Privacy policy
What happens to personal data you send through this site, on what legal basis, who touches it, and what you can require of us. This is a site with no accounts, no shop and no advertising: the personal data here is what you type into a form, plus what a hosting log records when your browser asks for a page.
Who is responsible
The controller of the personal data described below is Goldblum, the firm behind this site. The address for anything to do with data protection, including any request under the rights section further down, is info@goldblum.ch. It is the only address we publish, and it is the one that reaches the person who deals with these requests.
The registered address of the controller is not published on this site yet. We are not going to invent one here: it is stated in writing to anyone who asks at the address above, and it appears on the engagement documents and on any invoice we issue. When the entity details are settled, they will appear in this section.
What we collect and when
There are four moments at which anything is collected at all: you send the contact form, you send the onboarding questionnaire, you pay an invoice, or your browser simply requests a page. Nothing else on the site collects anything.
The contact form
Your full name, your email address, your country of residence, what the enquiry is about, the question itself, and, where you arrived from a ready-made company listing, the reference of that company. You also tick a box confirming that you have read this notice. Nothing on the form is asked for that we do not need in order to answer you.
The onboarding questionnaire
The questionnaire is longer because it replaces a round of questions. It collects, in four groups:
- Contact: full name, email address, phone number (optional), country of residence, preferred language, and how you prefer to be contacted.
- The company: the type of entity, one to three name options, what the business will actually do, the share capital in euro, the number of shareholders and whether any of them is a company, the number of directors and whether one of them will be resident in Italy, and the reference of a ready-made company where one applies.
- Services: which of the services you want (registered office, business bank account, VAT registration, accounting and annual filings, nominee director, nominee shareholder, trade mark registration, licensing or authorisation, residence permit or founder visa) and, where licensing is ticked, which authorisation.
- Timing and context: when you need the company, a confirmation that the funds are of lawful origin and that documents will be provided on request, and anything else you want us to know.
Some of that is personal data about you, and some of it is information about a company that does not exist yet. Where you name another person, a co-shareholder or a director, you are giving us their personal data, and you should be in a position to do so.
We do not ask for identity documents, passport scans or company documents through the form, and we would rather you did not attach them to a first message. Those are exchanged later, when a specific step actually requires them.
The payment page
The invoice number, the amount and the currency, the payer name and an email address for the receipt. The card number is entered on the payment provider's own checkout page and never reaches this domain: we do not see it and we do not store it.
Fields you do not fill in
Every form carries a few hidden fields: the name of this site, the page the form was sent from, the utm_source, utm_medium and utm_campaign values if the link you arrived by carried them, and the ready-made company reference if you came from a link that had one. There is also a decoy field that a human never sees and never fills in; a submission that fills it is treated as a bot and discarded.
Requesting a page
The site is served by Cloudflare Pages. Serving a page means Cloudflare processes the request: your IP address, the time, the page requested, the browser and operating system it reports, and the country the request came from. That happens whether or not you ever fill in a form, and whether or not you accept analytics, because a page cannot be delivered or protected without it.
The lawful basis for each use
A lawful basis is the reason the GDPR permits a particular use of data. There is one for each thing we do, they are set out below, and only one of them is consent. Where the basis is consent you can withdraw it; where it is not, withdrawal is not the mechanism, and the objection and erasure rights below are.
| Purpose | Data involved | Lawful basis | GDPR |
|---|---|---|---|
| Answering an enquiry and preparing a proposal | Contact form and onboarding fields | Steps taken at your request before entering a contract | Art. 6(1)(b) |
| Getting the form to our inbox and keeping bots out of it | Form content, IP address, the bot check signals | Our legitimate interest in receiving working, non-abusive correspondence | Art. 6(1)(f) |
| Serving the site and keeping it available | Request logs: IP address, time, page, browser, country | Our legitimate interest in the security and availability of the site | Art. 6(1)(f) |
| Taking a payment against an invoice | Invoice number, amount, payer name, email | Performance of the contract you are paying under | Art. 6(1)(b) |
| Keeping the record of a matter we were engaged on | Correspondence and the file | Legal obligation: accounting and anti-money-laundering record keeping | Art. 6(1)(c) |
| Audience measurement and session analytics | Analytics identifiers, pages viewed, coarse location, device | Your consent, given in the banner and withdrawable at any time | Art. 6(1)(a) |
We run no advertising, no profiling and no automated decision-making that produces legal effects, so nothing here rests on Art. 22. We do not process special categories of data under Art. 9 and do not ask for any.
How long we keep it
The exact retention period is not settled, and we would rather say that than publish a number we cannot hold to. The rule we apply in the meantime is this:
- an enquiry that goes nowhere is deleted once it is clear that it has gone nowhere;
- an enquiry that turns into a matter is kept with the file for that matter;
- a file carries statutory record-keeping periods for accounting and anti-money-laundering purposes; those run for years after the work ends and we cannot shorten them at will;
- analytics data lives in the analytics providers' own systems on the retention setting configured there, and is deleted by them when it expires.
The period we apply to each of those is stated in writing on request, at info@goldblum.ch, and once it is fixed it will be written into this section. Asking for it is itself a request under the rights section below, and it costs nothing.
