Privacy notice

Last updated: 14 October 2026

Controller and contact

VALEVIS is a brand of VALEVIO AG. The controller responsible for data processing on this website is:

Data protection framework

Data processing is subject to the Swiss Federal Act on Data Protection (FADP). Where the General Data Protection Regulation (GDPR) applies, the legal bases and rights described below also apply.

Visiting this website

This website is hosted on a Hetzner server in Germany. To deliver and secure the website, VALEVIO AG processes data including your IP address, access time, requested address and technical browser and connection information. Technical access logs may be created by the reverse proxy. Processing serves secure operation and troubleshooting. Where the GDPR applies, the legal basis is the legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

Vehicle stories and brokerage enquiries

The contact forms let you introduce your vehicle to VALEVIS for a possible editorial feature or enquire about sourcing and brokerage for an exclusive vehicle. VALEVIO AG uses the details you provide to handle your particular enquiry and contact you.

Introducing a vehicle or submitting an enquiry does not authorise publication. Whether and how your story, your vehicle or you will be featured will be agreed with you separately.

When you submit a form, VALEVIO AG processes your name, email address, vehicle details and message, along with any optional phone number and year of manufacture. The enquiry cannot be processed without the required details. The data is used solely to handle and answer your enquiry. Where the GDPR applies, the legal basis for pre-contractual enquiries is Article 6(1)(b) GDPR; for other messages it is the legitimate interest of VALEVIO AG in communication under Article 6(1)(f) GDPR. Acknowledging the privacy notice is not consent to advertising.

Email and service providers

The forms send an email to s.fleischmann@valevio.ch. Google Workspace is used for delivery and the mailbox; Google processes the submitted information for this purpose. The website does not store enquiries in its own database. Mail transport to the Google relay is encrypted. Processing through the mailbox of VALEVIO AG in Switzerland and by Google may involve processing outside the EU/EEA. Information about Google's contractual privacy provisions and international transfers is available in the Google Workspace Data Processing Addendum. Use the privacy contact above for information about the specific service providers and transfer safeguards in use.

Retention and abuse prevention

Enquiries are retained for as long as necessary to handle them and, where applicable, fulfil a contract; statutory retention obligations remain applicable. For sending limits and duplicate detection, the application holds technical connection data and checksums in memory for up to ten minutes. Form entries are not permanently stored in the browser.

Cookies, local storage, fonts and media

Images, fonts and music files are served from our own server. Music starts only when you choose to play it. No external video, social-media or music players are embedded; external platforms are accessed only when you open their links. We do not use advertising cookies.

In our configuration, optional PostHog analytics uses no analytics cookies and keeps its technical identifiers only in the open page’s memory. We store your consent or refusal under “valevis-analytics-consent-v1” in sessionStorage for this browser tab’s session. If that storage is blocked, your choice applies only to the open page. Storing your choice allows us to respect your decision. The language is still selected through the “lang” URL parameter, without a language cookie.

Optional website analytics and heatmaps

With your prior consent, VALEVIO AG uses PostHog to understand visitor sources, use of our content and contact options, and clicking and scrolling behaviour, and to improve the website. The entire website remains available without consent. Where the GDPR applies, the legal basis for analytics is your consent under Article 6(1)(a).

We transmit pageviews, timestamps and visit duration, referring websites reduced to their origin address, selected campaign parameters, and technical information about the browser, operating system, device type, screen, viewport and time zone. Temporary technical identifiers associate events. Events include vehicles and sections viewed, navigation, language changes, music starts, contact forms opened, successful enquiry submissions and platform links clicked. Heatmaps combine click and pointer positions and scroll depth; coordinate collection is suspended while dialogs or forms are open.

Form contents are not sent to PostHog. We do not record sessions, create person profiles or associate analytics with names or email addresses from your enquiries. Full referrer URLs, arbitrary URL parameters and advertising click identifiers are not transmitted. PostHog receives your IP address for technical delivery. It may process and store it in event data and derive approximate location information and a bot classification from it. We therefore do not describe the analytics as completely anonymous.

The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We have a data processing agreement (DPA) with PostHog. We use PostHog EU Cloud with storage in Germany. This does not exclude all processing outside the EU/EEA, particularly in the United States. The DPA contains international transfer provisions, including the Data Privacy Framework and Standard Contractual Clauses. Details appear in the PostHog DPA, particularly section 10, the subprocessor list and PostHog’s privacy notice.

Analytics retention and withdrawal of consent

PostHog specifies a plan-dependent analytics window for event data: one year on the free plan and seven years on paid plans. Queries exclude events outside that window. The end of the analytics window is not a guaranteed automatic deletion of stored data. Storage at PostHog is separate from the temporary storage in your browser. Further information is available in the event retention documentation.

You can withdraw consent at any time through “Cookie settings” in the footer, with effect for the future. No further analytics events will then be transmitted. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and does not automatically delete events already sent. For access or deletion requests, contact VALEVIO AG at s.fleischmann@valevio.ch.

Links to YouTube, Instagram, Spotify and Apple Music

We link to our channels on YouTube and Instagram and the album “One of One” on Spotify and Apple Music using ordinary links. This website does not load social media feeds, players or scripts, or music players or scripts from these platforms. When you open one of these links, the platform receives technical data from your browser. The respective provider’s privacy policies apply there.

Your rights

Subject to applicable law, your rights include access, rectification, erasure and the delivery or transfer of your data. Where the GDPR applies, you may also request restriction of processing and object to processing based on legitimate interests on grounds relating to your particular situation. To exercise your rights, please use the contact details above. You may report suspected breaches of Swiss data protection law to the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you may complain to a competent European data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement.

Deutsch