DATA GOVERNANCE // VTX-PRIV-002
COMPLIANT WITH EU GDPR, SWISS FADP, AND CCPA/CPRA // LAST REVISED: OCTOBER 2024
01. Data Controller Identification
This Privacy Policy sets forth the principles under which VORTEX INSTRUMENT CO. ("VORTEX," "we," "us") collects, secures, and handles personal data obtained via our digital platform (vortexinstruments.co) and global distribution channels.
Controller Entity: VORTEX Instrument Co. AG / LLC
Designated DPO: Data Protection Officer, Telemetry Compliance Desk
Corporate Address: Bahnhofstrasse 28, CH-8001 Zürich, Switzerland
Direct Inquiries: privacy@vortexinstruments.co
02. Categories of Telemetry Collected
We adhere strictly to the principle of Data Minimization (GDPR Art. 5(1)(c)). We gather only the specific telemetry parameters essential to process transactions, fulfill air freight logistics, and register hardware for 10-year warranty coverage:
A. Transaction & Fulfillment RecordsFull legal name, billing address, international delivery destination, telephone number (required solely by customs couriers), email address, and encrypted payment processor token.
B. Hardware Serial RegistrationUnique laser-engraved serial identifier (e.g., VTX-01-94812), calibration date, metallurgic finish, and inspection bench stamp.
C. Technical System TelemetryTruncated/anonymized IP addresses, browser engine user-agent, TLS handshake version, and referring origin for firewall denial-of-service prevention.
03. The Anti-Brokerage & No-Tracking Pledge
We do not sell, rent, monetize, or disclose your personal data to data brokers, advertising networks, or social telemetry aggregators.
Our digital infrastructure contains zero tracking pixels from third-party social networks and zero invasive behavior fingerprinting scripts. Third-party data sharing is restricted strictly to:
- Air Cargo Carriers (DHL Express, FedEx International, Swiss Post): Recipient name, destination street address, phone number, and commercial customs invoice data.
- Encrypted Payment Gateways (Stripe, Apple Pay, Shopify Pay): Tokenized card authorization with zero raw credit card numbers stored on our servers (PCI-DSS Level 1 compliant).
04. Legal Basis for Processing (GDPR Article 6)
We process personal telemetry under the following lawful bases:
- Contractual Performance (Art. 6(1)(b)): Necessary to manufacture, pack, clear international customs, and deliver your hardware instrument.
- Legal Obligation (Art. 6(1)(c)): Compliance with statutory Swiss and international financial recordkeeping, commercial invoicing, and tax audit laws.
- Legitimate Interests (Art. 6(1)(f)): Maintaining 10-year mechanical warranty databases and preventing fraudulent transactions.
05. Cookie Policy & Client Storage
Our web application uses client-side session storage and minimal functional cookies. These exist solely to:
- Maintain selected items and configuration states in your shopping cart drawer.
- Store localized currency preference (USD).
- Verify CSRF security nonces on support and contact forms.
You can disable cookies at any time via your browser preferences without affecting the browseability of our technical schematics.
06. Individual Data Rights (GDPR & CCPA/CPRA)
Regardless of geographic residency, every VORTEX client is afforded full transparency rights:
Right to Access (GDPR Art. 15)Request a digital export of all order logs and serial numbers registered to your identity.
Right to Erasure (GDPR Art. 17)Request complete purging of contact data upon expiration of statutory tax retention terms.
Right to Rectification (GDPR Art. 16)Update or correct shipping addresses or technical contact records.
Right to Portability (GDPR Art. 20)Obtain your purchase telemetry in structured JSON or CSV format.
To exercise any of these rights, submit a verified request to privacy@vortexinstruments.co. Requests are fulfilled within 14 business days.
For escalations or supervisory authority contacts: Swiss Federal Data Protection and Information Commissioner (FDPIC) / Feldeggweg 1, CH-3003 Bern, Switzerland.