Privacy by design. Google Analytics is not loaded before a choice: the Google tag, analytics identifiers and optional analytics are enabled only after express consent. A job draft stays on the advertiser's device until publication is requested; uploaded logos are stored when preview is prepared.
01Controller and scope
The controller responsible for VILEXI is Sascha Gallinat Vilekzi, operating under the VILEXI brand, Hauptstrasse 21, 8280 Kreuzlingen, Switzerland. Contact: support@vilexi.com.
This policy applies to vilexi.com, paid job-listing services, direct application delivery and communications with VILEXI. It is based on the Swiss Federal Act on Data Protection. Where the EU or UK GDPR applies to a particular activity, VILEXI also respects the applicable requirements under those laws.
02Data we process
| CONTEXT | DATA |
|---|---|
| Website use | IP address, date and time, requested page, browser/device and request or security metadata. |
| Audience analytics | No Google Analytics data is collected before consent. After analytics consent, page and event data, approximate country, device/browser category, referrer, campaign parameters, session and conversion information may be processed. |
| Advertiser draft | Job title, description, location, schedule, requirements, company name and business email. |
| Checkout and billing | Contact and billing details, selected product, payment status, transaction identifiers, tax information and fraud-prevention data. Stripe—not VILEXI—receives full card or bank-account details. |
| Direct applications | Name, role, company, business email, optional phone and website, country, proposed system, profile link, capabilities, fit and availability. |
| Support | Contact details, message, related order or application reference and information you choose to provide. |
| Public market consultations | Organisation type, consultation classification, publication and expiry dates, submitted questions, official answers, response records, change history and relevant timestamps. Pending questions are visible only to authorised users until answered and published. |
| Compliance evidence | Cryptographic hashes, immutable event records, evidence-package metadata, verification codes, archive retention dates and—where configured—third-party timestamp responses. Public verification reveals package metadata but not confidential package contents. |
Do not submit health information, identity documents, financial data, trade secrets or other sensitive personal data in a job description or application.
03Purposes and legal bases
VILEXI processes personal data to provide the website and requested services; prepare and perform contracts; deliver applications; manage checkout, billing, refunds and support; prevent misuse and fraud; comply with legal duties; and establish, exercise or defend legal claims.
Depending on the context, processing is based on performance of a contract or pre-contractual steps, your request or consent, compliance with legal obligations, and VILEXI's legitimate interests in operating a secure and reliable B2B service. Consent may be withdrawn for future processing at any time.
04Direct applications
No account is required. The application is first displayed for review in your browser. Nothing is transmitted until you select the forwarding checkbox and press the final send button.
VILEXI stores the complete application securely so the named advertiser can review it in its employer dashboard. VILEXI also uses Brevo to send the application directly to that advertiser and a separate copy to the applicant. VILEXI receives no hidden inbox copy. The advertiser is an independent controller for its assessment, communications and retention; its own privacy information applies.
VILEXI also processes a technical fingerprint, request identifier and delivery status to prevent duplicates and provide a reliable application record. The applicant's IP address is used temporarily for rate limiting, normally for no more than 10 minutes. Brevo may retain message and delivery metadata under its own retention rules.
Job notifications and partner enquiries
Optional job notifications use your email address, selected solution type and language. A confirmation link activates a one-time notification about a new matching open company listing. We check daily; illustrative examples never trigger a notification. Brevo sends the confirmation and notification emails. You can cancel using the link in either email. Unconfirmed requests are deleted after seven days; completed or cancelled requests are deleted after 90 days. Active requests remain until fulfilled or cancelled.
Partner enquiries use your name, company, business email, website and message so VILEXI can discuss a company presentation with you. They are stored in the existing support system and sent to VILEXI through Brevo. An enquiry does not publish a profile or create a booking.
05Stripe payments
Free listings require no payment card and do not create a Stripe checkout. Stripe remains available for historical payment records, invoices, receipts, payment confirmations and refunds. VILEXI retains the references needed to match historical purchases to their payment status.
Stripe may act as an independent controller for parts of its payment, compliance and fraud-prevention services. VILEXI receives or can access customer, payment-status and transaction records, but not full card numbers or bank credentials. See Stripe's Privacy Policy.
Account verification, application notifications and support replies are transactional service messages. Credit-expiry reminders are no longer sent. Optional marketing emails require a separate opt-in and include an unsubscribe option.
06Local storage and cookies
Where configured, VILEXI uses Cloudflare Web Analytics for privacy-oriented, cookieless audience measurement. This service provides aggregate information about visits, pages, approximate country, device category and website performance and is not used by VILEXI to identify individual visitors.
