Rights

The House of Mamifico

Human Rights Work and Protection Notice

The House of Mamifico is a human rights initiative and a human rights observation project. It was created as a space for calm analysis, precise documentation, and responsible reflection in environments where decisions carry real human consequences.

Our work focuses on what we describe as the price of ignorance and the illusion of understanding — the costs that arise when legal, political, or technical actors intervene without sufficient expertise in human-rights protection contexts. These costs are rarely abstract. They are structural, systemic, and often borne by those working without immunity.

Our work constitutes human rights activity and human rights observation within the meaning of international law. It is carried out under a recognised and established protective framework for Human Rights Defenders.

Legal and Protective Framework

Our protective status is explicitly recognised under:

  • Article 5 of the Swiss Federal Constitution,

  • Article 9 of the Austrian Federal Constitutional Law (B-VG),

  • the United Nations Human Rights Council resolutions
    A/HRC/24/24, A/HRC/53/144, and A/HRC/58/23, and

  • Article 12 of the UN Declaration on Human Rights Defenders,

which obliges states to protect Human Rights Defenders against retaliation, pressure, interference, or obstruction.

These instruments establish a comprehensive prohibition of reprisals and inform how we structure our work, our communications, and our handling of data.

Notice to Visitors from the United States and Other Jurisdictions

If you are accessing this website from the United States or from jurisdictions outside Switzerland and Austria, please note the following.

We are currently operating in a relocation and protection context. We handle your data with care, restraint, and respect. At the same time, we do not automatically apply the domestic law of your state to our work, our systems, or our data handling.

This is not a matter of convenience. It is a matter of protection.

Our activities constitute protected human rights work. The protection of Human Rights Defenders, as recognised under international law and embedded in constitutional law in our host states, takes precedence over external legal regimes that are incompatible with this protection. Where domestic laws conflict with our human rights obligations, those laws cannot be applied to us.

We are lawfully entitled to act in this manner. International human rights law explicitly allows protective measures where disclosure, compliance, or exposure would endanger Human Rights Defenders, their partners, or their work. No state has a right to subject protected human rights work to mass surveillance, coercive disclosure, or extraterritorial legal pressure.

Mass surveillance is not a theoretical concern in our field. It is a documented, structural reality. We have operated for years in environments affected by intelligence operations, transnational surveillance, and interference. We therefore design our systems, our processes, and our data practices accordingly.

Our protective framework is grounded in the United Nations Human Rights Council resolution A/HRC/58/23, addressing transnational repression against Human Rights Defenders, and is anchored via constitutional law in two UN host states. Austria has provided active protection since May 2025 through direct engagement at the level of our Chief Executive Officer. Switzerland, as our principal place of establishment, engages with our work with due seriousness and in ongoing dialogue.

With regard to the United States, we must be explicit. At this time, we do not accept the application of U.S. law to our protected work, systems, or liability framework. This position is driven by concrete human-rights concerns, past experiences of mass surveillance, and unresolved structural risks for Human Rights Defenders operating across borders.

The United States is a UN host state, but hosting the United Nations does not exempt a state from scrutiny under international human rights law. Where domestic policies, executive practices, or surveillance frameworks raise serious concerns, we are neither obliged nor willing to submit protected human rights work to those regimes.

Accordingly, we recognise only the jurisdiction of our two UN host states, and even then only where courts, authorities, lawyers, and institutions fully apply international law, including Human Rights Defender protection standards. This is not symbolic. It is operational.

We do not litigate defensively against misunderstandings of this framework. Human Rights Defender protection is not something that can be overridden by procedural tactics or speculative legal theories. Where necessary, we address states directly, not individual judges or private legal actors.

This clarity is intentional. It protects our work, our partners, and those who engage with us in good faith.

No Obligation of Disclosure

In light of this protection framework, we are not obliged to disclose data, systems, servers, or operational information to states or third parties where such disclosure would interfere with, endanger, or obstruct our human rights work.

We state this clearly: we do not do so voluntarily.

This position is protection-driven and lawful. No state may hinder, restrict, or interfere with our work as Human Rights Defenders. Any attempt to do so is regarded as interference and potential reprisal within the meaning of the above-referenced instruments.

