1. Controller

Aleks Sidorecs
Zurich, Switzerland
Email: aleks@automatiqa.io

Automatiqa Lab is a personal project operated by Aleks Sidorecs as a natural person. He is the data controller responsible for the processing described here, under the Swiss Federal Act on Data Protection (nFADP, in force 1 September 2023) and, where it applies, the EU General Data Protection Regulation (GDPR).

This policy covers www.automatiqa.io and notebook.automatiqa.io.

2. What Is Collected

2.1 If you subscribe

The only form on this site is the newsletter subscription form. It collects your email address and nothing else. No name, company, role or phone number is requested or stored.

2.2 If you write to me

If you send an email, that message and your address are processed to reply to you.

2.3 When you simply read

Reading this site requires no account and no form. The web server keeps a short access log to keep the site working and to see which search engines and AI crawlers fetch which pages.

That log does not contain visitor IP addresses. Because of how the server is built, every request is recorded with the same internal gateway address rather than the address of the person making it. What is kept per request is the path, the response status, the User-Agent string and the Referer header. All other request headers are discarded before writing.

No analytics service is used on this site. There is no tracking pixel, no advertising tag, no cross-site tracker, and no profiling of readers.

2.4 Cookies and device storage

No cookies are set when you visit or read this site. There is therefore no cookie banner, because there is nothing to consent to.

Two things are worth stating precisely:

  • Session storage. The publishing platform stores a single first-party entry (ghost-history) in your browser's session storage. It records which page a newsletter signup came from. It is deleted when you close the tab, never leaves this domain, and is not used to build a profile.
  • Sign-in cookies. If you subscribe and then sign in, a cookie is set to keep you signed in. It is strictly necessary for that function and is set only if you choose to sign in.

Processing rests on the following grounds (Art. 6 GDPR / Art. 31 nFADP):

  • Consent - for the newsletter. You give it by subscribing and may withdraw it at any time using the unsubscribe link in any issue.
  • Legitimate interest - for keeping short server logs so the site stays available and abuse can be identified.
  • Performance of a contract - where a separate client engagement exists.
  • Legal obligation - where Swiss or EU law requires retention.

Personal data is never sold, and never shared with third parties for their own marketing.

4. Processors

Three third parties are involved in running this site. They are named here because naming them is the point of this section.

  • Hostinger International Limited - hosting. The server is located in Frankfurt, Germany (EU).
  • Mailgun (Sinch) - newsletter delivery and transactional email such as sign-in links. Subscriber email addresses are processed here. See section 5.
  • jsDelivr - a public content delivery network. Two front-end scripts belonging to the publishing platform (the subscription widget and the search box) are loaded from cdn.jsdelivr.net when a page on www.automatiqa.io opens. As with any request to another server, your IP address is visible to that network in order to deliver the file. No such request is made on notebook.automatiqa.io, which loads only its own files.

Legal authorities receive data only where the law requires it.

5. International Transfers

Hosting is inside the EU. Switzerland, where the controller is based, holds an adequacy decision from the European Commission.

Newsletter email is processed in the United States. Mailgun's US region is used for delivery, which means subscriber email addresses are transferred outside Switzerland and the EEA. That transfer relies on Standard Contractual Clauses and the provider's certification under the EU-US Data Privacy Framework. If you would rather not have your address processed in the US, do not subscribe - nothing else on this site requires it.

6. Retention

  • Newsletter subscription: kept until you unsubscribe, then deleted.
  • Email correspondence: kept while the exchange is live and for up to 3 years afterwards.
  • Server access logs: rotated daily and kept for 7 days. They contain no visitor IP addresses.
  • Aggregate crawl statistics: daily counts of which automated agents fetched which pages. These are totals only and contain no personal data.
  • Client engagement records: 10 years after the engagement ends, where Swiss commercial law requires it (Art. 958f OR).

7. Your Rights

Under GDPR and nFADP you may request:

  • Access - a copy of your personal data
  • Rectification - correction of inaccurate data
  • Erasure - deletion of your data
  • Restriction - a limit on how your data is used
  • Portability - your data in a structured, machine-readable form
  • Objection - to processing based on legitimate interest
  • Withdrawal of consent - at any time, without affecting processing already carried out

Email aleks@automatiqa.io to exercise any of these. Replies within 30 days. In practice, for most readers the only data held is an email address on the newsletter list, and the unsubscribe link in every issue removes it immediately.

8. Complaints

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
  • EU/EEA: your local supervisory authority

9. Security

  • TLS encryption on every domain, with HTTP redirected to HTTPS
  • Strict transport security enforced
  • Access to systems restricted on a need-to-know basis
  • Hosting inside the EU (Frankfurt, Germany)
  • Collection kept deliberately minimal - the least effective protection for data is holding it in the first place

10. Children

This site is written for working professionals and is not directed at children under 16. No data is knowingly collected from them.

11. Changes

This policy will be updated when the law or the site's practices change. Material changes will be noted here with a new date below.

Last updated: 10 August 2026