Privacy policy

1. Controller

Helvetic Performance

Email: contact@helveticperformance.ch

Telephone: +41 77 531 59 37

Privacy contact: contact@helveticperformance.ch

2. Scope and applicable law

Processing is governed by the Swiss Federal Act on Data Protection. Where the EU General Data Protection Regulation applies, we also observe its applicable requirements.

3. Data we process

The enquiry form stores the details you submit for personal review. The VIN and location are optional. Sending the form does not provide an automated performance or pricing promise.

• name, email address and optional telephone number
• vehicle make, model, model year, engine or variant
• the last seven characters of the vehicle identification number (VIN), if provided voluntarily
• requested service, location, preferred contact method, preferred timeframe and project description
• known modifications and technical notes
• for partner applications: partner model, business or workshop, country, region, experience, brand focus, current tools and requested areas of cooperation
• language, consent, submission time and technical enquiry identifier

4. Purposes of processing

Enquiry data is not used for newsletters, personalised advertising or sale to advertising networks.

• receive and classify enquiries
• assess compatibility, the appropriate service route and required scope
• contact you about questions, a possible quotation or the next step
• assess a potential partnership, technical suitability, region and required onboarding
• protect the website, prevent abuse and comply with legal obligations

5. Legal bases

Where the GDPR applies, processing relies as appropriate on consent, steps requested before entering a contract, our legitimate interest in secure operation or a legal obligation.

6. Server and security data

The website uses Cloudflare infrastructure for hosting, database and security functions. We do not store an IP address in clear text as the rate-limit key. A hash generated with a secret salt is used with a scope and counter for a 10 minutes rate-limit window; expired records are removed during subsequent bounded cleanup.

7. Enquiries and storage

Enquiries are stored in a database and handled by Helvetic Performance Team (contact@helveticperformance.ch). The retention period is 180 days; older records are removed during subsequent bounded database cleanup unless a legal retention obligation or justified longer need applies.

8. Recipients and processors

Cloudflare provides hosting, database and security functions. Within Helvetic Performance, access is limited to people responsible for technical assessment or customer service. Data is not disclosed for advertising purposes.

9. Cookies and tracking

The site sets no non-essential cookies and uses no analytics, advertising or retargeting services. Fonts are self-hosted. New external technologies will be activated only after this policy and any required consent mechanism have been updated.

10. Telephone and WhatsApp

A connection to a telephone or WhatsApp provider is established only when you select the relevant link. From that point, the provider’s privacy information and terms also apply.

11. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, data portability or object to certain processing. Send requests to contact@helveticperformance.ch.

You may contact the Swiss Federal Data Protection and Information Commissioner and, where the GDPR applies, a competent EU supervisory authority.

12. Security

We use encrypted transmission, server-side validation, request-size and frequency limits, cross-origin protection and controlled database queries. No transmission or storage system can guarantee absolute security.

13. Changes

We may update this policy when the website, processing activities, service providers or applicable law changes. The published version is the current version.