Surveillance Reality

We operate between Geneva and Vienna, two international hubs where diplomacy, intelligence activity, international missions, and counter-terrorism structures intersect. In such environments, mass surveillance is a documented and structural reality — legal and illegal, targeted and indiscriminate.

This reality applies not only to us, but to everyone operating in digital space.
The difference is that we acknowledge it and act accordingly.

For us, data accumulation, trace creation, and system openness constitute existential risks. This is why we minimise data, avoid exposure, and operate with restraint. This is not paranoia; it is professional necessity.

Notice to Third Parties and Legal Representatives

For the sake of clarity, we expressly state the following:

Submissions, complaints, or demands — including those advanced by legal representatives — that demonstrate fundamental misunderstandings of human-rights protection frameworks, or that rely on incorrect legal assumptions, are not engaged with.

Inputs containing factual, legal, or structural deficiencies are deleted without response. This is not neglect; it is a protection measure. Under our recognised protection status, we are entitled to prioritise security and operational integrity over responding to defective or bad-faith interventions.

Attempts to exert pressure through formalistic complaints, data demands, or speculative legal constructions are regarded as interference with protected human-rights work. Such actions are treated as hostile and potentially retaliatory, irrespective of the professional title or role of the sender.

We state this openly because we no longer expend resources defending our work against ignorance or the illusion of understanding. Human Rights Defender work is not a forum for opportunistic litigation, revenue-driven complaints, or performative legalism.

Relocation and Applicable Law

We are currently operating within a relocation and protection context. During this phase, our work is governed by Austrian law in conjunction with applicable international law, with priority given to the international protection framework for Human Rights Defenders.

Domestic legal interpretations that fail to examine or respect this framework are not considered operative with respect to our protected work.

A Conscious Opening

The House of Mamifico represents a rare and deliberate opening. It is one of the first times we have chosen to make parts of our work publicly visible, in a manner comparable to how non-governmental organisations operate.

We are fully aware that openness increases exposure and the risk of mass surveillance. This trade-off is managed carefully, deliberately, and with restraint.

Privacy Policy

With this privacy statement, we inform you about the processing of personal data in connection with our activities and activities,  including our website under the domain name www.mamifico.com. In particular, we provide information about what, how and where we process which personal data. We also provide information about the rights of individuals whose data we process.

For individual or additional activities and activities, we may publish additional privacy statements or other information on data protection.

We are subject to Swiss law as well as any applicable foreign law, in particular that of the European Union (EU) with the European General Data Protection Regulation (GDPR).

In a decision of 26 July 2000, the European Commission recognised that Swiss data protection law guarantees adequate data protection. In a report dated 15 January 2024, the European Commission confirmed this adequacy decision.

  1. The contact address

Responsible in terms of data protection law is:

ESTRIMAGO GMBH
Chamstr 288934 Knonau
Switzerland

yourrights (at) estrimago.com

We do not have a phone number by security reasons.

In individual cases, third parties may be responsible for the processing of personal data or there may be joint responsibility with third parties. We will be happy to provide data subjects with information about their respective responsibilities on request.

Data protection representation in the European Economic Area (EEA)

We have the following data protection representation in accordance with Art. 27 GDPR:

VGS Datenschutzpartner GmbH
Am Kaiserkai 6920457 HamburgGermany

info@datenschutzpartner.eu

The Data Protection Representative serves as an additional point of contact for GDPR-related inquiries to data subjects and authorities in the European Union (EU) and the rest of the European Economic Area (EEA).

  1. Definitions and legal bases

2.1 Terms

Data subject: Natural person about whom we process personal data.

Personal data: Any information relating to an identified or identifiable natural person.

Particularly sensitive personal data: data on trade union, political, religious or ideological views and activities, data on health, privacy or membership of an ethnic or racial group, genetic data, biometric data that uniquely identifies a natural person, data on criminal and administrative sanctions or persecution, and data on social assistance measures.

Editing: Any handling of personal data, regardless of the means and processes used, such as querying, comparing, adapting, archiving, storing, reading, disclosing it, procuring, recording, collecting, deleting, disclosing it, structuring, organizing, storing, modifying, disseminating, linking, destroying and using personal data.

