1. Controller
Responsible for the processing of data in connection with this website is:
FG Valeur GmbH (brand “VELRIX”)
Birsfelderstrasse 8b, 4132 Muttenz, Switzerland
UID: CHE-421.792.952 · Commercial Register of the Canton of Basel-Landschaft
Email: info@velrix.ch
2. Scope of application
This privacy policy applies to the processing of personal data via the website velrix.ch and all associated services.
We treat your personal data confidentially and in accordance with the provisions of the Swiss Federal Act on Data Protection (FADP).
3. What data we collect
3.1 When visiting our website (server logs)
The following data are recorded automatically on each visit:
- IP address (exclusively in the server logs of our hosting provider)
- Date and time of access
- Page accessed and volume of data transferred
- Browser type and version, operating system
- Referrer URL (previous page)
Purpose: stable and secure operation of the website. We do not evaluate these logs on a personal basis.
3.2 When contacting us or enquiring
When you fill in the contact form or book an analysis, we collect:
- Name
- Email address
- Telephone number (optional)
- Company
- Industry (selection field, optional)
- Content of your message
- Time and page from which the form was submitted
- two technical details for spam protection (a field invisible to humans and the time spent in the form) — used exclusively to prevent automated submissions
Purpose: handling and answering your enquiry.
Automated assessment: Every incoming enquiry is automatically classified by our assessment system “Hermes” (urgency and fit) so that we can respond promptly and appropriately. “Hermes” runs on our own server; for the classification itself, an external language model is accessed (see section 5). The classification serves solely for internal prioritisation; it gives rise to no automated individual decision with legal effect within the meaning of Art. 21 DSG — every enquiry is decided by a human. You may request at info@velrix.ch that your enquiry be processed without this classification.
Temporary storage in the browser: If your enquiry cannot be transmitted immediately due to a fault, your browser stores it locally (localStorage, key velrix_lead_queue) and automatically resends it on your next visit so that it is not lost. This data remains on your device, is automatically discarded after 7 days at the latest and can be removed at any time by deleting your browser data.
The enquiry is transmitted to our server in Frankfurt am Main; for technical reasons your IP address is transmitted as well. It is not stored permanently there.
3.3 Measurement of reach and usage
On velrix.ch, no measurement of reach or usage takes place. No third-party analytics services (e.g. Google Analytics), no tracking pixels and no tracking cookies are used. The page loads no content from external servers when opened.
3.4 In the customer portal
Existing customers can go to api.velrix.ch/portal can sign in. In doing so we process the e-mail address and the password of the account (stored exclusively as a scrypt hash, never in plain text), the time of the last sign-in and a technically necessary session cookie (vx_portal, HttpOnly, term 30 days). The cookie serves solely for login and is not used for advertising or analytics. The data visible in the portal (enquiries, assessments, invoices) is strictly limited to the respective customer account.
Purpose: performance of the contract with the customer.
4. What we use the data for
- Responding to your enquiries
- Provision of the contractual services (if a contract exists)
- Improvement of the website and services
- Fulfilment of statutory retention obligations
5. Where we process your data
Your data is stored on servers in Switzerland and Germany. The website and e-mail are located in Switzerland; the customer dashboard and the database containing the enquiry data run on our own server in Germany. For the automated classification of your enquiry, a language model is additionally accessed via an external service; in this process, content may also be transferred to the USA (details below). We use the following processors:
- Hostpoint AG (Rapperswil-Jona, Switzerland) — website hosting, email dispatch (no-reply confirmation), DNS and storage of the off-site, client-side encrypted backup copies. Servers in Switzerland.
- Hostinger International Ltd — virtual private server for the customer dashboard/CRM, the database containing the enquiry data and the AI-supported lead assessment. Data centre: Frankfurt am Main, Germany (EU).
- AI assessment (“Hermes”) — the control logic runs on our own server in Frankfurt. The language model used for this is accessed via the intermediary service OpenRouter, Inc. (USA), which forwards the enquiry to the model provider concerned. Only the content of your enquiry together with the contact details you have provided is transmitted, and solely for this one classification; your data continues to be stored by us in Switzerland and Germany only.
Processing agreements under Art. 9 FADP are in place with the providers used. Germany appears on the Federal Council's list of countries with adequate data protection. This does not apply to the USA in general; we base the transfer to the language model service on the exception under Art. 17 FADP, because it serves directly to handle the enquiry you initiated. If you do not wish this, please write to info@velrix.ch — we will then handle your enquiry without automated classification.
6. Retention period
Server logs are rotated continuously and deleted after 30 days at the latest. Enquiry data are stored for as long as this is necessary for processing your enquiry and any subsequent communication, but for no longer than 5 years after the last contact. Business correspondence with customers is retained for 10 years in accordance with the Swiss Code of Obligations (Art. 958f OR).
7. Your rights
You have the right to:
- Access about the data processed about you (Art. 25 FADP)
- Rectification of inaccurate data (Art. 32 FADP)
- Erasure or destruction of your data, unless a statutory retention obligation applies (Art. 32 FADP)
- to request that the processing be stopped or that your data not be disclosed to third parties (Art. 32 FADP)
- Release or transfer of your data in a common electronic format (Art. 28 FADP)
- Withdrawal of consents given
To exercise your rights, please contact: info@velrix.ch
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (EDÖB, edoeb.admin.ch).
8. Security
We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access. Data transmission is encrypted throughout via TLS 1.3. The database is reachable only internally on the server and is not accessible from the internet; administrative access is restricted to SSH keys. Customer portal passwords are stored exclusively as a scrypt hash, never in plain text. Backup copies are stored off-site in client-side encrypted form.
9. Cookies and storage in the browser
This website uses no tracking cookies, no advertising cookies and no third-party cookies. No cookies are set on velrix.ch itself. In the customer portal (api.velrix.ch/portal), a technically necessary session cookie (vx_portal, HttpOnly, SameSite=Lax) is set; without it, login is technically not possible. On logout it is deleted on the server and in the browser.
Local temporary storage of form data: If your enquiry cannot be transmitted immediately due to a technical fault, your browser temporarily stores the details entered (name, email, telephone, company, industry, message and the address of the page from which you sent it) on your device (entry velrix_lead_queue in the local website storage) and automatically resends them on your next visit to velrix.ch. Until then, the details do not leave your device. After successful transmission, and at the latest after 7 days, they are deleted automatically. Please note: if, in the event of a fault, you are additionally offered the option of sending by email and you use it, your enquiry may arrive again later as a copy. You can prevent this temporary storage at any time by deleting or blocking the website storage for velrix.ch in your browser settings.
One-time start animation: On the first visit per browser session, the page notes in the session storage (vxIntroSeen) that the logo animation has already been shown, so that it does not start again. This entry contains no personal data and is discarded automatically when the browser tab is closed.
10. Amendment of this privacy policy
We reserve the right to amend this privacy policy in order to adapt it to a changed legal situation or to changed services. The new privacy policy then applies to your next visit.
This privacy policy does not replace individual legal advice.