Privacy Policy

1. Data Controller

The entity responsible for data processing on this website is:

2. Data Collected

When you visit this website, the following data is automatically stored in server log files:

• IP address (anonymised)
• Date and time of access
• Page accessed (URL)
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL

This data is used exclusively for the technical provision of the website, troubleshooting, and ensuring operations. It is not merged with other data sources and is deleted after a maximum of 30 days.

This website uses no tracking cookies and no Google Analytics. For anonymous traffic measurement we use only Plausible Analytics, self hosted on our own infrastructure, entirely without cookies and without collecting personal data. No data is shared with third parties and no cross site profiles are created.

3. Contact form

When you use the contact form on this website, we process the information you provide to handle and respond to your enquiry.

• Name
• Email address
• Message / content of your enquiry

Purpose: handling and responding to your contact request.

Legal basis: legitimate interest under Art. 31(1) nFADP / Art. 6(1)(f) GDPR; where your request relates to a contract, also pre contractual steps under Art. 6(1)(b) GDPR.

Retention: enquiries are processed in LAFLAX's mailbox and deleted according to internal retention policies. Resend deletes customer data within 90 days after contract termination (see DPA).

Recipients: delivery via processor Resend to [email protected].

4. Processors

We use the following service providers that process personal data on our behalf:

Resend (Plus Five Five, Inc., San Francisco, USA), sending contact form emails. A Data Processing Addendum (DPA) with Standard Contractual Clauses for transfers to the USA is in place.

For transfers to third countries (especially the USA), we rely on appropriate safeguards under nFADP and GDPR (SCCs, EU US Data Privacy Framework where applicable).

Public information: Resend DPA · Sub processors

5. Hosting

This website is hosted on self managed infrastructure (Hetzner/VPS, Docker). Application servers are located in Switzerland or within the European Union.

Server log files are processed only for operation and security (section 2). Contact form email delivery uses Resend (USA), see section 4.

6. Your rights

As a data subject, you have the following rights under the Swiss Data Protection Act (nDSG, in particular Art. 25 nDSG) and the GDPR (Art. 15, 22 GDPR):

• Right of access: You have the right to obtain information about the data stored about you at any time.
• Right to rectification: You may request the correction of inaccurate or incomplete data.
• Right to erasure: You have the right to request the deletion of your personal data, provided there is no statutory retention obligation.
• Restriction of processing: Under certain conditions, you may request the restriction of the processing of your data.
• Data portability: You have the right to receive your data in a structured, commonly used, and machine readable format.
• Right to object: You may object to the processing of your data at any time.

To exercise your rights, please contact us by email at [email protected].

You also have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) (www.edoeb.admin.ch) and with the competent supervisory authority of your EU member state of residence.

7. Cookies and local storage

This website uses only technically necessary cookies. No marketing, analytics, or third party tracking cookies are used.

Technically necessary session cookies cannot be disabled without affecting site functionality.

For the cookie notice, we store your confirmation in your browser's localStorage (key laflax cookie consent) until you clear browser data. No personal profiles are created.

8. Changes to this privacy policy

LAFLAX reserves the right to update this privacy policy at any time to adapt it to changes in legislation, products, or processing procedures. The current version is always available on this page. Material changes will be communicated on the website.

9. Contact for privacy enquiries

For questions about data protection, to exercise your rights, or for any other data protection related concerns, please contact: