Privacy

Last updated: October 2026

Controller

The controller responsible for processing personal data in connection with this website and our services is:

Phone: +41 79 890 06 94
Email: antonio.nigro@an2partners.com

Principles

Protecting your privacy matters to us. We process personal data carefully, confidentially and in accordance with the Swiss Federal Act on Data Protection (FADP). Where the General Data Protection Regulation of the European Union (GDPR) applies, for example for clients in Germany or Austria, we also take its requirements into account.

This policy explains what personal data we process, for what purposes, and what rights you have.

What data we process

We process personal data that you provide to us voluntarily, as well as data that arises technically when you visit our website. This includes in particular:

• first and last name, company and position
• email address and phone number
• the content of your messages and appointment requests
• technical data when you visit the website, e.g. IP address, browser type, operating system, date and time of access
• with your consent: data on your use of the website (see “Cookies and analytics”)

Purposes and legal bases

We process personal data in particular in order to

• respond to your enquiries and communicate with you,
• arrange and hold initial conversations and appointments,
• provide and invoice our consulting, workshop and coaching services,
• maintain existing client relationships,
• with your consent, analyse the use of our website and improve what we offer,
• ensure the secure operation of the website and
• comply with legal obligations.

Where the GDPR applies, we rely on the following legal bases: the preparation and performance of a contract (Art. 6(1)(b) GDPR), legitimate interests, for example in operating the website securely and in maintaining business contacts (Art. 6(1)(f) GDPR), legal obligations (Art. 6(1)(c) GDPR) and your consent, where we ask for it (Art. 6(1)(a) GDPR).

Website and hosting

Our website is provided via Cloudflare, Inc. (USA). When you access the website, Cloudflare processes technically necessary data such as your IP address, date and time, the page requested and browser information. This data is used exclusively to deliver the website, for security and to protect the website against attacks.

The fonts are embedded directly in the website. No fonts are loaded from third-party providers when you visit.

Cookies and analytics

Necessary technologies

For our website to work, we store your decision on cookies and analytics in your browser’s local storage (entry “an2_consent” containing your choice, the time and the version of our consent request). This entry is not transmitted to us or to third parties. It remains until you change your decision or delete it in your browser, for no longer than twelve months. After that, we will ask you again.

The 4C Check on our website is evaluated exclusively in your browser. Your answers are neither transmitted to us or to third parties nor stored.

Google Analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, Google Analytics is not loaded and no data is transmitted to Google.

Google Analytics sets cookies (_ga and _ga_S6VC2S9R1B) that make it possible to recognise returning visits and to analyse the use of the website. In particular, the following data is collected: pages viewed and time spent, the source of the visit (e.g. search engine, advertisement or referring website), device type, browser and operating system, approximate location (e.g. country, region or city), clicks on our contact options (appointment booking, email, phone, WhatsApp) together with the area of the page in which the click occurred, and, where enabled in Google Analytics, scroll depth, clicks on external links and downloads (e.g. of our terms and conditions). We do not transmit names, email addresses, phone numbers or message contents to Google.

According to Google, data from devices in Switzerland and the EU is collected through domains and servers in the EU, Switzerland or the United Kingdom before it is forwarded to Google Analytics servers for processing. IP addresses are used only to derive the approximate location, are discarded immediately and are not stored. We have disabled Google signals and features for personalising advertising. We do not link Google Analytics to advertising services.

We use Google Analytics to understand how our website is used, which content is helpful and how visitors find us, and to improve what we offer and our website. The basis for this is your consent. Where the GDPR applies, we rely on Art. 6(1)(a) GDPR.

By default, the Google Analytics cookies are deleted automatically two years after your last visit, unless you delete them earlier or withdraw your consent. For event-level and user-level data, we have set a retention period of 14 months in Google Analytics. After this period, this data is deleted automatically. The period is not extended when you visit our website again. It does not apply to aggregated analyses and standard reports in Google Analytics that do not relate to individual users; these may be retained for longer. Google may also transfer data to Google LLC in the USA. In this respect, the information under “Transfers of data abroad” applies.

Further information can be found in Google’s privacy policy and in Google’s information on data privacy in Google Analytics.

Your choice and withdrawal

On your first visit, we ask whether you allow Google Analytics. “Accept all” and “Necessary only” are equivalent options; Analytics is not preselected. You can give or withdraw your consent at any time with effect for the future: via the “Cookie settings” link in the footer of every page or directly here. If you withdraw your consent, Google Analytics is deactivated and the Google Analytics cookies are deleted in your browser.

Where the German Telecommunications Digital Services Data Protection Act (TDDDG) applies, we store your choice on the basis of Section 25(2) No. 2 TDDDG, as this is strictly necessary for the service you have requested. Google Analytics accesses your device only with your consent under Section 25(1) TDDDG.

Contact by email

If you contact us by email, we process your details (for example your name, contact details and the content of your message) in order to respond to your enquiry and for any follow-up questions. We do not use a contact form.

Online appointment booking

To arrange initial conversations, we use Google’s appointment scheduling (Google Calendar, Google Ireland Ltd. or Google LLC, USA). When you make a booking, the data you provide is transmitted to Google and used exclusively to organise and hold the appointment. Google’s privacy provisions also apply.

Phone and WhatsApp

You can also contact us by phone or via WhatsApp. When you use WhatsApp, data is processed by the provider WhatsApp Ireland Ltd. or Meta Platforms, Inc. Using this channel is voluntary. If you do not wish to use it, please choose email or phone.

Links to LinkedIn

Our website links to Antonio Nigro’s LinkedIn profile. These are simple links; data is only transmitted when you open the link. LinkedIn’s privacy provisions then apply.

Service providers we use

For our business activities, we use carefully selected service providers that process personal data only on our behalf and to the extent necessary:

• Google Workspace (Gmail, Google Calendar, Google Drive) for communication, scheduling and storage
• Folk (CRM) for managing client and business contacts
• Cloudflare for hosting and security of the website
• Google Analytics (Google Ireland Limited) for analysing website use, only with your consent

Disclosure of data

We disclose personal data only if this is necessary to provide our services, if we are legally obliged to do so, if you have consented, or if we use service providers as described in this policy. We do not sell personal data.

Transfers of data abroad

Some service providers are based or have servers outside Switzerland, in particular in the EU and the USA (e.g. Google, Cloudflare). Transfers take place only to countries with adequate data protection, on the basis of a certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework, or on the basis of standard contractual clauses.

Retention

We retain personal data only for as long as necessary for the purposes stated or as required by statutory retention obligations (e.g. ten years for business records under Swiss law). After that, the data is deleted or anonymised.

Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is encrypted throughout (HTTPS). However, complete security of transmission over the internet cannot be guaranteed.

Your rights

Within the scope of applicable data protection law, you have in particular the right to

• request information about the personal data we process about you,
• have inaccurate data corrected,
• request the deletion of your data or the restriction of its processing,
• object to processing,
• receive your data in a commonly used format (data portability) and
• withdraw consent you have given at any time with effect for the future.

We do not make automated individual decisions.

For any request, an email to antonio.nigro@an2partners.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, it is the supervisory authority of your place of residence or work.

Changes

We may amend this privacy policy at any time, in particular in the event of new services or changes in legal requirements. The version published on this website at the relevant time applies.