Privacy policy

Privacy policy

This policy explains how we process your personal data. It follows the EU General Data Protection Regulation (GDPR), the revised Swiss Federal Act on Data Protection (revFADP) and, for visitors from the United States, California consumer privacy law (CCPA/CPRA).

1. Controller

The controller for data processing on this website is Kern Operations LLC, operator of the brand “ArmTri”.

2. Which data we process

a) Contact form and team builder. When you use the contact form or the team builder (“Assemble my ArmTri team”), we process the data you enter: name, email address, company, your message and the choices you make (industry, product, team size, deadline). Purpose: answering your request and preparing a proposal for your team. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual steps) and our legitimate interest in answering under lit. f; for Switzerland Art. 31 revFADP.

b) Server log files. When you open this website, technical access data is processed automatically (IP address, date and time, page requested, browser type, referrer). Purpose: secure and stable operation and defence against attacks. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

c) Cloudflare Turnstile (spam protection). To protect the contact form against automated abuse we use “Cloudflare Turnstile” by Cloudflare, Inc. It is only loaded when you start using the form, not when you merely view the page. Turnstile checks technical signals (including IP address and browser signals) to tell whether an entry comes from a person, without advertising tracking and without persistent cookies. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a working, spam-free form).

d) Fonts, film and scripts. Fonts, the film and scripts are served from our own server. Merely viewing the pages loads nothing from third-party servers and does not pass your IP address to third parties. The film only loads when you press play.

e) Hosting and email delivery. The website is hosted with Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, with data centres in the EU among other places). Cloudflare processes the access data named under b on our behalf. Messages sent through the contact form are delivered to our mailbox by the email service Resend (Resend, Inc., USA). Legal basis: Art. 6 para. 1 lit. f GDPR.

3. Cookies

This website sets no analytics, marketing or tracking cookies and uses no analytics services. A cookie banner is therefore not required. The only exception is the spam protection of the contact form (see 2 c).

4. Recipients and processors

Your data is passed only to service providers that support us in providing the website and handling your request (hosting and spam protection by Cloudflare, email delivery by Resend). They are bound by contract to confidentiality and to process data only on our instructions. Your data is not sold. Freelancers proposed for your team only receive the project information needed to assemble the team, not your contact data, unless you agree.

5. Transfers to third countries (USA)

The controller is based in the United States, and hosting, spam protection and email delivery may transfer data to the United States. Transfers rely on the Standard Contractual Clauses of the European Commission or on the EU-U.S. and Swiss-U.S. Data Privacy Framework where the provider is certified. For Switzerland the corresponding safeguards under the revFADP apply.

6. Storage period

We keep requests sent through the contact form and the team builder as long as needed to handle your request and a possible business relationship, and delete them afterwards unless statutory retention duties require otherwise. Server log data is kept only briefly for security purposes.

7. Your rights (EU/GDPR and Switzerland/revFADP)

You have the right to access the data processed about you and to rectification, erasure, restriction of processing, data portability and objection to processing. You may withdraw consent at any time with effect for the future. To exercise these rights, write to us through our contact form. You may also lodge a complaint with a supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

8. California residents (CCPA/CPRA)

We do not sell or share personal information for cross-context behavioural advertising. California residents have the right to know, delete and correct their personal information and to non-discrimination for exercising these rights. Requests can be sent through our contact form.

9. Changes

We may update this policy when our website or the law changes. The current version is always available on this page.

Last updated: 16 October 2026