Skip to content
Atagno – Home

Legal

Privacy policy

This privacy policy explains which personal data we process when you visit this website, for what purpose and for how long. It is based on the Swiss Federal Act on Data Protection (FADP) and – where applicable – the EU General Data Protection Regulation (GDPR), as we expect visitors from all over the world. The German version is authoritative.

1. Controller

Atagno (in formation) Tribschenstrasse 60 6005 Luzern, Switzerland Email: kontakt@atagno.com

No representative in the EU has been appointed at present.

2. Overview

When you visit this website, we process data in three cases:

  • Always: technical connection data for delivering and securing the website, including the detection of suspicious behaviour (sections 3 and 4). We do not set our own cookies for this.
  • Only with your consent: audience measurement with our own statistics cookie (section 5).
  • When you write to us: details from the contact form (section 6).

Our cookie policy describes the individual cookies we use.

3. Hosting (Cloudflare)

This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for the EEA and Switzerland: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany). When the website is accessed, Cloudflare processes technically necessary connection data such as IP address, date and time, requested page, browser type and referrer in order to deliver the website and protect it against attacks. To protect against automated access, Cloudflare may set technically necessary cookies.

Legal basis: legitimate interest in secure and efficient operation (Art. 31(1) FADP; Art. 6(1)(f) GDPR). More information: cloudflare.com/privacypolicy.

4. Security log and detection of suspicious behaviour

To protect this website against attacks, misuse and automated access, we log the following for every page request:

  • the full IP address and the country and network operator derived from it,
  • date and time, requested address, request method and response status,
  • browser identifier (user agent) and browser language settings,
  • a risk score calculated from these data, together with the decisive characteristics.

Behaviour is considered suspicious in particular when there are many requests in a short time, requests to known attack targets, missing or typically automated browser identifiers, or forms submitted unusually quickly or via the hidden spam field. Where there are clear indications, we automatically block the IP address concerned for one hour. We do not make any other automated decisions.

The data are stored in a database at Cloudflare (Cloudflare D1), are evaluated only to defend against attacks and are deleted automatically after 30 days. We do not set cookies for the security log.

Legal basis: legitimate interest in the secure operation of the website (Art. 31(1) FADP; Art. 6(1)(f) GDPR).

If you choose “Allow statistics” in the cookie notice, we measure how this website is used with our own solution. We do not use services from Google or other analytics providers. We record:

  • a random, pseudonymous visitor ID in the atg_vid cookie and a session ID in the browser’s session storage,
  • pages viewed, time, duration of visit and scroll depth,
  • page language and browser language settings,
  • the approximate location (country, region, city) that Cloudflare derives from the IP address, and the shortened IP address,
  • referring page, screen size, time zone and browser identifier,
  • an indication of whether the browser is being controlled automatically.

The purpose is to improve content and language versions and to detect misuse. The data are stored in our own database at Cloudflare, are not passed on to third parties for advertising purposes and are not combined with data from other websites. They are deleted after 14 months.

Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 31(1) FADP and Art. 45c of the Swiss Telecommunications Act). You can withdraw your consent at any time via the “Cookie settings” link at the bottom of every page. The statistics cookie is then deleted.

6. Contact form and email

If you write to us via the contact form, we process your details (name, email address, optionally company, message) and the time of transmission in order to answer your enquiry. Delivery is handled by the email service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). More information: resend.com/legal/privacy-policy.

To protect against spam, we use an invisible form field, measure the time between opening and submitting the form and may use Cloudflare Turnstile. Rejected submissions are recorded in the security log (section 4).

Legal basis: processing to answer your enquiry (Art. 31(2)(a) FADP; Art. 6(1)(b) GDPR) and your consent via the privacy checkbox (Art. 6(1)(a) GDPR). We keep enquiries for as long as necessary to process them and then delete them, unless statutory retention obligations apply.

Fonts are loaded from our own server, not from Google Fonts. Links to LinkedIn and to the websites of our ventures are ordinary links; data are only transmitted to the respective provider when you click on them.

8. Disclosure abroad

Cloudflare and Resend may process data in the USA. The transfer is based on the Swiss-U.S. and EU-U.S. Data Privacy Framework and on the EU standard contractual clauses with the adjustments required for Switzerland.

9. Your rights

Within the scope of applicable data protection law, you have the right to access, rectification, erasure or restriction of processing, to data portability, to object to processing and to withdraw consent at any time with effect for the future. To exercise these rights, please contact us at the address above. Persons in the EEA may also lodge a complaint with a data protection supervisory authority. In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is responsible.

10. Data security

This website is delivered exclusively via encrypted connections (HTTPS). We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

11. Changes

We may amend this privacy policy at any time. The version published on this website applies. This version applies from 5 November 2026.