— Appendix —

Privacy

What we process — and what we don't.

This website is built with deliberate restraint. It contains no tracking, no profiling, no advertising pixels, no social-media plug-ins and no cookies that would require your consent. We collect only what is technically unavoidable to deliver the page to your screen.

1.  Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and the Liechtenstein Data Protection Act (DSG) is:

Controller
Equanimity AG, trading under the brand Palaimon Capital
Herrengasse 30
9490 Vaduz, Principality of Liechtenstein
Commercial Register no. FL-0002.289.079-4
Contact
marcel@palaimon.capital
+423 797 86 81
Supervisory authority
Data Protection Authority of the Principality of Liechtenstein
Städtle 38, 9490 Vaduz
datenschutzstelle.li

2.  What we don't do

This website deliberately does without:

There is therefore no cookie banner. There is nothing we would need your consent for.

3.  What is technically processed

3.1  Server logs (hosting on Cloudflare Pages)

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you call up a page, Cloudflare temporarily processes, for technical reasons:

This processing serves the delivery of content, the defence against attacks and the stability of the website. The legal basis is Article 6(1)(f) GDPR (legitimate interest in operating the website securely).

Cloudflare acts as our processor under Article 28 GDPR; a corresponding agreement (Data Processing Addendum) is in place. For transfers to the United States we rely on the EU-US Data Privacy Framework, to which Cloudflare has adhered, supplemented by the Standard Contractual Clauses of the European Commission. Details: cloudflare.com/privacypolicy.

3.2  Typefaces (Google Fonts)

For typography we currently use the free typefaces EB Garamond, Cormorant Garamond and IBM Plex Mono. They are — honestly, as a transitional measure — delivered through the content delivery network of Google (Google Ireland Limited, Gordon House, Dublin 4, Ireland). In doing so, your IP address is transmitted to Google. The legal basis is Article 6(1)(f) GDPR. We intend to self-host these typefaces in the near future and so end this connection to Google as well. Details: policies.google.com/privacy.

3.3  Contact by e-mail

The form on the Office Hours page is implemented as a mailto: link. There is no server-side processing, no database entry, no webhook. Your browser simply opens your own e-mail client. The data you type there reaches only marcel@palaimon.capital and is treated there as ordinary correspondence.

If you contact us by another means (telephone, letter, personal meeting), we process the information you provide solely to handle your matter. The legal basis is Article 6(1)(b) GDPR (pre-contractual steps) or, where appropriate, (f) (legitimate interest in answering your enquiry).

4.  Retention

Server logs at Cloudflare are typically deleted automatically after a few days. Correspondence is retained for as long as is sensible for the respective mandate, but no longer than the statutory retention periods (in Liechtenstein, generally ten years).

5.  Recipients

Your data is not shared with third parties, except with the processors named under section 3 (Cloudflare; transitionally Google for typefaces) or where we are legally obliged to do so (for instance vis-à-vis tax or law-enforcement authorities).

6.  Your rights

You may exercise the following rights at any time:

A personal e-mail to marcel@palaimon.capital is enough — a handwritten reply will follow.

7.  Currency

This privacy notice was last updated on 23 April 2026. We reserve the right to adapt it to changes in the law or in our technical arrangements. The version in force at any given time can always be found at /en/privacy.

“ Data minimalism is the simplest form of discretion. ”
— M. F.