Controller
Saentis Maple GmbH, 9000 St Gallen, Switzerland
Email: e@nordicstartuphub.com

Scope
This policy explains how we process personal data when you use this website and when you subscribe to our mailing list

What data we process

• Technical data from website use, e.g. IP address (shortened where possible), device, browser, referrer, pages viewed, timestamps, cookie identifiers
• Consent preferences recorded via our cookie tools
• Email address and optional profile fields when you subscribe to our mailing list
• Log files generated by our hosting provider

Purposes

• Provide and secure the website, including essential (functional) cookies required by the Tilda platform
• Measure site usage and improve content using analytics
• Send newsletters and product updates when you opt in, including measuring basic engagement (opens, clicks)
• Fulfil legal obligations and defend legal claims

Legal basis under Swiss law (FADP / DSG)

• Processing is carried out transparently for the purposes above and limited to what is necessary
• Where we rely on consent (e.g., non-essential cookies and emails), you may withdraw it at any time with future effect
• For strictly necessary cookies and security logging, processing is justified by overriding interests in providing a secure, functional site

Cookies & analytics

• Essential cookies are required for the Tilda website to function and cannot be disabled in our systems

• Analytics cookies (e.g., Google Analytics 4) help us understand traffic and content performance. These run only with your prior consent. You can change or withdraw consent at any time via the site’s cookie settings
• Browser-level controls allow you to delete or block cookies. Some features may not work without essential cookies

Newsletter

• We add your email to our mailing list only if you explicitly opt in
• Each email includes an unsubscribe link. You can also email us to unsubscribe
• We may record basic engagement metrics to improve the relevance of our communications

Sources

• Data you provide to us directly (e.g., email subscription)
• Data collected automatically by your device and our cookies/analytics tools

Disclosure to third parties

• Hosting & platform: Tilda (and its infrastructure providers) for website delivery and security
• Analytics: Google Analytics 4 for usage statistics
• Email: Hubspot and Hunter for mailing list management
• Service providers are contractually bound to confidentiality and data protection

International data transfers

• Processing in Switzerland: Switzerland is recognised by the EU as providing an adequate level of data protection, so transfers between the EEA and Switzerland do not require additional transfer tools
• Tilda hosting uses data centres in the EU (e.g., Germany, Finland) and the USA. If data is accessed or processed in the USA, Tilda/AWS apply recognised safeguards. Details in Tilda’s security page
• Google Analytics participates in the EU-US and Swiss-US Data Privacy Frameworks (DPF). Where the DPF does not apply, Google uses additional safeguards. See Google’s frameworks statement
• We aim to store EU users’ analytics data regionally where available (GA4 EU data collection controls)

Retention

• Newsletter emails: until you unsubscribe
• Analytics data: per tool default or shorter where feasible
• Server logs: short operational cycles unless needed for security or legal purposes
• Once retention periods expire, data is deleted or anonymised

Your rights (FADP / DSG)

• Right to information about processing, access to your data, and data portability where applicable
• Right to rectification and deletion
• Right to object to processing based on overriding interests and to withdraw consent at any time
• To exercise your rights, contact: e@nordicstartuphub.com
• You may also contact the FDPIC (Swiss data protection authority)

EU/EEA users

• If the EU GDPR applies (e.g., you are in the EU/EEA), you may have additional rights such as restriction of processing and the right to lodge a complaint with your local data protection authority
• Non-essential cookies and analytics are operated on a consent basis for EU/EEA users. You can change your choices in the cookie settings at any time

Security

• We use TLS encryption, access controls, and industry-standard security measures appropriate to the risk

Changes

• We may update this policy from time to time. The “Last updated” date will change accordingly

Last updated

• 26 September 2025