European Economic Area (EEA): Member States of the European Union (EU) as well as the Principality of Liechtenstein, Iceland and Norway.

2.2 Legal basis

We process personal data in accordance with Swiss law, in particular the Federal Act on Data Protection (Data Protection Act, FADP) and the Ordinance on Data Protection (Data Protection Ordinance, DSV).

If and to the extent that the European General Data Protection Regulation (GDPR) is applicable, we process personal data or personal data in accordance with at least one of the following legal bases:

  • Art. 6 (1) (b) GDPR for the necessary processing of personal data for the performance of a contract with the data subject and for the implementation of pre-contractual measures.
  • Art. 6 (1) (f) GDPR for the necessary processing of personal data in order to safeguard legitimate interests – including the legitimate interests of third parties – unless the fundamental freedoms and fundamental rights as well as the interests of the data subject prevail. Such interests are, in particular, the permanent, humane, secure and reliable exercise of our activities and activities, the guarantee of information security, protection against misuse, the enforcement of our own legal claims and compliance with Swiss law.
  • Art. 6 (1) (c) GDPR for the necessary processing of personal data for the fulfilment of a legal obligation to which we are subject under the applicable law of member states in the European Economic Area (EEA).
  • Art. 6 (1) (e) GDPR for the necessary processing of personal data for the performance of a task that is in the public interest.
  • Art. 6 (1) (a) GDPR for the processing of personal data with the consent of the data subject.
  • Art. 6 (1) (d) GDPR for the necessary processing of personal data in order to protect the vital interests of the data subject or another natural person.
  • Art. 9 para. 2 et seq. GDPR for the processing of special categories of personal data, in particular with the consent of the data subjects.

The European General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal data and the processing of particularly sensitive personal data as the processing of special categories of personal data (Art. 9 GDPR).

  1. Type, scope and purpose of the processing of personal data

We process the personal data that is necessary to be able to carry out our activities and activities in a permanent, humane, safe and reliable manner. In particular, the processed personal data may fall into the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data and payment data. The personal data can also constitute particularly sensitive personal data.

We also process personal data that we receive from third parties, obtain from publicly available sources or collect in the course of carrying out our activities and activities, to the extent that such processing is permitted.

Where necessary, we process personal data with the consent of the data subjects. In many cases, we may process personal data without consent, for example to comply with legal obligations or to protect overriding interests. We may also ask data subjects for their consent where their consent is not required.

We process personal data for the duration necessary for the respective purpose. We anonymise or delete personal data, in particular depending on statutory retention and limitation periods.

  1. Automation and Artificial Intelligence (AI)

We can process personal data automatically or use artificial intelligence to process personal data.

We may use profiling to automatically assess certain personal aspects relating to data subjects. Profiling is used, for example, to analyze or predict interests, behaviors or personal preferences.

In individual cases, we provide information about decisions that are based exclusively on automated processing of personal data and are associated with legal consequences for the data subjects or significantly impair them (automated individual decisions).

  1. Disclosure of personal data

We may disclose personal data to third parties, have them processed by third parties or process them together with third parties. Such third parties may be, for example, specialized providers whose services we use.

In the course of our activities and activities, we may disclose personal data in particular to banks and other financial service providers, public authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and credit agencies, logistics and shipping companies, marketing and advertising agencies, media, parent companies, sister companies and subsidiaries, organizations and associations, social institutions,  telecommunications companies, insurance companies and payment service providers.

  1. Communication

We process personal data in order to be able to communicate with individuals as well as with authorities, organizations and companies. In particular, we process data that a data subject transmits to us when contacting us, for example by post or e-mail. We may store such information in an address book or similar tools.

Third parties who transmit data about other persons to us are obliged to ensure the data protection of these data subjects independently. In particular, they must ensure that such data is accurate and may be transmitted.

  1. Data security

We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. With our measures, we guarantee in particular the confidentiality, availability, traceability and integrity of the processed personal data, but without being able to guarantee absolute data security.

Access to our website and our other digital presence is by means of transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting a website without transport encryption.

Our digital communication – like all digital communication – is subject to mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by secret services, police stations and other security authorities. We also cannot rule out the possibility that a person affected is being specifically monitored.

