Privacy Policy.

The controller responsible for the processing described in this Policy is HIG Helvetic Investment Group AG, Hauptstrasse 17, 9030 Abtwil SG, Switzerland.

Email: info@helvetic.group, phone: +41 71 333 11 38.

Please use these contact details for privacy enquiries and requests to exercise your rights.

When you visit our website, technical data is processed to display its content and operate the service. This includes your IP address, the date and time of access, the requested address, HTTP status, the amount of data transferred, and information about your browser and operating system.

This data is used to provide the website, identify and resolve technical errors, and protect the service against misuse and attacks.

We use Lovable (Lovable Labs Incorporated, USA) to operate this website and its server functions. The website is delivered and protected through the network of Cloudflare, Inc. (USA), which is integrated through Lovable. These providers process the access data necessary to perform their respective technical functions. Section 6 sets out the countries involved and the basis for transfers abroad.

Further information is available in the providers’ privacy information.

• Lovable’s privacy information
• Cloudflare’s privacy information

When you contact us through the contact form, by email or by telephone, we process the information you provide. This may include your name, company, email address, telephone number and the content of your enquiry.

We use this information to handle your enquiry, communicate with you and, at your request, prepare a proposal or a business relationship.

Contact form submissions are processed through the website’s server functions and forwarded to our business email address. This delivery uses Resend through Lovable’s email service. Resend processes the message content and the address and log data necessary to send and deliver the message.

Incoming messages are then handled and stored in our business email account under helvetic.group, which is operated by united-domains GmbH (Germany).

• Resend’s privacy information

The website saves your language preference in your browser’s local storage so that the corresponding language can be displayed when you return. The preference remains stored until it is changed or the relevant browser data is deleted.

Unsubmitted contact form entries are temporarily saved in your browser’s session storage. This preserves your entries when you switch between German and English. The draft is stored on your device; this storage does not transmit the draft to HIG. Session storage is normally cleared when the relevant browser tab is closed. If a browser session is restored, the browser may restore this data as well.

You can delete stored website data or restrict storage through your browser settings. This may affect the language preference and the preservation of contact form entries.

We do not use advertising or analytics cookies or tracking services on this website. Fonts are provided with the website rather than loaded from external font services. No external maps or videos are embedded.

HIG itself processes personal data in Switzerland. In addition, the following categories of recipients access personal data as far as this is necessary for their task: the provider of hosting and server functions for this website, the provider responsible for delivering and protecting the website, the service used to send contact form messages by email, and the provider of our business email account. Authorities, courts and engaged advisory or audit firms may also receive data where we are obliged or entitled to disclose it.

Hosting and server functions are provided by Lovable (Lovable Labs Incorporated, USA; EU representation Lovable Labs AB, Stockholm). A data processing agreement with Lovable applies to this processing. Access data and form submissions may therefore be processed in the USA. Lovable’s data processing agreement incorporates the EU Standard Contractual Clauses (Module 2) for transfers to countries without a recognised adequate level of data protection. According to Lovable’s privacy information, transfers from Switzerland are additionally covered by a Swiss addendum governed by Swiss law with the FDPIC as the competent authority. The subprocessors engaged by Lovable are listed with name, location and purpose in Lovable’s Trust Center.

The website is delivered and protected through the network of Cloudflare, Inc. (USA), which is integrated through Lovable. Cloudflare generally handles requests at the closest location within its global network. Country-level restriction (Cloudflare Data Localization Suite) is not enabled for this website. Access data may therefore be processed at any location in that network – depending on where the request comes from, in particular in Europe as well as in the USA, where Cloudflare is based. Cloudflare publishes the current list of its network locations by city and country; it is linked below. Cloudflare relies for transfers from Switzerland on its Data Processing Addendum with Standard Contractual Clauses that expressly cover Swiss transfers. There is no direct contract between HIG and Cloudflare; in this context Cloudflare acts as a subprocessor of Lovable.

Contact form messages are sent by Resend (Plus Five Five, Inc., USA), which is likewise integrated through Lovable. Resend states that it stores message content and related log data in the USA; selecting a European sending region does not change this storage location. Resend engages its own subprocessors based in the USA for this purpose, in particular Amazon Web Services for hosting and sending and Cloudflare as a web application firewall. For transfers from Switzerland, Resend describes Standard Contractual Clauses with the required Swiss adaptations. Resend’s contractual counterparty is Lovable, not HIG.

Incoming messages are stored in our business email account under helvetic.group, which is operated by united-domains GmbH (Germany). Germany is an EU member state with a level of data protection recognised as adequate by the Swiss Federal Council; no additional transfer safeguards are therefore required for disclosures to Germany.

You can obtain further information about individual service providers, the countries involved and the safeguards applied through the contact details above.

• Lovable’s Data Processing Agreement
• Lovable’s Trust Center (subprocessors)
• Cloudflare’s network locations (cities and countries)
• Cloudflare’s Data Processing Addendum
• Resend’s Data Processing Addendum
• Resend’s subprocessors
• united-domains’ privacy information

We retain personal data for as long as necessary for the purposes described in this Policy. For enquiries, the retention period depends on the handling of your request and any resulting business relationship. Longer retention may be necessary to comply with legal obligations or to establish, exercise or defend legal claims.

Technical logs and data stored by the email delivery provider are subject to the retention and deletion periods applicable to the services used. Data is deleted or anonymised once it is no longer needed for its purpose and there are no remaining grounds for retaining it. Storage on your device is described in section 5.

The connection to our website is encrypted using HTTPS. This protects data in transit between your browser and the website. Subsequent transmission by email is a separate process; HTTPS does not provide end-to-end encryption of email communications.

Subject to applicable data protection law, you may request information about the processing of your personal data and the correction of inaccurate data. Where the legal requirements are met, you may also request deletion, the cessation of particular processing activities, or the provision or transfer of certain data.

Where processing is based on your consent, you may withdraw it with effect for the future. Statutory retention obligations and other restrictions provided by law remain applicable.

We may request the information necessary to verify your identity when handling a request. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

• Swiss Federal Data Protection and Information Commissioner (FDPIC)

We update this Privacy Policy when our processing activities or legal requirements change. The current version is available on this website.