Kryzalone is committed to processing personal data transmitted through this website in compliance with the applicable legal framework and with the utmost transparency.
The controller responsible for the processing described in this policy is Cristhofer Ortiz, who operates the sole proprietorship under the trading name Kryzalone, Rue du Port-Franc 22, 1003 Lausanne, Switzerland. He can be contacted at c.ortiz@kryzalone.com or on 079 918 18 08.
Depending on how you use Kryzalone’s website and services, the following categories of data may be processed:
Full card details, in particular the card number and security code, are entered directly in Stripe’s secure environment. Kryzalone neither receives nor stores them.
This data is processed to the extent necessary to:
Kryzalone does not sell personal data or disclose it to third parties for their own commercial prospecting.
Processing is carried out in accordance with the Swiss Federal Act on Data Protection (FADP). Where the European General Data Protection Regulation (GDPR) applies, processing is based, as appropriate, on requested pre-contractual measures, performance of a contract, a legal obligation, Kryzalone’s legitimate interests in managing and securing its business, or consent where required.
Only data that is appropriate and necessary for a specified purpose is processed. Where processing is based on consent, an authorisation that has been given may be withdrawn for the future without affecting processing that was already lawful.
Data is accessible to Kryzalone and, only to the extent necessary for their assignment, to the following technical service providers:
Data may also be disclosed to a professional adviser, a bank, an authority or a court where this is necessary to defend a right or required by law. Messages sent to the chatbot must not contain sensitive data or secrets that are not necessary for the request.
Depending on the service used, data may be processed in Switzerland, the European Economic Area (EEA), the United States or other countries in which a service provider, affiliated company or authorised processor actually provides the service. The possible destinations known on the date of this policy include:
This list describes possible destinations and does not imply that each provider processes every category of data in every country mentioned. The actual destination depends in particular on the product activated, the contracting entity, technical routing, financial partners and the current list of processors.
Where data is disclosed from Switzerland to another country, the applicable basis for the transfer must be determined for the processing concerned:
Providers’ certifications, processors and processing locations may change. Further information about a specific transfer and the applicable safeguards may be requested from Kryzalone. The Swiss framework is presented by the FDPIC.
Requests that are not followed up are generally retained for up to 12 months after the last exchange. Operational data is retained for the duration of the contractual relationship and then for as long as reasonably necessary to manage warranties, disputes and legal obligations. Contractual documents, invoices and payment records subject to accounting obligations are generally retained for ten years. Technical logs are retained for a period proportionate to security and diagnostic needs.
At the end of the applicable period, data is deleted or anonymised unless longer retention is required by law or necessary for the establishment, exercise or defence of a legal claim.
Within the limits and subject to the conditions of applicable law, you may in particular request:
Reasonable identity verification may be requested. Certain documents must be retained despite a request for erasure because of a legal obligation or the defence of a right. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) and, where the GDPR applies, the competent supervisory authority.
The website does not currently use advertising cookies. Cookies or strictly necessary storage mechanisms may be used for security, authentication, temporary session retention or chatbot state. When you access payment services, Stripe may use its own cookies required for security and fraud prevention.
To improve the website, Kryzalone counts page views and clicks on contact, quotation, telephone and email buttons. Statistics are aggregated by day, page, approximate country, device category and referral channel. They contain no IP address, personal contact details, visitor identifier or URL parameters. No analytics cookie or individual browsing history is created. Aggregated counts are retained for no more than 400 days.
You can disable this measurement below. Your opt-out choice is stored only in this browser; Do Not Track and Global Privacy Control signals are also respected. Technical data used for service security remain separate from these statistics.
Audience measurement is allowed in this browser.
Kryzalone implements technical and organisational measures proportionate to the risks in order to protect data against loss, alteration, unauthorised access and disclosure. Since no system can guarantee absolute security, any confirmed incident is handled in accordance with the applicable obligations.
Automation and artificial intelligence tools may help prepare a response or carry out a requested task. They do not make decisions on their own that produce significant legal effects concerning you. Quotations, prices and contractual commitments remain subject to human validation or your explicit acceptance.
To exercise a right or ask a question about this policy, write to c.ortiz@kryzalone.com or by post to Cristhofer Ortiz / Kryzalone, Rue du Port-Franc 22, 1003 Lausanne, Switzerland.
This policy may be adapted when the processing activities or legal framework change. The date of the published version is shown below.
Last updated: 28 August 2026