Privacy
Privacy Policy
This policy names every party that receives data from this website and what happens to it. It follows the revised Swiss Data Protection Act (revDSG) and, where applicable, the GDPR.
Controller
Solvea Advisory GmbH
c/o Sebastian Sieber
Zugerstrasse 11a
6340 Baar
Schweiz
For privacy matters write to datenschutz@solvea.ch. We reply within 30 days.
The short version
This website consists of pre-built pages. We measure how it is used ourselves and without any external analytics service: anonymously by default, with no entry in your browser and without storing your IP address. Recognising you across several visits and attributing your network address to an organisation happen only if you agree. We pass no data on for advertising and we sell no data.
- Opening a page means our host processes technical connection data, including your IP address.
- We count page views and measure how far our pages are read; anonymously unless you consent.
- The contact and newsletter forms transmit only what you type into them.
- Charts and videos from third parties load only once you allow them.
- The bot protection in our forms starts only when you use a form.
Visiting the website
The website is delivered through a hosting service of Google. When a page is requested, Google processes the IP address, date and time, the requested address, the amount of data transferred, the referrer and details about browser and operating system. This is technically necessary for delivery and serves to defend against attacks. We keep no access log of our own and have no access to the raw log data; Google deletes it according to its own schedule. The legal basis is our legitimate interest in secure operation (Art. 31(1) revDSG, Art. 6(1)(f) GDPR).
Images in articles
Images used in articles are stored in a storage service of Microsoft in Switzerland. When you open an article your browser loads them directly from there and transmits your IP address to Microsoft. This data serves delivery only.
Measuring usage
We measure how this website is used ourselves and embed no external analytics service. The data is held by Microsoft in Switzerland, never leaves our own environment and is not combined with other sources. The measurement runs at two levels.
Without your consent
We record the page requested, the referrer, campaign parameters in the address, details about browser, operating system, language as well as window and screen size, the reading time, the scroll depth, which sections of a page became visible and at which point you left the page, plus country, region and city derived from your IP address. Nothing is stored on or read from your device in the process. Your IP address is not stored: it is turned into a hash using a random value that changes daily, and the address itself is discarded. Recognising you beyond that day is therefore impossible. The legal basis is our legitimate interest in a meaningful measurement of our own offering (Art. 31(1) revDSG, Art. 6(1)(f) GDPR).
Only with your consent
In addition we store a random value in your browser's local storage in order to recognise returning visits and evaluate your path across several visits as a whole, we attribute your network address to an organisation, usually the company or institution whose connection you are using, and we store your IP address for 30 days. The legal basis is your consent (Art. 6(1)(a) GDPR, Art. 6(6) revDSG).
You may withdraw this consent at any time under “Privacy settings” in the footer. We then delete the random value in your browser and the measurement continues anonymously; processing that took place before the withdrawal remains lawful.
You may object to the anonymous measurement at the first level at any time; an email to datenschutz@solvea.ch is enough. We delete the individual measurement records after 90 days. The aggregated figures derived from them allow no reference to individual people and are kept.
Contact form
The form transmits your name, email address, optionally your company, a subject and your message. The request is processed by a Microsoft service in Switzerland and sent as an email to our mailbox, which is also hosted by Microsoft. It is not stored in our database. The purpose is answering your enquiry; the legal basis is handling a pre-contractual request (Art. 6(1)(b) GDPR) and your contacting us under revDSG. Email address and message are mandatory; without them we cannot reply.
Newsletter
When you subscribe we store your email address, the chosen language, which form the subscription came from, a confirmation key and a non-reversible hash of your IP address as proof of the subscription. The subscription only takes effect once you confirm it by email (double opt-in). Storage is in a Google database in Switzerland. The legal basis is your consent (Art. 6(1)(a) GDPR, Art. 6(6) revDSG).
You may withdraw your consent at any time and without giving reasons: use the unsubscribe link in any message or send an email to datenschutz@solvea.ch. Processing that took place before the withdrawal remains lawful.
