Privacy policy
How Ruler GmbH collects, uses, stores, and protects your personal data.
Last updated: 03.10.2026
1. Introduction
Ruler GmbH ("we", "us", "our") operates the website https://tale.dev and the Tale platform. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or interact with us.
This Privacy Policy complies with the Swiss Federal Act on Data Protection (FADP/nDSG) and, where applicable, the European Union General Data Protection Regulation (GDPR).
2. Data Controller
The data controller responsible for the processing of your personal data is:
Ruler GmbH Seestrasse 4 3700 Spiez Switzerland
Company registration: CHE-186.532.610
For any questions or requests regarding data protection, please contact us through our contact form.
3. Data We Collect
3.1 Contact and Demo Request Forms
When you submit our contact form or request a demo, we collect the following personal data:
- Name
- Email address
- Company name (optional on contact form, required on demo request form)
- Phone number (optional, demo request form only)
- Area of interest (demo request form only)
- Message content or additional comments
3.2 Automatically Collected Data
Our website measures aggregate traffic with Umami, an open-source analytics tool we host ourselves on our own server in Frankfurt, Germany. It is served from our own domain, sets no cookies, stores no identifier in your browser, and sends nothing to any third party — no analytics data ever leaves our infrastructure, and we do not track you across other websites.
For each page view we record the page address, the referring page, your approximate location (country, region, city), your screen size, and your browser, operating system and device type. Your IP address is used only to derive that approximate location and — combined with a secret that rotates regularly — a one-way hash that groups the requests belonging to a single visit; the IP address itself is never stored. We build no visitor profiles and cannot identify you from this data.
To deliver the website we also temporarily process minimal technical data (see Server Logs below), and the site stores one functional language cookie plus a theme preference in your browser (see Cookies below).
Only the page path and the referring origin are collected; URL search parameters, fragments and page titles are omitted. Browser language is included. Completed contact and demo requests are counted without form contents. Do Not Track and Global Privacy Control disable collection.
3.3 Server Logs
When you visit our website, our self-operated web server and hosting infrastructure ([hosting provider — to be confirmed before publication]) may temporarily process technical data such as your IP address, browser type, and access timestamps for the purpose of delivering the website and maintaining security (for example, rate limiting). This data is processed as part of standard web-server operations, retained only briefly, and is not used by us for any other purpose.
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Data involved | Legal basis (FADP) | Legal basis (GDPR) |
|---|---|---|---|
| Responding to your inquiry | Name, email, company, message | Legitimate interest | Art. 6(1)(f) GDPR — Legitimate interest |
| Scheduling and conducting a product demo | Name, email, phone, company, area of interest | Legitimate interest | Art. 6(1)(b) GDPR — Pre-contractual measures |
| Maintaining and securing our website | Technical data (IP address, browser) | Legitimate interest | Art. 6(1)(f) GDPR — Legitimate interest |
| Measuring website usage | Page address, referrer, approximate location, device and browser data | Legitimate interest | Art. 6(1)(f) GDPR — Legitimate interest |
| Establishing a potential business relationship | Contact form data | Legitimate interest | Art. 6(1)(f) GDPR — Legitimate interest |
Under the Swiss FADP, processing of personal data is generally permitted unless it violates the personality rights of the data subject. We process your data in good faith, proportionally, and only for the purposes stated above.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.
Your personal data may be accessible to the following categories of service providers who process data on our behalf and under our instructions:
- Hosting infrastructure: The website is operated by Ruler GmbH on self-hosted infrastructure provided by [hosting provider — to be confirmed before publication], located in [data center location — to be confirmed before publication].
- CRM provider: We store contact form submissions in a customer relationship management system hosted in Switzerland.
These providers act as data processors and are bound by data processing agreements in accordance with Art. 9 FADP and Art. 28 GDPR.
6. International Data Transfers
Your personal data is primarily stored and processed in Switzerland. [To be confirmed before publication: state where the website's servers are located — Switzerland or the EU/EEA — and adjust this section accordingly.]
All EU/EEA member states are recognized by the Swiss Federal Council as providing an adequate level of data protection under Art. 16 FADP. The European Commission has likewise recognized Switzerland as providing adequate protection under the GDPR.
No personal data is transferred to countries without an adequate level of data protection.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: If no business relationship is established, your data will be deleted within 12 months after your last interaction with us.
- Demo request submissions: If no business relationship is established, your data will be deleted within 12 months after your last interaction with us.
- Ongoing business relationships: If a business relationship is established, your data will be retained for the duration of the relationship and for the period required by applicable statutory retention obligations (typically 10 years under Swiss commercial law).
- Server logs: Technical data is processed on our own infrastructure for short-term operational and security purposes only and is deleted automatically thereafter.
8. Your Rights
Under the Swiss FADP and, where applicable, the GDPR, you have the following rights:
- Right of access: You may request information about whether and what personal data we process about you.
- Right to rectification: You may request that inaccurate personal data be corrected.
- Right to deletion: You may request the deletion of your personal data, subject to any legal retention obligations.
- Right to data portability: You may request that your personal data be provided to you or to a third party in a commonly used, machine-readable format.
- Right to object: You may object to the processing of your personal data at any time.
- Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us through our contact form. We will respond to your request within 30 days.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, if applicable, with a supervisory authority in your EU/EEA member state.
9. Cookies
Our website does not use cookies for analytics or tracking purposes — the self-hosted analytics described above sets no cookie and stores no identifier in your browser. The site stores exactly one functional cookie: tale_locale, which remembers your language choice for one year so pages load in your language on your next visit. It contains no personal data and no identifier. Your light/dark theme preference is kept in your browser's local storage and never leaves your device.
If we introduce any cookies or third-party services in the future that require consent, we will update this Privacy Policy and implement an appropriate consent mechanism.
10. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls, and hardened, self-operated hosting infrastructure. Ruler GmbH is ISO 27001 certified, covering Tale Enterprise and professional services.
11. Children's Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.
13. Contact
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us:
Ruler GmbH Seestrasse 4 3700 Spiez Switzerland