Privacy

Last updated: 24 October 2026

This privacy policy explains which personal data is processed when you visit leanenterprisearchitecture.com, for what purpose, and what rights you have. It is based on the Swiss Federal Act on Data Protection (revFADP/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

Controller

Romano Roth and Dietmar Wettach are joint controllers.

Hosting and server logs

This site is hosted on Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. To deliver and protect the pages, Cloudflare processes the data every request carries: IP address, date and time, requested page, referring page and browser user agent. Cloudflare keeps these logs for a limited time to operate the service and defend against attacks.

Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR; Art. 31 revFADP). Cloudflare acts as a processor. Data may be transferred to the USA; such transfers are covered by the EU standard contractual clauses (with the Swiss addendum) and Cloudflare’s certification under the EU-US / Swiss-US Data Privacy Framework. Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

Cookies and Google Ads

This site uses Google Ads (tag ID AW-992417191) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA) to measure whether our advertising works, for example when you click through to a book shop, the newsletter or a podcast platform (conversion tracking).

Only with your consent. When you first visit, a banner asks for your consent. Until you click “Accept”, Google Consent Mode v2 keeps all storage set to “denied”: no advertising or analytics cookies are set and nothing is stored on your device. Only after you accept are cookies such as _gcl_au (Google Ads conversion linker, up to 90 days) and Google cookies on google.com/doubleclick.net (e.g. IDE, test_cookie) set.

Without consent (cookieless pings). Even if you decline, the Google tag sends cookieless signals to Google (e.g. that a page was viewed or a link was clicked, consent status, timestamp, browser and page information, IP address for transmission). These contain no cookie identifiers and are used by Google only in aggregated form for modelling conversions. Advertising identifiers are redacted.

Your choice is stored in your browser’s local storage (cookie_consent) so the banner does not reappear. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer; withdrawal does not affect processing carried out before.

Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 6(6) and 31 revFADP; for storage on your device Art. 5(3) ePrivacy Directive / § 25 TTDSG). Google may process data in the USA; Google LLC is certified under the EU-US / Swiss-US Data Privacy Framework and uses standard contractual clauses. More information: policies.google.com/privacy and business.safety.google/privacy.

Embedded content

If a launch video is embedded on the home page, it is loaded from youtube-nocookie.com (Google Ireland Limited / Google LLC), which does not set tracking cookies until you start playback. Starting playback connects you to YouTube.

Legal basis: legitimate interest in presenting our videos, podcasts and newsletter (Art. 6(1)(f) GDPR; Art. 31 revFADP). These providers may process data in the USA; see their privacy policies.

Fonts and assets

Barlow and Barlow Condensed are served from this site. No request goes to Google Fonts or another font CDN; images, stylesheets and scripts come from the same domain.

Links to other sites

The buy buttons lead to Leanpub and Amazon, the programme link to the Lucerne University of Applied Sciences and Arts, the author links to their own pages. Once you follow one, that site’s privacy policy applies. Clicks on shop links are measured as described under Google Ads.

Your rights

Within the limits of applicable law you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time with effect for the future. Contact us at the address above. In practice we do not hold data that identifies you; server logs are held by Cloudflare and advertising data by Google.

You may lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch), in the EU the authority of your country of residence.

Changes

We update this policy when the site changes. The current version is published here.