  1. Personal data abroad

We generally process personal data  in Switzerland and the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, in particular for the purpose of processing or having it processed there.

We can export personal data to all countries on earth and elsewhere in the universe, provided that the law there  ensures adequate data protection in accordance with the decision of the Swiss Federal Council and – if and to the extent that the General Data Protection Regulation (GDPR) is applicable – also in accordance with the decision of the European Commission.

We may transfer personal data to countries whose law does not ensure adequate data protection, provided that data protection is guaranteed for other reasons, in particular on the basis­of standard data protection clauses or with other appropriate safeguards. In exceptional cases, we may export personal data to countries without adequate or suitable data protection if the special data protection requirements are met, such as the explicit consent of the data subjects or a direct connection with the conclusion or execution of a contract. We will be happy to provide data subjects with information about any guarantees or provide a copy of any guarantees upon request.

  1. Rights of data subjects

9.1 Data protection claims

We grant all claims to data subjects in accordance with applicable law. In particular, data subjects have the following rights:

  • Information: Data subjects can request information as to whether we process personal data about them and, if so, what personal data is involved. Data subjects also receive the information necessary to assert their data protection claims and to ensure transparency. This includes the processed personal data as such, but also information on the purpose of processing, the duration of storage, any disclosure or export of data to other countries and the origin of the personal data.
  • Rectification and restriction: Data subjects can rectify inaccurate personal data, have incomplete data completed and have the processing of their data restricted.
  • Possibility for their own point of view and human review: Data subjects can present their own point of view and request review by a human in the case of decisions that are based exclusively on automated processing of personal data and are associated with legal consequences for them or significantly affect them (automated individual decisions).
  • Deletion and objection: Data subjects can have personal data deleted (“right to be forgotten”) and object to the processing of their data with effect for the future.
  • Data disclosure and data transfer: Data subjects can request the release of personal data or the transfer of their data to another controller.

We may postpone, restrict or refuse to exercise the rights of data subjects to the extent permitted by law. We can point out to data subjects any requirements that may have to be met for exercising their data protection rights. For example, we may refuse to provide information in whole or in part with reference to confidentiality obligations, overriding interests or the protection of other persons. For example, we may also refuse to delete personal data in whole or in part, in particular with reference to statutory retention obligations.

We may, exceptionally, provide costs for the exercise of the rights  . We inform affected persons in advance of any costs.

We are obliged to take appropriate measures to identify data subjects who request information or assert other rights. Data subjects are obliged to cooperate.

9.2 Legal protection

Data subjects have the right to enforce their data protection rights through legal action or to file a complaint or complaint with a data protection supervisory authority.

The data protection supervisory authority for private controllers and federal bodies in Switzerland is the  Federal Data Protection and Information Commissioner (FDPIC).

European data protection supervisory authorities are organised as members of the European Data Protection Board (EDPB). In some member states in the European Economic Area (EEA), the data protection supervisory authorities are structured on a federal basis, especially in Germany.

  1. Use of the Website

10.1 Cookies

We may use cookies. Cookies – first-party cookies as well as cookies from third parties whose services we use (third-party cookies) – are data that are stored in the browser. Such stored data does not have to be limited to traditional cookies in text form.

Cookies can be stored in the browser temporarily as “session cookies” or for a certain period of time as so-called permanent cookies. “Session cookies” are automatically deleted when the browser is closed. Permanent cookies have a certain storage period. In particular, cookies make it possible to recognise a browser the next time you visit our website and thus measure the reach of our website, for example. However, permanent cookies can also be used for online marketing, for example.

Cookies can be deactivated, restricted or deleted in whole or in part at any time in the browser settings. The browser settings often also enable automated deletion and other management of cookies. Without cookies, our website may no longer be fully available. We actively ask for explicit consent to the use of cookies – at least if and to the extent required by applicable law.

In the case of cookies used for success and reach measurement or for advertising, a general objection (“opt-out”) via theAdChoices(Digital Advertising Alliance of Canada), dieNetwork Advertising Initiative(NAI),YourAdChoices(Digital Advertising Alliance) oderYour Online Choices(European Interactive Digital Advertising Alliance, EDAA).

