Updated: November 2025
Privacy Policy
The sections below explain how I handle personal data for Swiss-based tutoring services, covering data sources, retention, third-party processors, and your rights.
Data Collection & Sources
- I operate exclusively in Switzerland and process personal data to deliver one-on-one tutoring in accordance with the Federal Act on Data Protection (FADP) and the guidance of the Federal Data Protection and Information Commissioner (FDPIC). I collect information directly from you when you submit a contact request, schedule using the external EU scheduling tool named in the Terms & Conditions, join a Zoom lesson, or communicate by email or chat.
- This may include contact details, lesson goals, preferred availability, payment references, and manually written preparation notes that help me customise each session. The hosting platform (Render, cloud provider headquartered in the United States) generates truncated IP addresses, user-agent details, and security logs needed to ensure availability and protect against misuse. Consent decisions are recorded so I can demonstrate compliance. Optional analytics data reaches Google Analytics 4 only after you explicitly opt in via the cookie banner, and those records remain pseudonymised. I do not carry out automated decision-making or profiling—every booking confirmation, lesson plan, and pricing decision is handled personally by me.
Retention & Deletion
- Inquiry emails or chat threads that do not result in lessons are deleted after 12 months.
- Active learner profiles, lesson notes, and supporting materials are retained for up to three years after the final session unless you request earlier deletion and no statutory duty requires longer storage.
- Accounting records, invoices, and payment receipts are kept for 10 years to comply with Swiss commercial obligations.
- Cookie and marketing consent logs are stored for five years to evidence adherence to FDPIC guidance.
- Security logs on the hosting infrastructure (Render) are rotated after 12 months; optional Google Analytics 4 data is configured to expire automatically after 14 months.
- When you ask for deletion at tmorcone@gmail.com, I erase the relevant data within 30 days once legal obligations end, and I remove associated backups during the next maintenance cycle.
Third-Party Services & Transfers
- **Render (cloud hosting, USA):** The public website and application run on Render’s infrastructure (United States–headquartered provider). Domain registration and DNS for teodoro.ch / mathe.teodoro.ch are administered in Switzerland and are separate from where application traffic is processed. Cross-border processing is addressed in this notice and through SCCs or comparable safeguards where applicable.
- **EU scheduling processor (see Terms & Conditions, section 3):** Handles scheduling, reminders, and payment status within EU data centres. Transfers rely on the FDPIC-recognised adequacy decision for the European Economic Area, and only I and bound support staff can access the data.
- **Zoom (EU data residency, provider headquartered in the USA):** Videoconferencing uses waiting rooms, passcodes, and end-to-end encryption. Recordings are disabled by default; if a recording becomes necessary, I obtain written consent and delete it within 30 days unless a legal retention duty applies. Standard Contractual Clauses (SCCs) acknowledged by the FDPIC, plus strict configuration controls, protect any cross-border access.
- **Google Workspace & Google Analytics (EU/USA):** Email, document collaboration, and optional statistics rely on SCCs, encryption in transit and at rest, IP truncation, and the exclusion of advertising features. I disclose only the minimum data required to operate these services.
- I do not sell personal data and I share it only with these processors or when Swiss law requires disclosure.
How to Exercise Your Rights
- For access, rectification, portability, deletion, or consent withdrawal, email tmorcone@gmail.com or write to Teodoro Morcone Nachhilfe, Eichbühlstrasse 33, 8004 Zürich. I verify identity with proportionate steps (for example, a reply from the registered email address) and respond within 30 days; complex requests may extend by up to another 30 days, with advance notice. You can adjust analytics preferences anytime through the “Cookie settings” link in the footer.
- If you consider my response unsatisfactory, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
List of cookies and similar technologies
These tables describe the cookies and technologies used on teodoro.ch, grouped by purpose.
Essential cookies
Analytics (GA4)
Marketing (Meta Pixel)
Cancellations & no-shows
- Sessions may be cancelled or rescheduled free of charge up to 24 hours in advance.
- Late cancellations or no-shows are billed as one full lesson.
- Payment is collected upfront via Stripe payment link (card, Twint); receipts are emailed automatically.
Guidance for minors
- Consent from parents or guardians is required for learners under 16.
- Communication is coordinated with parents/guardians whenever possible.
- Zoom recordings take place only with explicit written approval.