Privacy policy

Controller

Lyabox is a brand of HeyLya SA, Chemin de Beau-Rivage 10, 1006 Lausanne, Switzerland.

For any question about your data: contact@lyabox.ch.

Data we collect

With the demo request form:

• your name, your company, your e-mail address and your trade;
• your phone number, if you give it;
• the language of the website and the date and time of your consent;
• a fingerprint of your IP address, computed with a secret key, to prevent abusive submissions. Your IP address itself is never kept.

Visits to the website

Our hosting provider records technical logs of visits (IP address, page requested, browser, date). We use no audience measurement tool and the website sets no cookies of its own.

Why we use it

• to answer your demo request;
• to schedule and hold the demo with you;
• to contact you about Lyabox after the demo.

What we do not do

We do not sign you up to any newsletter and we never sell your data. No automated decision is made about you.

Legal bases

We process your data in accordance with the Swiss Federal Act on Data Protection (FADP). For visitors from the European Union, the GDPR also applies: your consent, the pre-contractual steps you ask for (the demo) and our legitimate interest in answering requests and protecting the website from abuse.

Who receives your data

We use the following providers, each for a specific task:

• Exoscale (Switzerland, Geneva): hosting of the application and the database;
• Mailgun (European Union region): sending e-mails;
• Vercel (United States): hosting of the website and visit logs;
• Cloudflare Turnstile (United States): anti-robot check, only when it is enabled;
• Calendly (United States): booking the demo time slot;
• Google Meet (Google): video call for the demo.

Booking with Calendly

After you send the form, you are taken to Calendly, a US service, to pick a time slot. Your name and e-mail address are passed in the link to prefill the booking. You can change them or close the page without booking.

Transfers abroad

European Union countries offer an adequate level of protection. For the United States, transfers rely on the Swiss-U.S. Data Privacy Framework and/or standard contractual clauses.

How long we keep it

A request that goes no further is deleted 24 months after the last contact. If you become a customer, we keep your data for the whole relationship, then for as long as our legal obligations require.

Your rights

You can ask to access your data, to have it corrected, deleted or handed over in a common format, object to its processing and withdraw your consent at any time. Write to us at contact@lyabox.ch.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, if you live in the European Union, with the authority of your country.

Security

The website and the application are only reachable over HTTPS. Only the people who need it have access to your data, and your IP address is never recorded in clear.