Who else handles it
Nobody sees the content of a form except us and the services that carry it. Those services are processors: they act on our instructions, under the data processing terms each of them publishes, and they are not free to use what they see here for their own purposes.
| Processor | What it does | What it sees |
|---|---|---|
| Cloudflare (Pages) | Hosts and serves the site | The request: IP address, time, page, browser, country |
| Cloudflare Turnstile | The bot check that runs when a form is submitted | IP address and browser signals, and it returns a single-use token that our endpoint verifies |
| Resend | Delivers the completed form to our inbox as an email | Everything you entered in the form |
| The mailbox provider for info@goldblum.ch | Stores the message once it has been delivered | Everything you entered in the form, and any later correspondence. Named on request |
| The card payment provider | Takes card payments on its own checkout page | Invoice reference, amount, payer name, email, and the card details you enter there, which never reach this site |
| The crypto payment provider | Issues the invoice for a payment made in crypto | Invoice reference, amount and email |
| Google Analytics 4 | Audience measurement, loaded only after you accept | A pseudonymous identifier, the pages viewed, coarse location and device |
| Microsoft Clarity | Session analytics and heatmaps, loaded only after you accept | The same, plus a recording of how the page was scrolled and clicked |
That is the whole list. We do not sell personal data, we do not trade it, and we do not pass the content of an enquiry to anyone outside it. Where a matter needs a notary, a bank or a public authority, information goes to them because the procedure requires it, and we tell you what is going where before it goes.
Transfers outside the EU
Several of the processors above are United States companies, and some of the processing therefore happens outside the European Economic Area, or could do. Where that is the case, the transfer rests on the mechanism the processor concerned relies on: an adequacy decision under Art. 45 GDPR, which for United States providers means certification under the EU-US Data Protection Framework, or the standard contractual clauses under Art. 46 GDPR together with the supplementary measures the provider documents.
We are not going to restate any provider's current certification status on this page, because it changes and a stale statement here would be worse than none. Which mechanism applies to which processor, as at the date you ask, is something we will confirm in writing at info@goldblum.ch.
Analytics, and only after you accept
Nothing analytical loads until you say so. Before you choose, the consent script sets every storage type to denied and no analytics script is fetched at all. The only thing stored on your device at that point is your own choice, kept in this browser under the key cii-consent in local storage, holding one word: granted or denied. It is never sent to us and it contains no identifier.
Accept, and two things load. Google Analytics 4 counts visits and pages, with IP anonymisation switched on. Microsoft Clarity records how the page was used, which means scrolling, clicks and pointer movement, replayed as a session recording; its default masking is left on, so the content of form fields does not appear in a recording. Decline, and neither of them is ever fetched, on this or any other page of the site.
The cookie policy lists the individual cookies each of them sets, how long they last, and how to change your mind afterwards.
Your rights under the GDPR
Every one of these is exercised by writing to info@goldblum.ch. You do not need a form, a lawyer or a reason, and we do not charge for it.
- Access (Art. 15): a copy of the personal data we hold about you and an explanation of what we do with it.
- Rectification (Art. 16): correction of anything inaccurate, and completion of anything partial.
- Erasure (Art. 17): deletion, where we no longer need the data and no statutory retention duty requires us to keep it.
- Restriction (Art. 18): a freeze on the use of the data while a dispute about its accuracy or about our basis for holding it is resolved.
- Portability (Art. 20): the data you gave us, in a structured machine-readable file, where the processing rests on consent or on a contract.
- Objection (Art. 21): an objection to processing based on legitimate interests, which we honour unless we can show compelling grounds that override it.
- Withdrawal of consent (Art. 7(3)): for analytics, at any time, and it does not affect anything done before the withdrawal. The cookie policy explains the steps.
- Complaint (Art. 77): to the supervisory authority of the country you live in. In Italy that is the Garante per la protezione dei dati personali. You can complain there without going through us first, although we would rather you told us and gave us the chance to fix it.
We answer within one month of receiving a request, as Art. 12(3) requires, and we say so in advance in the rare case where a request is complex enough to need the two-month extension that the same article allows. We may need to check that a request really comes from the person it concerns, which usually means a reply from the email address the data was sent from.
Security, and what we do not do
The site is served over HTTPS and is a set of static files: there is no database on it, no login, no user account and no password to steal. Form submissions travel encrypted to the delivery service and arrive as email in a single inbox. Access to that inbox is limited to the people who answer enquiries.
What we do not do is as much part of the answer as what we do. No advertising cookies and no advertising pixels of any kind. No profiling and no automated decisions. No sale or exchange of personal data. No cross-site tracking, no data broker, no mailing list you did not ask to be on. No phone number is published, so there are no calls and no call recordings. The site is aimed at people setting up companies and is not directed at children, and we do not knowingly collect anything from anyone under 18.
Changes to this notice
This version dates from 10 September 2026. Where a section above says that something is stated on request, it is because the detail is genuinely not settled yet and we prefer that to wording that reads well and means nothing. As those details are fixed, and whenever a processor or a purpose changes, this page changes with them and the date at the head of this section changes too.
Questions about any of it, or a request under the rights section: info@goldblum.ch. See also the cookie policy and the terms of use.