Phylax AG ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website or contact us.

This policy complies with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

Phylax AG
Suurstoffi 18b,
6343 Risch-Rotkreuz
Switzerland

Email: info@phlx.ai

Phylax AG is the data controller responsible for the processing of your personal data.

No Data Protection Officer has been appointed, as none is legally required.

2. Personal Data We Collect

2.1 Contact Form

When you contact us via our website, we collect the following personal data:

Name
Email address
Company name
Any information you include in your message

Providing this data is voluntary but necessary for us to respond to your inquiry.

3. Purpose of Data Processing

We process your personal data exclusively for the following purposes:

To receive and respond to your inquiries
To communicate with you via email
To maintain business correspondence

We do not use your personal data for analytics, tracking, profiling, or marketing purposes unless you have given your consent via the cookie banner (see Section 9).

4. Legal Basis for Processing

We process personal data based on:

Your consent, given by submitting the contact form
Our legitimate interest in responding to business communications

You may withdraw your consent at any time by contacting us.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data.

Your data may be shared only with trusted service providers (such as email hosting providers) where necessary to operate our website and communications. These providers process personal data solely on our behalf and are contractually obligated to protect it.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

Personal data may be stored on servers located in Switzerland or the European Economic Area (EEA). Any international data transfers comply with applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to respond to your inquiry or as required by applicable legal obligations. Once no longer needed, your data is securely deleted.

8. Your Rights

Under the Swiss revFADP and, where applicable, the GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your personal data
Object to or restrict processing
Withdraw consent at any time

If you are located in the European Union, you also have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise your rights, please contact us at: info@phlx.ai

9. Cookies and Tracking

This website uses cookies for analytics and marketing only with your consent. When you first visit our website, a cookie banner lets you accept or decline these cookies; declining does not limit your use of the site in any way. Your choice itself is stored in a strictly necessary first-party cookie ("phlx_cc") for 12 months.

Our website embeds the script of HubSpot, a customer relationship management and marketing platform operated by HubSpot, Inc., with data for EU customers processed in the European Union. Until you give consent, the script runs in HubSpot's do-not-track mode: it sets no cookies and transmits no visitor or usage data. Delivering the script file itself technically transmits your IP address to HubSpot's EU servers; this limited transfer is based on our legitimate interest in operating a consent-gated integration (Art. 6(1)(f) GDPR). The blocked state is enforced by a strictly necessary first-party cookie ("__hs_do_not_track", 6 months). Only if you accept does HubSpot begin tracking and set the following cookies: "hubspotutk" (identifies a visitor across sessions, 6 months), "__hstc" (visit analytics, 6 months), "__hssc" (session analytics, 30 minutes), and "__hssrc" (session marker, deleted when the browser closes). We use this data to measure how our website is used and to connect inquiries to our CRM. Where you have consented, HubSpot may also use your IP address to identify the company or organisation your visit originates from (buyer-intent data), which we use for business-to-business marketing and sales.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future via the "Cookie Settings" link in the footer of every page; withdrawal deletes the HubSpot cookies from your browser. For details on HubSpot's own data processing, see HubSpot's privacy policy athttps://legal.hubspot.com/privacy-policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website with the updated date.

11. Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact:
Email: info@phlx.ai