Privacy policy
Last updated: 6 July 2026
This page explains which personal data we process, why, and what rights you have. It is based on the Swiss Data Protection Act (revFADP) and, where applicable, the European GDPR.
Controller
The controller for data processing on atelo.ch is:
- Batuhan Ayfer
- Zurich, Switzerland
- batu@atelo.ch
Principles
We collect as little data as possible. We do not sell data, do not build profiles, and do not make automated individual decisions. You can use most of Atelo without an account and without providing personal data.
Hosting and server logs
The website is served by Vercel Inc. (USA). When you visit the site, Vercel processes technical data such as IP address, browser type, and access time in server logs. This data is required for operating and securing the website and is retained only briefly.
We also use Vercel Analytics for anonymous performance measurement (load times, errors). Vercel Analytics sets no cookies and builds no visitor profiles.
For transfers to the USA, Vercel relies on recognised safeguards (EU-US Data Privacy Framework or standard contractual clauses).
Database
Our data (course data, accounts, newsletter sign-ups) is stored with Supabase in an EU data centre (Frankfurt). Supabase processes the data only on our behalf.
Account and login
When you create an account, we store your email address and the times of your logins. Sign-in is passwordless via a login link or code sent to you by email; we use Resend for delivery (sender login@atelo.ch).
While you are signed in, session cookies keep you logged in; these are technically necessary. Courses you save are linked to your account so you can find them again.
You can have your account and its data deleted at any time; a short message to batu@atelo.ch is enough.
Contact
If you write to us by email or via the linked contact form (Google Forms), we use your details only to handle your request. Google's privacy policy additionally applies to the form.
Click statistics
When you click through from Atelo to a provider's website, we record which provider was visited along with basic browser information (for example browser type). We do not store your IP address.
Google Analytics
Only if you consent in the cookie banner do we use Google Analytics 4 to understand which pages are visited and how visitors find us. The provider is Google LLC (USA); transfers rely on the EU-US Data Privacy Framework.
If you decline, nothing is collected and no analytics cookies are set. You can withdraw your consent at any time; see the cookie policy.
Maps
Course detail pages load a static map image from Google Maps. When this image is requested, Google may log your IP address according to its own privacy policy.
Abuse prevention
To prevent abuse (rate limiting), we process your IP address briefly in memory. It is never stored in a database and is gone within seconds.
Recipients and processors
We share personal data only with service providers that process it on our behalf to run atelo.ch:
- Vercel Inc. (USA): hosting and performance measurement
- Supabase (EU): database
- Google LLC (USA): analytics (only with consent), maps, contact form
- Resend (USA): delivery of login and system emails
We do not sell data and do not pass it on for advertising purposes.
Retention
We keep personal data only as long as needed for the respective purpose: account data until you delete your account, newsletter addresses until you unsubscribe, server logs only briefly.
Your rights
Under the Swiss Data Protection Act (and, where applicable, the GDPR) you have the right to:
- request information about which personal data we process about you,
- have inaccurate data corrected,
- request the deletion of your data,
- object to processing and withdraw any consent you have given at any time,
- receive a copy of your data in a common format.
To exercise these rights, write to batu@atelo.ch. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Changes
We update this privacy policy when our data processing changes. The version published here applies; the date of the last update is shown above.