Privacy Policy
How the Trust Signal newsletter handles your personal data. This notice covers the newsletter only; the validant.ai privacy notice covers our website, our platform and our engagements.
In short
- We keep your email address, the sections you chose and a record of your consent. Nothing more is needed to send you Trust Signal.
- We do not sell, rent or share your address, and we use it for this newsletter only.
- The subscriber list is stored on our own server in Switzerland. The emails are sent through Resend from its EU region in Ireland.
- Every issue has a one-click unsubscribe link. To see, correct or erase your data, write to [email protected].
Who is responsible
The controller of your personal data is:
Glinz & Company GmbH (operating the validant.ai brand)
Zollikerstrasse 98
8702 Zollikon, Switzerland
UID CHE-193.569.920
Email: [email protected]
What we collect
| Data | What it is for |
|---|---|
| Your email address | Sending you the newsletter, and the emails to confirm, manage or end your subscription |
| Your sections | Sending you only the sections of the newsletter you chose |
| Status and dates: when you signed up, confirmed or unsubscribed, and your reason if you give one | Knowing whom to send to, and never emailing someone who has left |
| Consent record: for each step (sign-up, confirmation, change of sections, unsubscribe) the time, the network (IP) address and the browser identifier, filed under a keyed hash of your address instead of the address itself | Proving that you asked for the newsletter (GDPR Art. 7(1)) |
| Poll and rating answers: the answer, the issue and the time, with a keyed number derived from your subscription, never your address | Showing readers the results and learning what is useful |
| Opens: each issue contains a small image; when your email program loads it, our server log records the issue number, the time and the network address of the request | Counting how often an issue is opened. The image carries no identifier of you |
Why we process it
We send the newsletter because you asked for it and confirmed your address (double opt-in). Legal basis: your consent (GDPR Art. 6(1)(a); Swiss revFADP Art. 31(1)). The consent record serves our duty to prove that consent (GDPR Art. 7(1)). Counting opens and showing poll results rest on our legitimate interest in knowing whether the newsletter is useful (GDPR Art. 6(1)(f)); answering a poll is always your choice.
Who processes it
- Our own server in Switzerland stores the subscriber list and the consent records.
- Resend, Inc. (United States) sends the newsletter and every email about your subscription for us, from the address [email protected], through its EU region in Ireland. It receives your address and the message.
- Replies to [email protected] are forwarded by Cloudflare Email Routing to the editor's mailbox, hosted by METANET AG in Switzerland. It receives your address and your message only if you reply.
- Cloudflare carries the pages of subscribe.validant.ai (network and edge computing): the address you enter and your network address pass through it on their way to our server, and it stores no subscriber data. Resend and Cloudflare are listed in our subprocessor register.
- Our editor receives a short notice with your address when you confirm or end your subscription.
We do not sell, rent or share your address with anyone else, and we do not use it for any other purpose.
How long we keep it
A job on our server runs every night and deletes unconfirmed sign-ups and unsubscribed addresses on its first run after their time is up.
| Data | How long |
|---|---|
| Your subscription (address, sections, dates) | As long as you are subscribed |
| After you unsubscribe | Deleted 30 days after you unsubscribe |
| A sign-up you never confirmed | Deleted 7 days after the confirmation link expired (the link works for 48 hours), so 9 days after our last confirmation email |
| Consent records | Kept with your subscription as proof of your consent, and deleted together with it |
| Poll and rating answers | Kept with the results of the issue; they contain no address |
Your rights
Under the GDPR and the Swiss revFADP you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Erase your data
- Restrict or object to its processing, and receive it in a portable form
- Withdraw your consent at any time, with the unsubscribe link in every issue
- Lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (edoeb.admin.ch), in the EU your local authority
To use any of these rights, write to [email protected]. We answer within 30 days.
Unsubscribe
Every issue has a one-click unsubscribe link, and your email program may show its own unsubscribe button as well. You can also change your sections, unsubscribe here, or write to [email protected].
Changes
We update this notice when the way we handle your data changes. If a change affects how we use your address, we tell active subscribers by email before it applies.
Last updated: 24 October 2026