Protecting the forms
To keep machines from abusing our forms we check submissions with a Cloudflare service. The check starts only when you touch a field of a form or submit it, so simply reading a page opens no connection to Cloudflare. Cloudflare then receives your IP address and technical characteristics of your browser. We also count submissions per sender; for that we store a hash of the IP address for at most 24 hours. The legal basis is our legitimate interest in preventing abuse (Art. 31(1) revDSG, Art. 6(1)(f) GDPR).
External content in articles
Some articles contain price charts from TradingView or videos from YouTube. This content does not load by itself. A placeholder appears instead, and only your click opens the connection to the provider, which then receives your IP address, details about browser and device and the page you are on, and may set its own cookies. The legal basis is your consent (Art. 6(1)(a) GDPR). You can change it at any time under “Privacy settings” in the footer.
Cookies and local storage
We set no cookies for advertising and embed no external analytics service. What we do use:
- lb-consent-v3 (local storage): your decision about external content and statistics. Stays until you change it or clear your browser storage.
- lb-analytics-vid (local storage): only after you consent to statistics. A random value used to recognise returning visits. Deleted when you withdraw consent.
- lb-analytics-sid (session storage): only after your consent to statistics. A random value that keeps the pages of one visit together, even if you reload a page. Deleted when you close the tab and when you withdraw consent.
- Sign-in data for the editorial area (local storage): only for signed-in staff, not for visitors.
Editorial area
Editing and administration happen in a closed area with sign-in via a Google service. There we process name, email address, role and last sign-in of the authorised persons. No processing arises from this for visitors of the website.
Recipients and processors
Apart from the parties listed here we pass on no data. There is no sale and no disclosure for advertising purposes.
| Provider | Purpose | Place of processing |
|---|---|---|
| Google Ireland Limited / Google LLC | Website delivery, database for articles and newsletter, sign-in for the editorial area | Database in Switzerland, delivery via global network, group headquarters USA |
| Microsoft Ireland Operations Limited / Microsoft Corporation | Form processing, image storage, usage measurement, email mailbox | Switzerland, group headquarters USA |
| Cloudflare, Inc. | Defence against automated form submissions, only when a form is used | Global network, based in the USA |
| TradingView, Inc. | Price charts in articles, only after your consent | USA |
| Google Ireland Limited (YouTube) | Videos in articles, only after your consent | Global network, group headquarters USA |
For Google, Microsoft and Cloudflare the respective data processing terms apply, which form part of the contract when using their services. For embedded content, TradingView and YouTube act as controllers in their own right; their own privacy policies apply to that processing.
Disclosure abroad
Database, form processing and image storage are located in Switzerland. Since the providers named belong to groups headquartered in the USA, access from abroad cannot be ruled out. This is covered by the EU standard contractual clauses including their Swiss addenda and, where providers are certified, by the EU-US Data Privacy Framework and its Swiss extension. For countries with an adequate level of protection under Annex 1 of the Swiss Data Protection Ordinance no additional safeguards are required.
Retention and deletion
- Contact enquiries: up to 12 months after the correspondence ends, in our mailbox.
- Unconfirmed newsletter subscriptions: 30 days, then deleted automatically.
- Confirmed newsletter subscriptions: until you withdraw consent.
- Unsubscribed addresses: 12 months as proof of the unsubscription, then deleted automatically.
- Abuse counters containing an IP hash: at most 24 hours.
- Individual usage measurement records: 90 days, then deleted automatically.
- IP address from the usage measurement, only where consent was given: 30 days.
- Aggregated figures from the usage measurement: indefinitely, with no reference to individual people.
- Access logs of the host: according to Google's schedule, without access on our side.
- Data subject to statutory retention, such as accounting records: 10 years.
Your rights
You have the right to access, rectification, deletion and restriction of processing, to receive or transfer your data, to object to processing based on a legitimate interest, and to withdraw consent you have given. An email to datenschutz@solvea.ch is enough; for your protection we may ask you to prove your identity. Access is free of charge.
Right to complain
You may complain to a supervisory authority at any time. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch. If you live in the EU or EEA you may contact the supervisory authority of your place of residence or work.
Security
The website is delivered over HTTPS only. A strict Content Security Policy limits which sources the browser may load. Access to the editorial area is restricted to named persons and requires a sign-in.
Changes
If our technology or the providers we use change, we update this policy. The version published here is the one that applies.
Last updated: 29 August 2026