These providers process data in the United States and the European Union. For the United States, transfers rest on the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the standard contractual clauses.

How long it is kept

Each purpose sets its own limit. Technical records are kept while they are useful for running and securing the site, the sign-in cookie for eight hours at most, waitlist details as set out in the waitlist notice, and correspondence for as long as the matter and statutory retention periods require. What is no longer needed is deleted.

Your rights

You can ask what we hold about you, have it corrected or deleted, ask that a particular use be restricted or stopped, object to processing, and receive what you gave us in a portable format. Where processing rests on your consent, you can withdraw it at any time. Write to privacy@swissi-ai.institute and you will get an answer.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), and in the European Economic Area the authority where you live or work.

Changes to this page

This page is revised when what we do changes. The date below shows the latest revision.

Last revised on 26 September 2026.