Legal
Privacy
Controller
Responsible for the processing of personal data in connection with this website is JML Interface, Oberseestrasse 59, 8640 Rapperswil, Switzerland, represented by Manuel Laimbacher and Julian Banjavcic. Contact: info@jml-interface.ch
Principles
We process personal data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the GDPR. Only data required to operate this website and to answer enquiries is processed. This notice describes the actual technical state of the website and names every service in use individually.
Hosting and server logs
When the website is accessed, technically necessary connection data is processed: IP address, date and time of access, page requested, volume of data transferred, and details of browser and operating system. This data arises in the operation of any web server, serves secure and stable operation, and is not combined with other sources. The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Vercel acts as our processor on the basis of its Data Processing Addendum (DPA). Pages are delivered through Vercel’s global content delivery network, which serves content from the location closest to the visitor. Server-side processing of the contact form is pinned to the Frankfurt region (fra1). On the Pro plan we use, Vercel retains runtime logs for one day and deletes them thereafter. We keep no logs beyond that and pass none on to third parties.
Contact form
Through the form you submit: name, company (optional), email address, telephone number (optional), type of project, budget range, preferred timeframe, your project description, and whether you would like a first call. We use this information solely to handle your enquiry and to communicate about it. It is not passed to third parties for advertising purposes, and no automated decision-making takes place.
Protection against automated submissions
To protect the form against bulk automated submissions, the server holds the sending connection’s IP address in memory for 15 minutes and limits the number of requests on that basis. This value is not stored permanently, is not written to log files, and is discarded once the period elapses. Two further checks without any personal reference are applied: a form field invisible to you, and the time elapsed between opening and submitting the form.
Delivery of enquiries
To deliver form enquiries to our mailbox we use Resend, a service of Plus Five Five, Inc. The information you entered in the form is transmitted, together with your email address as the reply address. After submitting the contact form, an automatic confirmation of receipt may also be sent to the email address you provided; this, too, is sent through Resend. Resend processes this data on our behalf and solely for the purpose of delivery, on the basis of the Resend Data Processing Addendum (DPA). Sending for our domain runs through the Ireland sending region (eu-west-1). The sending region does not, however, determine where data is stored: customer data is processed and stored by Resend in the United States.
Storage in your browser
Until you have answered the analytics question in section 08, this website sets no cookies and writes nothing to your browser’s local storage. Once you have decided, we store that decision in your browser’s local storage under the key “jml-consent”, with the value “granted” or “denied”, a version number and the time of the decision. That entry exists solely so you are not asked again on every visit; it holds no identifier and permits no conclusions about who you are. If you consent, Google Analytics additionally sets cookies of its own as described in section 08. You can change your decision on this page at any time.
Web analytics with Google Analytics 4
This website can use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is activated only after your explicit consent: as long as you have not consented — and equally if you decline — no Google script is loaded and no connection to Google is made. After your consent, the pages you open, approximate location data, details of your browser and operating system, and your usage of this website are processed; Google sets cookies of its own for this, including “_ga”. According to Google, IP addresses of visitors from Switzerland, the EEA and the United Kingdom are dropped before the data is logged; the coarse location data derived from them — country, region and city — is retained. Advertising features remain switched off: the signals “ad_storage”, “ad_user_data” and “ad_personalization” stay set to “denied” even after your consent. No combining with other data sources and no cross-device recognition takes place on our part. Beyond this, no advertising services, no social network services, no captcha service and no error-monitoring service are embedded in this website.
No external content
All fonts, images, icons and scripts are served from our own server. In particular, no Google Fonts or other external font services are loaded, no maps are embedded and no videos from third-party platforms are included. Simply visiting the website therefore creates no connection to third-party servers. A connection to Google is made only if you have explicitly consented to the web analytics described in section 08; a connection to Resend only when you submit the contact form.
Disclosure abroad
Personal data is disclosed abroad when a form enquiry is submitted to Resend as described in section 06. Sending runs through the Ireland sending region (eu-west-1); processing and storage by Resend take place in the United States. This transfer is covered by the Standard Contractual Clauses (SCC), including the adaptations for Switzerland provided for in the Resend DPA. A second disclosure arises from the hosting described in section 03: Vercel Inc. is domiciled in the United States and maintains its primary processing facilities there. Page delivery and contact form processing do run through European locations, but access from the United States is therefore not excluded. This transfer, too, is covered by the European Commission’s Standard Contractual Clauses (implementing decision 2021/914); Vercel’s DPA names the Swiss Federal Act on Data Protection expressly as applicable data protection law. A third disclosure arises only if you have consented to the web analytics in section 08: the contracting party is Google Ireland Limited in Ireland, and processing by Google LLC in the United States is not excluded. Google likewise relies on the European Commission’s Standard Contractual Clauses for this transfer. If you decline, or do not decide, this disclosure does not take place at all.
Retention
Contact enquiries that do not lead to a contractual relationship are kept for 12 months and then deleted. Where an enquiry does lead to a contractual relationship, further retention follows the business relationship and the applicable statutory retention obligations. At Resend, email and log data is deleted after 30 days and backups after 7 days. The IP address used to limit automated submissions is discarded after 15 minutes. Runtime logs at the hosting provider are deleted after one day (section 03). For data from the web analytics in section 08, the retention period configured in the Google Analytics property applies; it will be stated here once we have settled it. The decision you store in your browser stays there until you change it or clear the site data in your browser.
Data security
The website is delivered encrypted over HTTPS; the form is submitted over that same encrypted connection. Credentials for the services in use are held server-side only and never reach the browser. Contact form content is not written to log files.
Your rights
You have the right to information about the data processed about you, and to its correction, deletion and restriction of processing. You may object to processing and withdraw any consent given at any time. You also have the right to receive or transfer your data.
Contact for privacy matters
Please direct privacy matters and requests for information, correction or deletion to info@jml-interface.ch or to the address given in section 01. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Changes to this privacy notice
We adjust this notice when the website, the services in use or the legal requirements change. The version published here is the one that applies. This version was written in September 2026.