Tobias Boner in Switzerland is responsible for this personal website and the personal data described below. This site has no advertising trackers, and optional audience measurement remains disabled unless you explicitly accept it.
Controller and contact
The controller is Tobias Boner, Switzerland. Use the contact form on this website for privacy questions or to exercise your rights; the request will be handled through the same protected contact process described below.
Contact messages
Your name, email address, subject, message, and submission time are processed to deliver and answer your request. AWS API Gateway and Lambda validate the request, and Amazon SES delivers it only to the configured recipient. Processing is based on responding to your request and the legitimate interest in secure correspondence. Messages are retained in the recipient mailbox for up to 90 days, except while a conversation is active or longer retention is required by law.
Operational logs
Encrypted access logs are retained for up to 30 days to operate and secure the site. Contact message contents are not written to application logs.
Local browser storage
The site stores your language, theme, and analytics-consent preferences in your browser. If you accept analytics, Google Analytics also creates first-party measurement cookies; withdrawing consent removes those cookies.
Optional Google Analytics
If you accept analytics, the site sends Google the visited route and page title, stable website content identifiers, language, viewed home-page sections, outbound link destinations, and technical browser, device, and approximate-location information provided by Google Analytics. Google processes this data to provide aggregated usage statistics, with event-level data retained for 14 months. Names, email addresses, message contents, and other contact-form values are never sent. You can withdraw consent at any time through Analytics preferences in the footer.
Processors and transfers
AWS processes contact and operational data to host and secure the site and deliver email. If you accept analytics, Google processes measurement data and may transfer it internationally using its applicable safeguards. Analytics event data is configured for 14-month retention.
Your rights
Depending on the circumstances, you may request access, correction, or deletion, withdraw consent, or object to processing. Use the contact form to make a request. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Effective and last updated: 23 August 2026.