Privacy Policy
Last updated: May 2026
1. Controller Omnilex AG, Limmatstrasse 65, 8005 Zürich, Switzerland UID: CHE-264.938.111 Email: intake@omnilex.ai
HR-Lex is a product of Omnilex AG. Omnilex AG is the controller for personal data processed in connection with HR-Lex.
2. Scope This policy applies to the website hr-lex.ch and all related functions, including the intake forms (Termination Pack, New Hire Pack, Situation Desk, and Contact).
3. Data we process We process only the personal data you actively submit to us: - Contact details: first and last name, business email address, company name, optionally a phone number. - Intake content: free-text input and any documents you upload (e.g. employment contracts, correspondence). - Technical connection data: to serve the website, our hosting provider processes IP address, timestamp, and user-agent.
If your intake contains personal data of third parties (e.g. employees), you are responsible for the lawfulness of that transfer and for informing the affected individuals accordingly.
4. Purposes and legal bases We process your data for the following purposes: - Delivery of the service you requested (responding to your intake, producing the ordered pack). - Communication with you, including clarifications and delivery. - Compliance with statutory retention and cooperation duties. - Security and operation of the website.
Legal bases — where applicable — are your consent (Art. 6(1)(a) GDPR; Art. 31(1) FADP), performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR; Art. 31(2)(a) FADP), and our overriding legitimate interest in operating and improving the platform (Art. 6(1)(f) GDPR; Art. 31(1) FADP).
5. Recipients and processors We rely on the following sub-processors to deliver the service: - Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — hosting and server-side execution of the website. - Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA — sending transactional email (delivering your intake to our team). - Omnilex AG, Zürich — internal handling of your intake by our team.
Data processing agreements (DPAs) are in place with all sub-processors.
6. International data transfers Vercel Inc. and Resend, Inc. are headquartered in the USA. Personal data is transferred there as part of the service. Such transfers rely on the EU Standard Contractual Clauses (SCC, Decision (EU) 2021/914) and equivalent safeguards under Art. 16 et seq. FADP.
7. Retention We retain your data for as long as necessary to deliver the requested service, and at most: - Intakes without contract: 12 months from first contact. - Intakes with contract: up to 10 years after contract end (Swiss retention obligations under the Code of Obligations and the VAT Act). - Email-delivery logs at our email provider: per the provider's standard retention (typically up to 90 days).
8. Your rights You have the right to: - Access your personal data (Art. 15 GDPR; Art. 25 FADP). - Rectify inaccurate data (Art. 16 GDPR; Art. 32(1) FADP). - Erasure of your data (Art. 17 GDPR; Art. 32(2) FADP), insofar as no statutory retention obligation applies. - Restrict processing (Art. 18 GDPR). - Data portability (Art. 20 GDPR; Art. 28 FADP). - Object to processing (Art. 21 GDPR). - Withdraw consent at any time with effect for the future.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or a competent EU supervisory authority.
9. Cookies and tracking HR-Lex does not use marketing or tracking cookies. Strictly necessary cookies or local storage may be used to operate the site; these do not require consent.
10. Data security We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or manipulation. Transmission is encrypted (TLS).
11. Privacy contact For data-protection questions or to exercise your rights: intake@omnilex.ai.
12. Changes We may update this policy to reflect legal or product changes. The current version is always available at hr-lex.ch.