Policy
Privacy notice
This site collects personal data only when you write to us: your name, email address and message, sent through the contact form or by email. It uses them to answer you and, if you go ahead, to prepare a quote. It runs no analytics, shows no advertising, and does not sell or share your data for marketing. The details below follow the Swiss Federal Act on Data Protection.
Who is responsible
The controller of the personal data described here is Lingravelix, the publisher of this website. You can reach us at hello@lingravelix.site or through the contact page.
The revised Federal Act on Data Protection (FADP) has applied since 1 September 2023 1. Its Article 19 asks controllers to tell people at least who they are and how to reach them, why data is processed, who receives it, and to which countries it may be sent 2. Each of those points is covered below.
What we collect and why
Messages you send
When you use the contact form, we receive your name, your email address, the name of your organisation if you give it, the languages you mention and your message. A direct email reaches us with everything you put in it. We use this to answer your enquiry and, if you ask for one, to prepare a quote. If you ask about having a multilingual site planned or built, our answer may explain what Lingravelix offers, and the footer note on commercial interest applies to it. Your address is used for that reply only and goes on no newsletter list.
Form protection
To keep the form usable and to limit automated misuse, the server keeps a short-lived record for each visitor of how many messages were sent in the last 24 hours. Your IP address is not stored in it. Instead, the server stores a keyed code derived from the address with a secret key held only on the server, which cannot practically be linked back to the address without that key. Each record expires a day after it was made and is then removed.
The form also uses a session, identified by one cookie, to protect against forged submissions. Session data on the server is deleted after two hours of inactivity. The cookie notice describes the cookie.
Server logs
Our hosting provider records technical data when pages are requested, such as the IP address, the time, the page requested and the browser type. We do not use these logs to identify visitors or to build profiles. They are kept by the provider for the period its own policy sets.
Who receives the data
Our website and email are hosted by a company of the Hostinger group, which processes the data described above on our behalf. No other company receives your messages from us unless you agree, for example if you ask us to forward a question to your translator.
Where the data may be stored
Hostinger's privacy policy states that customer data may be stored in the United Kingdom, the Netherlands, Lithuania or Cyprus, and that some of its servers are located outside the EU and EEA, naming the United States, Brazil, Singapore and Indonesia 3. The policy presents that list as not exhaustive, adding other jurisdictions where its services need them, so data from this site may be processed in those countries or elsewhere. For transfers outside the EU and EEA, transfers rely on the standard contractual clauses described in Hostinger's policy 3; under Article 16 of the Federal Act on Data Protection, standard contractual clauses recognised for Switzerland are one of the safeguards that allow disclosure abroad 2.
How long we keep it
- Messages and replies: up to two years after our last exchange, unless they become part of a contract, in which case they are kept as long as the law requires for business records.
- Form protection records: no more than 24 hours.
- Form session data: deleted after two hours of inactivity.
- Server logs: as set by the hosting provider.
Your rights
You can ask what personal data we hold about you, ask for it to be corrected or deleted, and ask for a copy of data you gave us. Write to hello@lingravelix.site. Should the law prevent us from doing what you ask, our answer gives the reason. You can also contact the Federal Data Protection and Information Commissioner (FDPIC) if you believe your data has been mishandled.
If you are in the European Union, the EU General Data Protection Regulation may also apply to our handling of your data, and you have the rights it gives you.
Security
The site is served only over an encrypted connection. The contact form checks a token on every submission, limits how many messages can be sent, and stores its working data outside the public part of the web server. Email passwords and form secrets are kept in files that the web server does not serve.
Changes to this notice
Any revision of this notice shows up as a new date at the top of the page.