Last updated: 13 August 2026

Privacy notice

This notice describes the operation of WORKAI OUT. The website is hosted by a cloud provider in a data centre within the European Union. Personal contact enquiries are not collected through a form on this website; introductory appointments are booked through the linked Microsoft booking page.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP) is:

Epic Fusion AG
Bahnhofplatz 10B
CH-3011 Bern
Switzerland
Phone: +41 31 512 14 14
Email: hello@epicfusion.com

2. Visiting the website

When you access the website, the hosting provider processes technically necessary access data, in particular your IP address, the date and time of access, the requested file, the referrer URL, and browser and device data. This processing is necessary to provide the website securely and reliably and is based on Article 6(1)(f) GDPR. The legitimate interest is the secure operation of the website and the prevention of abuse.

This website does not use marketing or social media pixels and does not embed fonts or other resources from Google Fonts. The optional analytics described in section 3 only start after your voluntary choice.

3. Optional analytics with minimal data collection

If you choose “Allow analytics”, we only collect information about how the website is used: the calendar day, the canonical page visited, the event type (page view or click on an important link), an acquisition channel (such as direct access, search, social media or an AI assistant), a broad source category (such as Google, LinkedIn, ChatGPT or another referral source), the referrer domain as a hostname only, and the landing page. Where present in the visited URL and in a technically permitted format, we also collect the source, medium and campaign name from UTM parameters.

The analytics database does not store IP addresses, complete referrer or destination URLs, search terms, browser or device data, cookie or user identifiers, or form entries. No individual usage profiles are created, and visitors are not recognised or counted. The raw referrer is evaluated locally in the browser only; at most, its hostname reaches the server, never its path, parameters or complete URL.

Your choice is stored locally in your browser so it applies on other pages. For the duration of an open browser tab, we also store only the source, channel, landing page and any UTM campaign associated with the first page view after consent. This contains no visitor or session identifier and serves only to attribute a later call-to-action click to that initial source. This tab information is removed if you decline or withdraw consent. Optional analytics start only with your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can withdraw consent at any time with future effect through “Analytics settings” in the footer or change it here: Open analytics settings.

Consent or withdrawal only affects future measurements. Individual events already stored cannot be linked to a browser and therefore cannot be removed individually on request. They are automatically deleted after 30 days without permanent aggregation; technical execution of the daily deletion rule may occur up to 24 hours later.

4. Hosting and analytics storage

The website and analytics run with a cloud provider in a data centre within the European Union. Optional analytics are stored in non-public storage and analysis services of the same provider in the same region; these contain only the consent-based analytics events described in section 3. The provider processes the technical data listed in section 2 and, where consent is given, these analytics events on our behalf to the extent necessary for delivery, security, troubleshooting and analytics. Access uses managed identity; access keys or tokens are not used in the browser. The analysis is not public and is accessible only to authorised persons. Server and security logs are processed only for as long as necessary for these purposes; the provider’s active data processing and storage configuration also applies.

5. Getting in touch

WORKAI OUT does not provide its own booking function. The “Book a free intro call” link opens an external Microsoft Bookings page. The details required to book an appointment are entered there. This processing is covered by Microsoft’s privacy statement.

Clicking the link does not transmit any details from WORKAI OUT to Microsoft Bookings. Please do not enter special categories of personal data under Article 9 GDPR, credentials or confidential third-party documents in the booking environment.

6. Recipients and transfers to third countries

The hosting provider, acting as a processor, receives technically necessary data and, after consent, analytics data. When you visit the external booking page, Microsoft also processes data as explained in its privacy statement. Where processing takes place outside the European Economic Area, the safeguards described there apply. On request, we will identify the individual processors we use.

7. Obligation to provide data and automated decisions

No information needs to be provided to visit WORKAI OUT. The details required for an appointment through Microsoft Bookings are described in its privacy information. WORKAI OUT does not carry out automated decision-making, including profiling, under Article 22 GDPR.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and, where processing is based on legitimate interests, objection. You may withdraw consent at any time with future effect. Please contact the address given in section 1.

9. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority. As the controller is based in Switzerland, data subjects in the European Economic Area may contact the supervisory authority at their habitual residence or place of work. An overview of German supervisory authorities is available from the Federal Commissioner for Data Protection and Freedom of Information.

The competent authority in Switzerland is:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, CH-3003 Bern
www.edoeb.admin.ch