Privacy notice
This notice explains how personal data is handled in three places: the professional networking list built from public sources, the AI Governance Chain newsletter and messages on LinkedIn, and this website. It follows the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union and the European Economic Area, the General Data Protection Regulation (GDPR).
In short
- A list of professionals is compiled from official public web pages, such as conference speaker pages, organisation team pages and public registers, to share work on AI governance and to start conversations on LinkedIn.
- Only professional details are kept: name, job title, organisation, country and the public page where the person appears. No email addresses, phone numbers or private details.
- Contact happens by hand, one person at a time, on LinkedIn. No automated or bulk messages. The data is never sold.
- Anyone on the list can see their data, correct it or object at any time. An objection is honoured at once.
- This website sets no cookies and uses no analytics.
Right to object
Every person on the list can object at any time, without giving reasons, to this use of their data, including to any further contact. A short message such as "Remove from list" is enough, sent by email to contact@aigovernancechain.com or as a LinkedIn message to Mathieu K. Gouanou. The record is then deleted and no further contact follows. Only the name, organisation and date of the objection are kept on a do-not-contact list, so that the person is not added again.
GDPR Article 21; FADP Article 30(2)(b)
1. Who is responsible
Controller: Mathieu K. Gouanou, Geneva, Switzerland.
Email: contact@aigovernancechain.com
LinkedIn: linkedin.com/in/mathieugouanou
AI Governance Chain is an open-source project run by Mathieu K. Gouanou. The project itself is free and non-commercial; advisory work is offered under Mathieu K. Gouanou's own name.
2. The professional networking list
2.1 Purposes
- Deciding whom to follow, whose public posts to comment on and whom to invite to connect on LinkedIn, in order of relevance to AI governance.
- Letting relevant professionals know about the AI Governance Chain newsletter, open data and free tools.
- Discussing speaking, partnerships or advisory work, only after a person has shown interest.
- Keeping a record of objections, so that nobody is contacted again after objecting.
2.2 Personal data processed
| Category | Data |
|---|---|
| Identity and role | Name; job title or role; organisation |
| Location | Country and region of the role, taken from the source page or the organisation's headquarters |
| Source | Address of the public page where the person is named, and the public context (for example "speaker, [event]") |
| Working fields | Sector, role group, priority tier (1 to 3), suggested first step, and a log of any interaction (date, type, reply) |
Not collected: email addresses, phone numbers, home addresses, photos, and sensitive personal data (for example health, religious or political views, or trade union activity). People who hold public office appear only in that official role; no party affiliation is recorded.
2.3 Sources
Publicly accessible official web pages: organisations' own team and board pages, conference and event speaker pages, published member, signatory and participant lists, official chapter directories and public registers. No data was taken from LinkedIn by automated means. Each record keeps the address of its source page, and the specific source is given to anyone who asks.
2.4 Legal basis
EU and EEA (GDPR): legitimate interests (Article 6(1)(f)). The interest is professional networking and making AI governance resources known to people whose public role concerns AI, data protection, risk, audit or public policy. The balance takes into account that only professional details are used, that the person or the organisation already made them public in that role, that contact is individual and manual, and that objecting is simple and always honoured.
Switzerland (FADP): processing follows the principles of Article 6 FADP. The data was made generally accessible in a professional role (Article 30(3) FADP), and the private interest described above serves as justification where needed (Article 31(1) FADP). Processing stops for anyone who objects.
2.5 How contact happens
- Following a person, commenting on public posts, or sending a LinkedIn connection request with a short personal note that links to this notice.
- Direct messages only after a connection is accepted and the person engages, for example with a reply or a message.
- At most one unanswered message. No automated tools, no bulk sending, no cold sales messages and no email campaigns.
2.6 Recipients and service providers
The data is not sold, rented or shared with anyone for their own purposes. It is processed by Mathieu K. Gouanou and by IT service providers acting on his instructions: file storage and the software tools used to compile and keep the list, including an AI assistant used to compile it from public pages. Interactions on LinkedIn are also processed by LinkedIn under the LinkedIn Privacy Policy.
2.7 Countries
The data is processed in Switzerland and may be processed by service providers in the European Economic Area and the United States. Transfers take place only where the destination is recognised as providing adequate protection (for the United States, recipients that participate in the Swiss-US or EU-US Data Privacy Framework) or under standard contractual clauses, as Article 16 FADP and Chapter V GDPR require.
2.8 Retention
- A record is deleted 12 months after the last interaction, or 12 months after collection if there was never any interaction.
- The list is checked against its public sources every quarter; records that are outdated or no longer relevant are corrected or deleted.
- After an objection, the record is deleted at once; only the do-not-contact entry described above is kept.
2.9 Priority tiers, no automated decisions
Each record carries a priority tier (1, 2 or 3) based on the seniority of the public role, the organisation and the number of independent public sources. The tier only sets the order of manual outreach. No decision with legal or similarly significant effects is made by automated means.
3. Rights and complaints
Every person can ask whether data about them is processed and receive a copy, including its source; ask for corrections; ask for deletion or restriction; and object at any time (see the box above). Requests go to contact@aigovernancechain.com or by LinkedIn message, and are answered free of charge, as a rule within 30 days.
Complaints can go to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, for people in the EU and EEA, to the data protection authority of the country where they live or work (list of authorities).
GDPR Articles 15 to 18, 21 and 77; FADP Articles 25 and 32
4. The newsletter and messages on LinkedIn
- The AI Governance Chain newsletter is published on LinkedIn. LinkedIn manages subscriptions under its own privacy policy; unsubscribing works at any time on LinkedIn.
- Messages that ask for a resource (for example DRILL, MANDATE, ROOM or INTERVIEW) are answered on LinkedIn. The name and the message are kept to send the resource and to follow up once; they are deleted 12 months after the last exchange. Legal basis: legitimate interest in answering the request and, where a person asks about an engagement, steps taken at that person's request (GDPR Article 6(1)(f) and (b)).
- Downloads are never gated behind an email address.
5. This website
- The website sets no cookies, uses no analytics and loads no tracking code.
- It is hosted on GitHub Pages. GitHub states that when a GitHub Pages site is visited, the visitor's IP address is logged and stored for security purposes (GitHub Pages documentation; GitHub General Privacy Statement).
- Episode pages load the video player from YouTube in privacy-enhanced mode (youtube-nocookie.com) once an episode is live. Playing a video is subject to Google's Privacy Policy.
6. Changes to this notice
The date at the top shows the latest version. Every earlier version stays visible in the public history of this page.