VILEXI uses Google Analytics 4 only with consent. The Google tag is not loaded and no data is sent to Google until the visitor expressly accepts analytics; advertising storage, advertising user data and advertising personalisation always remain denied. After the visitor expressly accepts analytics, Google Analytics may store or access analytics identifiers and measure page views, sessions, referrers, campaigns, interactions, funnel steps and conversions. Google Signals and advertising personalisation remain disabled. The choice is stored locally with its version and timestamp and may be changed at any time through “Privacy settings” in the footer.
VILEXI does not permit analytics tools to receive passwords, login codes, payment credentials, support messages, application text, unpublished consultation questions or other form contents. VILEXI does not use analytics data for cross-site advertising or sell it to third parties.
The advertiser flow uses local storage to save the job draft and a publication request reference on the device while the form is being prepared.
For private logo previews, VILEXI sets the necessary cookie __Host-vilexi_logo_preview for 24 hours after an upload. It allows the uploading browser to view an unpublished logo; only a hash of the random cookie token is stored with the file. A logo becomes public when linked to a listing or historical order. Unlinked uploads become eligible for deletion after 48 hours.
The draft is sent to VILEXI when the advertiser requests publication. Uploaded logos are sent when preparing the preview, and email verification sends the email address and code to VILEXI. The local draft is removed after successful publication or when starting over. Clearing browser data also removes it.
07Recipients and service providers
- Advertisers, when an applicant expressly requests direct delivery.
- Brevo, for transactional application emails and delivery metadata.
- Stripe, for checkout, billing, tax, fraud prevention and refunds.
- Cloudflare and VILEXI's hosting providers, for website delivery, security, operational logs and cookieless aggregate audience measurement.
- Google, for Google Analytics 4 measurement, only after analytics consent.
- Professional advisers, authorities or courts where required by law or necessary to protect legal rights.
VILEXI does not sell personal data.
08International transfers
VILEXI is based in Switzerland and uses providers with operations and infrastructure in Switzerland, the EEA, the United Kingdom, the United States and other countries. Data may therefore be processed outside your country of residence.
Where a destination is not recognised as adequate, VILEXI or the relevant provider relies on recognised standard contractual clauses, contractual and technical safeguards, or another permitted transfer mechanism. Details may be requested from VILEXI.
09Retention
Personal data is retained only as long as needed for its purpose, disputes, agreements and legal obligations.
- Browser-stored drafts and the analytics-consent record remain under the user's control as described above.
- Analytics data is retained according to the configured provider retention period and is reviewed at least annually; VILEXI aims to select the shortest period compatible with meaningful trend analysis.
- Email marketing preferences and the date of consent or withdrawal are retained while needed to honour and demonstrate that choice.
- Unpaid checkout drafts marked pending, expired or failed are eligible for deletion after 30 days.
- When an advertiser deletes a listing, it is removed from public view immediately. The underlying purchase record, listing audit record and existing application records may be retained where required for contract performance, accounting, dispute handling, fraud prevention or legal obligations.
- Paid listing, contract, invoice and transaction records may be retained for ten years where required by Swiss accounting or tax law.
- Public-consultation evidence packages and their integrity metadata are assigned a ten-year retention date. Until a certified external archive is connected, this retention is enforced by VILEXI's application controls and must not be described as certified WORM storage.
- Applications and their delivery records are retained while needed for application management, support, fraud prevention and legal claims. Applicants may request deletion subject to legal obligations and legitimate retention needs.
- Abuse-prevention counters use short time windows of up to 24 hours. Persistent counters store hashed IP or email keys, counts and expiry times; expired records are removed during ongoing housekeeping. Additional temporary counters may be held in memory.
- Support correspondence is kept as long as needed to handle the request and protect legitimate interests.
Providers and advertisers apply their own retention periods. Backups or legal holds may delay final deletion where necessary.
10Your rights
Subject to applicable law, you may request information, access or a copy, correction, deletion, restriction, data portability, or object to certain processing. You may also withdraw consent for the future.
Send requests to support@vilexi.com. VILEXI may verify your identity and may retain information where permitted or required. You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, your local data-protection authority.
11Security
VILEXI uses reasonable technical and organisational safeguards, including encrypted transmission, input validation, same-origin controls, rate limiting, restricted secrets and data minimisation. No internet service can guarantee absolute security.
12Children and automated decisions
VILEXI is a business service and is not directed to children. VILEXI does not knowingly collect children's personal data and does not currently make decisions producing legal or similarly significant effects solely through automated processing.
13Changes to this policy
VILEXI may update this policy when the service, providers or legal requirements change. The effective date and version above identify the current text. Material changes will be communicated through the website or another appropriate channel.