Who is responsible for your data
The controller is KURUVILLA WORLDWIDE AG, Weiherweg 25, 5502 Hunzenschwil, Switzerland. Swiss Investor Concierge is operated by this company. Contact us about privacy at info@swissinvestorconcierge.com.
This notice covers the main website, the Swiss investor landing page, the experience and event pages and their enquiry forms, and our protected project, presentation and administration areas.
Your enquiry and our response
For investment enquiries, we process the information you submit: first and last name, email address, investment range, interest and intended timeframe. The Swiss landing page also asks for your telephone number and preferred contact method. For event and webinar enquiries, we collect first and last name, email address, country of residence, the selected event or webinar interest and an optional telephone number. For all forms, we store the submission time, language and version of the form notice you confirmed.
We use this information to respond, discuss your initial objectives and coordinate further project enquiries. On the landing page you choose telephone or WhatsApp; email is also available for handling your enquiry. For event and webinar enquiries, we use your details to provide information about your selected experience and the next steps, and to answer your questions. We contact you by email and, where appropriate, using the telephone number you provided. You can change your preference or decline further contact at any time.
An enquiry is voluntary. We cannot process the form without its required fields. Submitting it does not conclude an investment agreement or subscribe you to a general newsletter. Registering event interest is non-binding; it does not reserve a place, book a ticket or trigger payment. Suitability is assessed personally; the form makes no automated investment decision.
Source and campaign attribution
We record the page and source associated with an enquiry: the main website, the Swiss landing page or the event/webinar form. Where the page address contains campaign parameters at submission, we record source, medium and campaign identifier (UTM parameters). If supplied by your browser, we also record the referring website's hostname.
This helps us understand which page or campaign generated an enquiry. This attribution uses no advertising cookies. The current website does not embed Google Analytics, Meta Pixel or Google Ads conversion tags.
Storage and access
Form enquiries are stored in our server-side database and our own CRM. Enquiries using the same email address are linked to one contact. Authorised staff can view and export enquiries in the protected administration area and add conversation notes, processing status and follow-up reminders. Automatic transfer of these enquiries to HubSpot is not currently configured.
Server administration is arranged through Trifox AG, Birkenstrasse 47, 6343 Rotkreuz, Switzerland. Hosting, IT and email services support the website and communication. These service providers may process the data needed for their services. For email, this includes the sender, recipient and message content.
Submitting a form does not share your information with project companies or additional advisers. If sharing is needed for a later project review, we will inform you separately. Disclosures required by law remain possible.
Technical data and security
When you visit, connection data such as your IP address, time, requested page and browser information is transmitted to the server. It supports page delivery, troubleshooting and protection against misuse. The application processes a value derived from the IP address to limit repeated form submissions.
The website uses HTTPS encryption. The internal administration area requires sign-in, and data requests and exports also check authorisation. Security checks limit repeated login attempts.
Vimeo videos
We embed videos from Vimeo.com, Inc., USA, on the main website and the experience pages. Videos may load automatically without a prior click, in some cases when you reach the relevant section. The main page's large background video loads only on desktop devices; other videos may also load on mobile devices.
When a video loads, Vimeo receives your IP address, browser and device information, and information about the page displaying the video. We use Vimeo's Do Not Track setting (dnt=1) to limit the player's collection of session and analytics data. Cookies needed for secure player operation may still be set, and your browser may send existing Vimeo cookies. The embed therefore still involves data transfers.
Processing in the United States is possible. Vimeo identifies the Swiss-U.S. and EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses among its international transfer mechanisms. For recipients, retention, transfers and your rights, see Vimeo's privacy policy. Details of player cookies and their lifetimes are available in Vimeo Player Cookies and Vimeo's cookie policy.
WhatsApp and external links
If you choose WhatsApp, we use it to respond to your enquiry. WhatsApp also processes communication and usage data under its own terms. WhatsApp Ireland Limited provides the service to users in Switzerland; processing in the United States is possible. See WhatsApp's privacy policy. You can use telephone or email instead.
LinkedIn references are ordinary links. Opening them takes you to another website, where that provider's privacy information applies.
Retention
We retain information for as long as it is needed to handle your enquiry, manage a subsequent business relationship or meet legal obligations. Relevant criteria include the progress of contact, ongoing project reviews, statutory retention duties and the protection of legal claims. When the purpose ends and no other duty or entitlement applies, data is to be deleted or anonymised. You may request deletion at the contact address above.
Your rights
Subject to applicable law, you may request access, correction, deletion and, where applicable, delivery or transfer of your data. You may withdraw consent for future processing at any time. We may need reasonable proof of identity to handle your request.
Swiss data protection law applies. Where the GDPR applies, we rely on pre-contractual steps to handle your enquiry, legitimate interests to operate the website securely, and consent for optional permissions. Corresponding rights to restriction and objection then also apply. You can complain to the FDPIC or another competent data protection authority.
Changes to this notice
We update this notice when the website or our data processing changes. The current version is available here; its date is shown above.