Privacy notice

Controller. The controller is the contracting seller, Ferdinand Kamberaj, sole proprietor (individual enterprise), registered as FK HERMES MANAGEMENT DI F. KAMBERAJ, Via Cantonale 46, 6705 Cresciano, Switzerland, UID CHE-258.137.002. FK HERMES INTERNATIONAL is a brand and is not a separate legal person. Written requests go to fk.hermes23@gmail.com or to the postal address above.

Scope fit check. The five yes/no questions on the service page run entirely in your browser. Your individual answers are not transmitted and are not stored by us. Only one pseudonymous outcome event is recorded when the check is completed. No name, email, file or free text is requested there.

TrustOps inquiries. The "Request TrustOps diagnostic" form collects business contact details: organisation, contact name, work email, role or title, country, and optionally phone number, website and company-size band, plus your description of the problem or use case, urgency and preferred contact channel. We use them only to respond to your inquiry and to assess commercial fit. No automatic outbound email is sent; a person reviews each request. Records are readable only by authorised administrators of this service. Submitting an inquiry does not book, reserve or pay for the diagnostic; payment and booking are a separate step that remains closed until its own conditions are met. Our operational policy is to keep inquiry records for 12 months from submission and then delete them; this is our internal policy, not a statutory period. You can ask for earlier deletion at any time.

TrustOps customer files. Customers with a paid TrustOps order linked to their account can upload the buyer questionnaire and up to 10 supporting files in the private customer portal. Files are stored in private storage, readable only by that customer and authorised administrators, and used only to deliver the ordered diagnostic. Please upload business documents only and remove personal data that is not needed. Our operational policy is to delete these files 90 days after delivery; this is our internal policy, not a statutory period. You can ask for earlier deletion at any time. No automatic email is sent from the portal.

Global opportunity qualification. The form on the global opportunity page (and the business qualification form on the support page) collects only structured business answers: business country or region, organisation type, business problem or area of interest, desired outcome, a short free-text description, and your consent confirmation. No name, email, phone number or other contact field is requested, and personal, financial, credential or health details are rejected. We also store a random case reference and a protected status code so you can check status. The purpose is business-to-business opportunity and fit qualification only. Submitting creates no order, quote, contract or payment, and triggers no automatic outbound email or message. Records are readable only by authorised administrators and are kept under the retention, deletion and rights rules in this notice; you can request deletion at any time quoting your case reference.

Payment. Booking is completed on a hosted Stripe checkout page. Stripe processes your card, billing and tax-identification data as part of that payment. This application never receives or stores card data.

Site analytics. The site records allow-listed, first-party operational events. Each custom event record contains an event name, a locally generated pseudonymous browser identifier stored in your browser's localStorage, and basic product and locale context. This application does not intentionally add IP address or user-agent fields to that custom event record. The custom event payload contains no cross-site identifier or advertising-cookie value, and no third-party advertising tracker is intentionally embedded by this application. Hosting, security, database and payment providers may process network and device metadata such as IP addresses under their own terms and privacy notices.

Engagement materials. Questionnaire items and source files are provided only after booking, through the intake route communicated to you. Do not send passwords, API keys, private encryption keys, patient records or any personal data the engagement does not require. If material outside the agreed scope is sent, we ask you to resend a reduced set.

Purposes and basis. Performing and documenting the engagement, answering support, cancellation and refund requests, meeting accounting and other statutory obligations, protecting the service from abuse, and maintaining the service on the basis of our legitimate interest in operating it.

Processors. We use categories of service providers rather than a fixed list: the payment provider (Stripe) for checkout and invoicing, application hosting and database infrastructure, and email for correspondence. Providers process data as needed to deliver their services; their own terms and privacy notices may also apply.

Retention. Engagement materials and deliverables are kept only as long as needed for the engagement, for any correction round and for handling disputes. Payment and invoicing records are kept for the statutory accounting retention period applicable to the seller. Custom operational events are pseudonymous and are not intended to contain direct identifiers.

Transfers. Some providers may process data outside Switzerland. We do not claim a specific hosting location that we have not verified; where you need the current processing locations and safeguards for your own assessment, ask before booking and we will confirm what our providers state.

Security. Access is enforced server-side, secrets are server-only and no card data is stored by this application. No system can be described as absolutely secure.

Your rights. Depending on your jurisdiction you may request access, correction, export, restriction or deletion, subject to statutory retention. Send requests to fk.hermes23@gmail.com. See also the legal notice, terms and support page.