Last reviewed: 14 October 2026
This notice describes personal data processing through the dotLEX website and enquiries. Separate engagement terms may explain additional processing for client matters.
1. Controller and contact
dotLEX, Avenue de Chatelaine 36, 1203 Geneva, Switzerland, is the contact for this website and enquiries. Contact peter@dotlex.ch for privacy questions or requests.
2. Information and purposes
- Website delivery and security: the hosting infrastructure receives technical information such as IP address, requested page, access time and browser information. Logs may be processed for delivery, troubleshooting and abuse prevention.
- Enquiries: we process the contact details and message you provide by email or the Tally contact form to respond, assess a possible engagement and maintain relevant correspondence. Please avoid sending sensitive case documents before an engagement and an appropriate communication channel are agreed.
- Records: information may also be needed to meet applicable legal obligations or establish, exercise or defend claims.
This website includes no analytics, advertising pixels, standalone newsletter subscription or automated decisions about visitors. The live Tally form currently includes an optional monthly-newsletter checkbox. If you select it, your contact details may also be used to send the updates you request; you can withdraw that choice by emailing us.
3. Applicable law
Swiss data protection law, including the Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO), governs processing within its scope. The EU GDPR applies only where its territorial and material conditions are met, for example relevant offering of services to people in the EU or monitoring their behaviour there. A visit from the EU alone does not establish that every processing operation falls under the GDPR.
Where the GDPR applies, handling a requested enquiry or engagement may rely on Article 6(1)(b); necessary security and business correspondence on legitimate interests under Article 6(1)(f), subject to the balancing of rights; legal recordkeeping on Article 6(1)(c); and optional processing requiring consent on Article 6(1)(a). These bases depend on the actual activity. The FADP does not impose the same general legal-basis scheme on private controllers.
4. Services and recipients
- Hosting and email: providers delivering the website and email may receive technical data and correspondence.
- Google Fonts: pages request Manrope and Instrument Serif from fonts.googleapis.com and fonts.gstatic.com when opened. Google receives technical request information, including your IP address and browser request headers. There is no separate font consent control on this site. See Google Fonts privacy information.
- Tally: the contact form mZbrMe is embedded directly on the home page. Tally’s official embed script loads when that page opens; the browser may defer the lazy iframe until the contact section approaches the viewport. No separate activation or consent button is presented. Loading transmits technical request data; submitting transmits the fields you provide to Tally and dotLEX. Tally BV is based in Belgium; its providers and any enabled integrations may also process data. See Tally’s privacy notice. The embedded form makes requests to Tally’s API and a Sentry error-monitoring endpoint. Tally’s subprocessor list identifies Sentry for error monitoring in the United States and Google Cloud for hosting and storage in Belgium. Other providers depend on enabled features; for example, Tally lists SendGrid in the United States for optional form email notifications. These listings do not establish which optional features dotLEX has enabled.
- Animation libraries: Three.js r134 and Vanta.NET 0.5.24 are served from this website. Visitors do not request these libraries from cdnjs or jsDelivr.
Relevant information may be disclosed to advisers or authorities where necessary for legal obligations or claims. External websites linked here apply their own privacy practices when visited.
5. Processing abroad
Google Fonts, Tally and their infrastructure can involve processing outside Switzerland; email and hosting arrangements may also do so. Tally identifies Belgium for form hosting and the United States for Sentry error monitoring; the full list of other recipient countries and applicable transfer arrangements is not yet confirmed. Where required, transfers need an adequate level of protection or another lawful mechanism, such as recognised contractual safeguards with any necessary additional measures, or an applicable statutory exception. This notice does not certify that such arrangements are in place. For questions about recipients or transfer arrangements, contact peter@dotlex.ch.
6. Retention and security
Data should be retained only as long as needed for the relevant enquiry, engagement, applicable recordkeeping duties or claims, then deleted or anonymised. Exact log, mailbox and Tally retention periods have not yet been confirmed. Access should be limited to those who need it, with appropriate technical and organisational protection. No internet communication is risk-free.
7. Choices and rights
You can use email instead of submitting the Tally form, but opening the home page already requests Tally’s embed script and the form can connect automatically. There is no site control to prevent those requests. Browser settings or content blockers can restrict third-party connections or clear storage; this does not delete data already transmitted. You can find our email address on any page. See our Cookies Policy.
Subject to applicable law and exceptions, you may request access and correction, deletion, and data delivery or portability where its conditions are met. Where the GDPR applies, restriction and objection rights may also apply. Consent may be withdrawn for future processing without affecting the lawfulness of prior processing. Contact us to exercise a right; proportionate identity verification may be needed.
You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), or a competent EU supervisory authority where applicable. No appointed data protection officer or representative is asserted by this notice.
8. Changes
We will update this notice when the website’s processing changes. The review date above identifies this version.