Privacy, explained plainly.

Who is responsible for your data?

The controller for the processing described in this policy is:

Email: mail@devxy.io

Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/devxy

Using this website

When you visit the website, our hosting and content-delivery systems necessarily process technical request data such as your IP address, requested page, date and time, browser information, and referring page. We use this data to deliver the website securely, maintain its availability, diagnose errors, and prevent misuse.

We process this data on the basis of our legitimate interests in operating a secure and reliable website (Article 6(1)(f) GDPR) and, where a request relates to services you may purchase, to take steps at your request before entering a contract (Article 6(1)(b) GDPR).

Website analytics

We use a self-hosted instance of Umami at umami.devxy.io to understand general website usage and improve our content. Umami records information such as page views, referrer, browser, operating system, device type, and approximate country. It does not use cookies, store your IP address, or track you across websites.

We process these aggregated usage measurements on the basis of our legitimate interest in understanding and improving this website (Article 6(1)(f) GDPR). We do not use website analytics for advertising or to identify individual visitors.

Cookies and local storage

Our website analytics does not use cookies. Website features may use storage that is strictly necessary to provide a service you request, such as maintaining the state of the meeting-booking interface. We do not use advertising cookies.

If we introduce optional technologies that require consent, we will ask for your choice before using them and provide a way to change that choice.

Contact and meeting bookings

Email and Matrix

If you contact us by email or Matrix, we process the contact details you provide and the content of your message so that we can respond and follow up. Depending on the reason for your message, the legal basis is taking steps before entering or performing a contract (Article 6(1)(b) GDPR) or our legitimate interest in handling enquiries (Article 6(1)(f) GDPR).

Meeting booking

Our contact page embeds a booking service hosted at meet.devxy.io. Opening that page sends technical request data to the service. If you book a meeting, we process the details requested by the booking form, such as your name, email address, chosen time, time zone, and any message you provide, to arrange and hold the meeting (Article 6(1)(b) GDPR).

Please do not send sensitive personal data unless it is necessary and we have asked you to provide it.

Service providers and international transfers

We use carefully selected providers for infrastructure, content delivery, communications, and scheduling. They may process personal data only as needed to provide their services to us and under appropriate contractual safeguards. We do not sell your personal data.

Data is generally processed in Switzerland or the European Economic Area. If a provider processes data in a country without an adequacy decision, we use an appropriate transfer mechanism, such as approved standard contractual clauses, and supplementary measures where required.

We may also disclose data when required by law, to protect legal rights, or in connection with a corporate transaction, subject to the applicable legal requirements.

How long we keep data

We keep personal data only for as long as needed for the purpose for which it was collected. Technical logs are retained for a limited period needed for security and troubleshooting. Enquiry and booking records are normally kept while we handle your request and, where a business relationship follows, for the duration of that relationship.

We may retain data for longer where Swiss or other applicable law requires it, or where it is needed to establish, exercise, or defend legal claims. When data is no longer required, we delete or anonymise it.

Your rights

Subject to the conditions of applicable data-protection law, you may ask us to:

• provide access to your personal data;
• correct inaccurate or incomplete data;
• delete data or restrict how it is used;
• provide data you gave us in a portable format;
• stop processing based on our legitimate interests; or
• withdraw consent at any time where processing is based on consent.

You may exercise these rights by emailing mail@devxy.io. We may need to verify your identity before acting on a request. Some rights are subject to exceptions under applicable law.

You also have the right to complain to a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). If the GDPR applies to you, you may also contact the data-protection authority in the EU or EEA country where you live, work, or believe an infringement occurred.

We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

Changes to this policy

We may update this policy when our website, services, or legal obligations change. The current version is always published on this page, with its revision date shown above.