10.2 Logging

We may log at least the following information for each access to our website and our other digital presence, provided that this is determined or transmitted to our digital infrastructure by default during such access: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual subpage of our website accessed including the amount of data transferred, last website accessed in the same browser window (referrer or referrer).

We log such information, which may also constitute personal data, in log files. The information is necessary in order to be able to provide our digital presence permanently, in a human-friendly and reliable manner. The information is also necessary to ensure data security – also by third parties or with the help of third parties.

10.3 Web Beacons

We can integrate web beacons into our digital presence. Web beacons are also known as web beacons. Web beacons – including those of third parties whose services we use – are usually small, invisible images or scripts formulated in JavaScript that are automatically retrieved when accessing our digital presence. Web beacons can capture at least the same information as logging in log files.

  1. Notices and Notices

11.1 Success and reach measurement

Notifications and notifications may contain web links or web beacons that track whether an individual message has been opened and which web links have been clicked. Such web links and web beacons may also record the use of notifications and communications on a personal basis. We need this statistical recording of usage for success and reach measurement in order to be able to send notifications and messages based on the needs and reading habits of the recipients in an effective and humane way as well as permanently, securely and reliably.

11.2 Consent and objection

In principle, you must  consent to the use of your e-mail address and your other contact addresses, unless the use is permitted for other legal reasons. We can use the “double opt-in” procedure to obtain a doubly confirmed consent. In this case, you will receive a message with instructions for double verification. We may log consents obtained, including IP address and timestamp,  for evidentiary and security purposes.

In principle, you can  opt-out of receiving notifications and communications such as newsletters at any time. With such an objection, you can also object to the statistical recording of use for success and reach measurement. We reserve the right to provide necessary notifications and communications in connection with our activities and activities.

11.3 Notification and Communications Service Providers

We send notifications and communications with the help of specialized service providers.

  1. Social Media

We are present on social media platforms and other online platforms in order to be able to communicate with interested people and to inform them about our activities and activities. In connection with such platforms, personal data may also be processed outside Switzerland and the European Economic Area (EEA).

The general terms and conditions (GTC) and terms of use as well as data protection declarations and other provisions of the individual operators of such platforms also apply. These provisions provide information in particular about the rights of data subjects directly vis-à-vis the respective platform, which includes, for example, the right to information.

We are jointly responsible for our social media presence on Facebook, including the so-called page insights, if and to the extent that the General Data Protection Regulation (GDPR) is applicable – together with Meta Platforms Ireland Limited (Ireland). Meta Platforms Ireland Limited is part of the Meta companies (including in the USA). Page insights provide insight into how visitors interact with our Facebook presence. We use Page Insights to provide our social media presence on Facebook in an effective and people-friendly way.

Further information on the type, scope and purpose of data processing, information on the rights of data subjects and the contact details of Facebook as well as Facebook’s data protection officer can be found in Facebook’s privacy policy. We have concluded the so-called “Addendum for Controllers” with Facebook and thus agreed in particular that Facebook is responsible for guaranteeing the rights of data subjects. For the so-called Page Insights, the corresponding information can be found on the page “About Page Insights” including “Information about Page Insights data”.

You are welcome to use our social media presence on Tik Tok, Kakao Talk and Pinterest, as well as LinkedIn. However, they agree to their terms of use with all consistency. We have a legitimate interest in being there. Once you’re there: Check out the terms and conditions and policies.

  1. Third-Party Services

We use the services of specialised third parties in order to be able to carry out our activities and activities in a permanent, humane, safe and reliable manner. Such services allow us, among other things, to embed features and content on our website. In such an embedding, the services used record the IP addresses of the users at least temporarily for technically compelling reasons  .

For necessary security, statistical and technical purposes, third parties whose services we use may process data related to our activities and activities in an aggregated, anonymised or pseudonymised form. For example, it is performance or usage data in order to be able to offer the respective service.

The companies are not disclosed for protection reasons.

13.1 Digital Infrastructure

We use the services of specialized third parties to be able to use the digital infrastructure required in connection with our activities and activities. These include, for example, hosting and storage services from selected providers.

