Privacy Policy

Last updated: 26 August 2026

1. Controller

The controller responsible for processing personal data in connection with this website is:

Fluid Minds GmbH
Josefstrasse 20
8005 Zurich
Switzerland

Represented by Dr Patrick Stähler, Managing Director
Email: data.protection@fluidminds.ch

This privacy policy explains how personal data is processed when you visit blog.business-model-innovation.com, comment on an article or subscribe to updates.

2. Applicable data-protection law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where applicable, we also comply with the EU General Data Protection Regulation (GDPR).

Under the GDPR, processing is based on the legal grounds stated below, in particular our legitimate interests in operating, securing and improving this website, your consent where requested, and the performance of a contract or steps taken at your request where relevant.

3. Website access and server log files

When you access this website, the web server and hosting infrastructure may automatically process technical information, including:

  • your IP address;
  • the date and time of access;
  • the requested page or file;
  • the referring page;
  • browser type, browser version, operating system and device information;
  • HTTP status codes and similar technical information.

This information is processed to deliver the website, maintain its stability and security, detect misuse and investigate technical problems. The processing is necessary for the secure and reliable operation of the website and is based, where the GDPR applies, on our legitimate interests under Article 6(1)(f) GDPR.

Our hosting and technical service providers may process this information on our behalf. Log files are retained only for as long as required for operational, security and legal purposes and are then deleted or anonymised.

4. Privacy-friendly website analytics

We use the WordPress plugin Independent Analytics Pro to understand how this website is used. The analytics system runs on our own WordPress installation and stores the resulting analytics data in our website database. It does not use analytics cookies and does not send analytics data to Google Analytics or another external analytics platform.

Independent Analytics may process the following information:

  • pages viewed and time of access;
  • referring website;
  • campaign information contained in links, such as UTM parameters or a Google Click Identifier;
  • browser, operating system and device type;
  • approximate geographic information derived from the IP address;
  • interactions with selected links, currently including links to PDF and ZIP files as well as mailto: and tel: links.

The visitor’s IP address is used temporarily for geolocation. According to the provider, the IP address is not stored. To distinguish visits, the system creates a one-way hash from the IP address, browser user agent and a changing salt value. This identifier cannot be converted back into the original IP address.

We use these statistics to assess the reach and usefulness of our content and to improve the website. Where the GDPR applies, this processing is based on our legitimate interests under Article 6(1)(f) GDPR. Analytics data is retained only for as long as it remains useful for these purposes and is deleted when it is no longer required.

Further information is available in Independent Analytics’ privacy information.

We do not currently use Google Analytics on this website.

5. Email subscriptions and Zoho Campaigns

You may subscribe to receive new articles by email. The subscription form is provided through Zoho Campaigns, a service of Zoho Corporation and its affiliated companies.

When you subscribe, the following information is transmitted to and processed through Zoho Campaigns:

  • your email address;
  • your first name, if provided;
  • the date and time of registration;
  • technical information required to document and manage the subscription.

We use this information solely to manage the mailing list and send the requested updates. The legal basis is your consent under Article 6(1)(a) GDPR where the GDPR applies.

The subscription form may be embedded on various pages of this website. When you open a page containing the form, technical information such as your IP address, browser information, referring page, date and time may be transmitted to Zoho. Zoho may also record that the subscription form was displayed.

Emails sent through Zoho Campaigns may contain technologies that record delivery, opening and link-click information. We use these statistics to understand whether our communications are useful and to improve them. You can prevent most opening measurements by disabling the automatic loading of external images in your email application.

You can unsubscribe at any time by using the unsubscribe link in an email or by contacting us. After unsubscribing, your address may be retained on a suppression list to ensure that no further messages are sent and to comply with legal obligations.

Zoho may process data through companies and infrastructure located outside Switzerland. Zoho states that it uses contractual and organisational safeguards for international transfers. Further information is available in Zoho’s privacy policy.

6. Comments

If you leave a comment, we process the information entered in the comment form, your IP address and your browser user-agent string. We use this information to publish and administer comments, prevent spam and misuse, and protect the website.

An anonymised value derived from your email address may be sent to the Gravatar service to determine whether you use that service. If your comment is approved and you use Gravatar, your profile image may be displayed publicly alongside the comment.

Comments and their associated metadata may be retained indefinitely so that follow-up comments can be recognised and administered. You may request the deletion or anonymisation of a comment unless retention is required for legal reasons or the protection of legitimate interests.

7. Gravatar and author images

This website uses Gravatar, a service operated by Automattic Inc., to display profile and author images. Gravatar images may also be loaded on overview pages even if you do not leave a comment.

When such an image is loaded, your browser connects to Gravatar’s servers. Automattic may receive your IP address, browser information, the referring page and the time of the request. Data may be processed in the United States and other countries in which Automattic or its service providers operate.

Further information is available in Automattic’s privacy policy.

8. Cookies

The publicly accessible parts of this website do not currently use analytics or advertising cookies.

WordPress may use technically necessary cookies in limited situations, particularly when an authorised user logs into the administration area, when the website checks whether the browser accepts cookies, or when a commenter chooses to save their name, email address and website for future comments. These cookies support functions explicitly requested by the user and are not used for advertising.

You can delete or block cookies through your browser settings. Blocking technically necessary cookies may restrict individual functions.

9. Embedded content and external links

Articles may contain embedded content from other websites, such as videos, images, maps or social-media posts. Embedded content behaves as if you had visited the originating website directly. The third-party provider may process your IP address, use cookies or other technologies, and record your interaction with the embedded content.

Where practicable, we avoid automatically loading unnecessary third-party content. Links to external websites, including LinkedIn, do not transmit information to the linked service until you follow the link, apart from ordinary technical processes such as DNS resolution or browser prefetching where applicable.

The privacy policies of the respective providers apply to third-party content and websites.

10. Recipients and processors

We disclose personal data only where necessary for the purposes described in this policy. Possible recipients include:

  • hosting, maintenance and IT-security providers;
  • Zoho Corporation and affiliated companies for email subscriptions;
  • Automattic Inc. in connection with Gravatar;
  • spam-prevention and website-security providers;
  • public authorities, courts or advisers where disclosure is legally required or necessary to protect legal rights.

Service providers acting on our behalf may process personal data only for the agreed purposes and subject to appropriate contractual and organisational safeguards.

11. International data transfers

Some service providers may process personal data outside Switzerland or the European Economic Area, including in countries whose laws may not provide an equivalent level of data protection.

Where required, we rely on an adequacy decision, approved standard contractual clauses or another legally recognised safeguard. In exceptional cases, a transfer may be based on consent, contractual necessity, the establishment or defence of legal claims, or another statutory exception.

12. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected, to comply with legal retention duties, or to establish, exercise or defend legal claims. The specific retention period depends on the type of data and the processing purpose. Data that is no longer required is deleted or anonymised.

13. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no transmission or storage system can guarantee absolute security.

14. Your rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request information about the personal data we process about you;
  • obtain a copy of your personal data;
  • have inaccurate data corrected;
  • request deletion or restriction of processing;
  • object to certain processing;
  • receive data you provided in a portable format;
  • withdraw consent at any time with effect for the future.

To exercise these rights, contact us at data.protection@fluidminds.ch. We may request information necessary to verify your identity.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR applies, you may lodge a complaint with the competent supervisory authority in the country of your habitual residence, place of work or the place of the alleged infringement.

15. Changes to this privacy policy

We may update this privacy policy when our website, services or legal obligations change. The version published on this page is the current version.