Legal
Privacy
Controller
Responsible for the processing of personal data in connection with this website is JML Interface, Oberseestrasse 59, 8640 Rapperswil, Switzerland, represented by Manuel Laimbacher and Julian Banjavcic. Contact: info@jml-interface.ch
Principles
We process personal data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the GDPR. Only data required to operate this website and to answer enquiries is processed. This notice describes the actual technical state of the website and names every service in use individually.
Hosting and server logs
When the website is accessed, technically necessary connection data is processed: IP address, date and time of access, page requested, volume of data transferred, and details of browser and operating system. This data arises in the operation of any web server, serves secure and stable operation, and is not combined with other sources. The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Vercel acts as our processor on the basis of its Data Processing Addendum (DPA). Pages are delivered through Vercel’s global content delivery network, which serves content from the location closest to the visitor. Server-side processing of the contact form is pinned to the Frankfurt region (fra1). On the Pro plan we use, Vercel retains runtime logs for one day and deletes them thereafter. We keep no logs beyond that and pass none on to third parties.
Contact form
Through the form you submit: name, company (optional), email address, telephone number (optional), type of project, budget range, preferred timeframe, your project description, and whether you would like a first call. We use this information solely to handle your enquiry and to communicate about it. It is not passed to third parties for advertising purposes, and no automated decision-making takes place.
Protection against automated submissions
To protect the form against bulk automated submissions, the server holds the sending connection’s IP address in memory for 15 minutes and limits the number of requests on that basis. This value is not stored permanently, is not written to log files, and is discarded once the period elapses. Two further checks without any personal reference are applied: a form field invisible to you, and the time elapsed between opening and submitting the form.
Delivery of enquiries
To deliver form enquiries to our mailbox we use Resend, a service of Plus Five Five, Inc. The information you entered in the form is transmitted, together with your email address as the reply address. Resend processes this data on our behalf and solely for the purpose of delivery, on the basis of the Resend Data Processing Addendum (DPA). Sending for our domain runs through the Ireland sending region (eu-west-1). The sending region does not, however, determine where data is stored: customer data is processed and stored by Resend in the United States.
Storage in your browser
This website sets no cookies and writes nothing to your browser’s local storage. There is no recognition across visits, and no settings are stored on your device.
No analytics, no tracking
No analytics, statistics, tracking or advertising services are embedded in this website. No audience measurement takes place, no usage profiles are built, and no social network services are embedded. No captcha service and no error-monitoring service are used either.
No external content
All fonts, images, icons and scripts are served from our own server. In particular, no Google Fonts or other external font services are loaded, no maps are embedded, no videos from third-party platforms are included, and no third-party content delivery network is used. Simply visiting the website therefore creates no connection to third-party servers.
Disclosure abroad
Personal data is disclosed abroad when a form enquiry is submitted to Resend as described in section 06. Sending runs through the Ireland sending region (eu-west-1); processing and storage by Resend take place in the United States. This transfer is covered by the Standard Contractual Clauses (SCC), including the adaptations for Switzerland provided for in the Resend DPA. A second disclosure arises from the hosting described in section 03: Vercel Inc. is domiciled in the United States and maintains its primary processing facilities there. Page delivery and contact form processing do run through European locations, but access from the United States is therefore not excluded. This transfer, too, is covered by the European Commission’s Standard Contractual Clauses (implementing decision 2021/914); Vercel’s DPA names the Swiss Federal Act on Data Protection expressly as applicable data protection law.
Retention
Contact enquiries that do not lead to a contractual relationship are kept for 12 months and then deleted. Where an enquiry does lead to a contractual relationship, further retention follows the business relationship and the applicable statutory retention obligations. At Resend, email and log data is deleted after 30 days and backups after 7 days. The IP address used to limit automated submissions is discarded after 15 minutes. Runtime logs at the hosting provider are deleted after one day (section 03).
Data security
The website is delivered encrypted over HTTPS; the form is submitted over that same encrypted connection. Credentials for the services in use are held server-side only and never reach the browser. Contact form content is not written to log files.
Your rights
You have the right to information about the data processed about you, and to its correction, deletion and restriction of processing. You may object to processing and withdraw any consent given at any time. You also have the right to receive or transfer your data.
Contact for privacy matters
Please direct privacy matters and requests for information, correction or deletion to info@jml-interface.ch or to the address given in section 01. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Changes to this privacy notice
We adjust this notice when the website, the services in use or the legal requirements change. The version published here is the one that applies. This version was written in September 2026.