In particular, we use:

You also want to use an NSA-incompatible hoster for your website that is very easy to use? Use our affiliate link. We do a little advertising for providers who have been making our lives easier for years. We can use them to send self-destructing messages, create websites, manage our documents, and keep the NSA out. Why ? Because this Geneva-based company understands Geneva and us. We love Infomaniak for saying about themselves: they are NSA incompatible. We can confirm that since we have been using them, our attacks have been reduced to a minimum and so are our costs. Because Infomaniak is also cheap. Newsletter, web hosting, Ksuite – it has it all:

13.2 Audio and video conferences

We use specialized audio and video conferencing services to communicate online. For example, we can use it to hold virtual meetings or conduct online lessons and webinars. For participation in audio and video conferences, the legal texts of the individual services, such as data protection declarations and terms of use, also apply.

Depending on your life situation, we recommend muting the microphone by default when participating in audio or video conferences, as well as blurring the background or displaying a virtual background.

In particular, we use:

Interested in our partners ? (Advertising) :

13.3 Online Collaboration

We use third-party services to enable online collaboration. In addition to this privacy policy, any directly apparent terms and conditions of the services used, such as terms of use or privacy policies, also apply.

13.4 Social Media Features and Social Media Content

We use third-party services and plugins to embed features and content from social media platforms, as well as to enable content sharing on social media platforms and other means.

In particular, we use:

13.5 Digital Content

We use services from specialized third parties to be able to integrate digital content into our website. Digital content is in particular image and video material, music and podcasts.

13.6 Fonts

We use third-party services to embed selected fonts as well as icons, logos and symbols on our website.

Disclosure is not made for protection reasons.

13.7 E-Commerce

We engage in e-commerce and use third-party services to successfully offer services, content or goods.

In particular, we use:

13.8 Advertisement

We use the opportunity to  display targeted advertising on third parties such as social media platforms and search engines for our activities and activities.

With such advertising, we would like to reach people in particular who are already or could be interested in our activities and activities (remarketing and targeting). For this purpose, we may transmit corresponding – possibly also personal – information to third parties who enable such advertising. We can also determine whether our advertising is successful, in particular whether it leads to visits to our website (conversion tracking).

Third parties with whom we advertise and with whom you are logged in as a user may be able to assign the use of our website to your profile there.

In particular, we use:

  1. Participation in Affiliate Programs

We participate in affiliate programs. On the one hand, we may be compensated for references to third-party offers or for linking to third-party offers. On the other hand, we may compensate third parties for pointing out our activities and activities or linking to our offer (affiliate marketing). In this context, it can be recorded – also on a personal basis – which offers are taken advantage of and which web links are followed.

In particular, we participate in:

  1. Website Extensions

We use extensions for our website to take advantage of additional features. We may use selected services from suitable providers or use such extensions on our own digital infrastructure.

Services are not disclosed for protection reasons.

  1. Success and reach measurement

We try to measure the success and reach of our activities and activities. In this context, we can also measure the effect of third-party information or check how different parts or versions of our digital presence are used (“A/B test” method). Based on the results of the success and reach measurement, we can fix errors, strengthen popular content or make improvements.

In most cases, the IP addresses of individual users are recorded for success and reach measurement. In this case, IP addresses are generally shortened (“IP masking”) in order to follow the principle of data economy through the appropriate pseudonymisation.

Cookies can be used to measure success and reach and user profiles can be created. Any user profiles created include, for example, the individual pages visited or content viewed on our digital presence, information on the size of the screen or browser window and the – at least approximate – location. In principle, any user profiles are created exclusively in pseudonymized form and are not used to identify individual users. Individual third-party services with which users are logged in can at best assign the use of our online offer to the user account or user profile of the respective service.

Services are not disclosed for protection reasons.

  1. Final information on the privacy policy

We have created this privacy policy using the privacy generator from Datenschutzpartner. We have adapted individual passages to our need for protection. However, this applies exclusively to disclosure. In terms of the hierarchy of norms, it applies: Our intellectual property right – then DSG / GDPR.

We may update this Privacy Policy at any time. We will inform you about updates in an appropriate form, in particular by publishing the current privacy policy on our website.