Privacy

Who is responsible, and what this notice covers

Omnilex, Hohlstrasse 186, 8004 Zürich, Switzerland, is the controller for the processing described here. For any question about this notice or to exercise the rights set out below, write to intake@omnilex.ai.

This notice covers the omnilex.ai website: browsing it, submitting the contact form, and using the AI research assistant. Personal data processed in the course of a legal engagement is not covered here; it is governed by the engagement agreement and by professional secrecy.

The Swiss Federal Act on Data Protection (FADP) applies. Where the EU General Data Protection Regulation applies to a visitor, this notice is written to meet it as well.

Visiting the website

Our hosting provider records a server log entry for every request: the IP address, the browser and device the request came from, the page requested, the referring page, and the date and time. These entries let us operate the site, diagnose faults and detect abuse.

The legal basis is our legitimate interest in a secure and functioning website (article 31(1) FADP; article 6(1)(f) GDPR). Log entries are kept for a short period and then deleted or aggregated.

Contacting us through the form

The contact form asks for your name, your email address, a description of your matter and, optionally, how you prefer to be contacted. We use this to answer you, to run a conflict check and to assess whether and how we can act.

The submission also carries information about how you reached the form:

• The page you were reading immediately before you opened it. This is held in the browser's memory for the length of your visit only, and is included whether or not you accepted analytics.
• If — and only if — you accepted analytics: the page on which your visit began, the page on which you first ever arrived at this site, the external site that referred you, and any campaign parameters or advertising click identifiers in the address you arrived on.

What happens to a form submission

The completed form is delivered to us by email through Microsoft Azure Communication Services and lands in our intake inbox. If you accepted analytics, your email address is also passed to PostHog so that the visit that led to the enquiry can be connected to it, and the session recording described below captures the form as you fill it in — including what you write in the description of your matter.

The legal basis is the taking of steps at your request prior to entering into a contract, and our legitimate interest in understanding which of our published material leads to enquiries (article 31(1) FADP; article 6(1)(b) and (f) GDPR). Enquiries that do not become engagements are deleted once they are no longer needed for conflict-checking purposes.

The AI research assistant

The assistant on the Ask page answers questions from Swiss legal sources. When you send a question, we process the text of your question and of the answer, an identifier for the conversation generated in your browser, the site language and the time of each message.

Your question is transmitted to OpenAI, which generates the answer, and searches are run against our own legal research service. Transcripts are retained so that we can operate the assistant, investigate faults and improve the quality of its answers.

The assistant is a public research tool rather than a confidential channel, and using it does not make you a client.

The legal basis is our legitimate interest in providing and improving the service (article 31(1) FADP; article 6(1)(f) GDPR).

Analytics, only if you accept

We use PostHog to understand how the site is used. It is switched off when the page loads and captures nothing at all until you accept it in the banner. If you decline, or simply never answer, no analytics data is collected. Your browser does fetch PostHog's configuration when the page loads, which discloses your IP address to it; nothing about your visit is sent with that request.

Once accepted, PostHog records pages viewed, links and buttons clicked, a small number of named events such as starting or submitting the contact form and asking the assistant a question, and the language you are reading in. It creates a profile so that repeat visits can be recognised.

It also records your session: a replay of the pages as they appeared on your screen, together with your mouse movements, clicks, scrolling and the text you type — the contact form and the assistant included.

PostHog runs on European infrastructure, and its requests are routed through this site's own domain so that they are not lost to content blockers. The legal basis is your consent (article 6(1)(a) GDPR), which you can withdraw at any time from the link in the footer, with effect for the future.

What is stored in your browser

Your answer to the consent banner is kept in your browser's local storage so that you are not asked again. The attribution information described above is stored the same way, and only after you have accepted analytics. If you accept, PostHog additionally sets its own identifiers.

Clearing your browser storage for this site removes all of it, and the banner will appear again on your next visit.

Who receives your data

We do not sell personal data and do not disclose it for advertising. Besides our own lawyers and staff, the following providers process data on our behalf under written agreements:

• Vercel — hosting and delivery of this website, and server logs.
• Microsoft (Azure Communication Services) — delivery of the contact form to our inbox.
• OpenAI — generating the answers of the research assistant.
• PostHog — website analytics, on European infrastructure, only after you accept.
• Our database provider — storage of research assistant transcripts.

Data outside Switzerland

Some of these providers are established in, or process data in, the United States. Transfers there rest on the European Commission's standard contractual clauses together with the Swiss annex recognised by the Federal Data Protection and Information Commissioner, and on supplementary measures where these are needed.

We may also disclose data where the law requires it, or where it is necessary to establish, exercise or defend legal claims.

How long we keep it

Server logs are kept for a short operational period. Enquiries are kept until it is clear whether an engagement will follow, and afterwards only as long as conflict-checking or a statutory retention duty requires. Assistant transcripts are kept while they are useful for operating and improving the service. Analytics data is kept for as long as it remains meaningful for the analysis it serves.

Your rights

You may ask us for a copy of the personal data we hold about you, for it to be corrected or deleted, for its processing to be restricted, and to receive it in a portable form. You may object to processing based on legitimate interests. Where processing rests on your consent, you may withdraw that consent at any time without affecting what was done before.

Write to intake@omnilex.ai and we will respond within the statutory period. We may need to verify your identity first. If you are not satisfied, you can complain to the Federal Data Protection and Information Commissioner in Bern or, where the GDPR applies, to your local supervisory authority.

Security and changes

Traffic to this website is encrypted in transit, connections to our database are encrypted and certificate-verified, and access to personal data is limited to those who need it. No system is perfectly secure, and we cannot guarantee absolute protection.

We update this notice as the website changes. The date at the top of this page shows when it was last revised.