PrivacyPrivacy

This English version is a courtesy translation. Only the German Datenschutzerklärung is legally binding.

In short

• Statistics run only if you agree in the cookie banner. Without your consent we set no cookies.
• No advertising, no sale of data, no profiles across websites.
• No forms that send data to a server. Intake and newsletter only open your mail program.
• Fonts and images are on our own server.

Controller

Avtoris
Djordje Mojsilovic (CEO)
Ayaan Khan (CTO)
Seat: Zurich, Switzerland. Postal address on request.
Email: djordje.mojsilovic@avtoris.studio

Avtoris is no legal entity. The people named above are jointly the controller under data protection law. The contact person for all data protection questions is Djordje Mojsilovic. We have appointed no data protection officer and no representative in the EU, because the law does not require it for us.

Applicable law

We process personal data under the Swiss Federal Act on Data Protection (FADP, in German DSG) and its ordinance (DSV). Where the EU General Data Protection Regulation (GDPR) applies, it applies too. For the GDPR we name the legal basis of each processing.

Visiting the website and server logs

This website runs at Vercel Inc., USA. Vercel delivers the pages through a worldwide network of servers, usually from a server near you. When you open a page, Vercel processes technical data: IP address, date and time, the page, referrer, browser and operating system. This is necessary so that the page reaches you and to fend off attacks.

Vercel keeps these logs only briefly and under its own retention periods. We do not analyse the logs, except in case of a fault or an attack. GDPR: legitimate interest in secure operation (Art. 6(1)(f)).

The same applies to requests from programs and AI agents to our machine readable resources (Markdown, llms.txt, /mcp). The MCP server is read only and stores no request content.

Cookies and browser storage

On your first visit we show a cookie banner. You have three options: «Accept all», «Necessary only» or «Settings». Both main buttons have the same size and are equally visible. Before you agree, no statistics run and we store nothing on your device: no cookies, no local storage, no session storage. The website does not even open these stores. If your browser sends the «Global Privacy Control» signal, we treat it as a no and show no banner.

Only after your consent do we set our own cookies (for avtoris.studio only, not shared):

• avtoris_consent: your choice with the date. Valid for 12 months, then we ask again.
• avtoris_lang: your language (German or English), when you switch the language. So the website opens in this language on your next visit. 12 months.

After «Necessary only» or «Reject all» we store nothing on your device. Your choice stays only in the open tab (in the browser's memory), so the banner does not ask again on every page. It is gone as soon as you close the tab or leave the website. A withdrawal deletes our cookies at once.

These entries stay in your browser and go to no one. GDPR: legitimate interest (Art. 6(1)(f)), for the proof of your choice also Art. 7(1).

You can change or withdraw your choice at any time. The withdrawal applies at once. Open cookie settings

You can also block or delete cookies and storage in your browser. The website then works exactly the same.

Statistics with Vercel Web Analytics

Only with your consent. We use Vercel Web Analytics to see which pages people read. Vercel stores no cookies in your browser. For each page view Vercel records: time, page, referrer, country and region, device type, operating system and browser. To count visits, Vercel builds a hash from the request. It is discarded after 24 hours. We see only aggregated numbers, no individual people and no IP addresses.

Provider: Vercel Inc., USA. GDPR: consent (Art. 6(1)(a)). More: Vercel Analytics Privacy.

Contact by email, intake and newsletter

The intake and newsletter forms send nothing to our server. They prepare an email and open it in your mail program. You decide whether to send it.

When you write to us, we process your details (name, email, company, content of the message) to answer your request, to make an offer or to perform a contract. Our mailboxes (addresses at @avtoris.studio) are at Zoho Mail in data centers in the EU. The provider is Zoho Corporation B.V., Netherlands. For operation and support Zoho can involve companies of the Zoho group outside the EU, for example in the USA and India. The standard contractual clauses of the EU Commission apply to this. GDPR: contract and pre contractual steps (Art. 6(1)(b)), otherwise legitimate interest in answering (Art. 6(1)(f)).

We send the newsletter only if you ordered it yourself. Every issue tells you how to unsubscribe. A short reply is enough. GDPR: consent (Art. 6(1)(a)).

Google Business Profile

Avtoris has a business profile on Google (Google Search and Google Maps). When you view the profile, write a review or contact us through the profile, Google processes your data under its own rules. From Google we get only aggregated numbers, for example how often the profile was seen or the website was clicked. We see reviews with the name you show on Google. More: Google privacy policy.

Fonts, images and links

Fonts and images are on our server. There is no connection to Google Fonts, Unsplash or other services before you click something.

We link to QFT, GitHub, LinkedIn and the portfolios of the founders. Only when you open a link does the other provider get data from you. Its privacy policy applies there.

Recipients and disclosure abroad

We do not sell personal data. We share it only with these service providers, who work on our behalf or as controllers of their own:

• Vercel Inc., USA: hosting and statistics.
• Zoho Corporation B.V., Netherlands: email (Zoho Mail, data centers in the EU).
• Google LLC, USA: business profile.

For the USA, the Swiss Federal Council decided on 14 August 2024: companies certified under the Swiss-U.S. Data Privacy Framework offer adequate data protection (Annex 1 DSV, in force since 15 September 2024). Vercel and Google state that they are certified. The EU, including Ireland, counts as adequate. Where needed, the providers also use the standard contractual clauses of the EU Commission, which the Swiss Federal Data Protection and Information Commissioner (FDPIC) recognises.

Retention

• Your cookie choice: 12 months.
• Statistics: Vercel discards the hash after 24 hours. Only aggregated numbers remain.
• Requests without an order: we delete them when they are done, after 2 years at the latest.
• Offers, contracts and invoices: as long as the law requires, usually 10 years (Art. 958f of the Swiss Code of Obligations).
• Newsletter: until you unsubscribe.

Data security

The website runs only over HTTPS. We process as little data as possible, protect the accounts for hosting and email with two factor authentication and give access only to the people who need it.

No automated decisions

We make no automated individual decisions (Art. 21 FADP, Art. 22 GDPR). We create no profiles that assess you as a person.

Your rights

You have these rights under the FADP and, where it applies, the GDPR:

• Access to your data. Free of charge, answer within 30 days (Art. 25 FADP).
• Correction of wrong data and deletion.
• Objection to a processing and restriction of processing.
• Handover or transfer of your data in a common format (Art. 28 FADP).
• Withdrawal of a consent, at any time and for the future.

For this, write to us at djordje.mojsilovic@avtoris.studio. We can ask for proof of your identity.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, in German EDÖB), Feldeggweg 1, 3003 Bern: edoeb.admin.ch. If you live in the EU, also to the supervisory authority of your country.

Changes

We update this notice when the website or the law changes. The version shown here applies. For a new statistics service we ask you again in the cookie banner.

Last updated: 13 October 2026