Privacy Policy

1. Data controller

The controller responsible for personal data processed in connection with this website is:

B.U.Y. INVEST GmbH
Gstalderstrasse 10, 8134 Adliswil, Canton of Zurich, Switzerland
Email: info@buyinvest.ch

The firm has not appointed a formal Data Protection Officer because such an appointment is not required under the revDSG given the nature and scope of our processing. The address info@buyinvest.ch is the single contact point for all privacy matters.

2. What data we collect

Email and contact form

When you contact us by email or via any contact form, we receive your name, your email address, the content of your message, and any further information you choose to share voluntarily.

Server logs

Our hosting provider, Vercel Inc., automatically records technical information about each request to our website: IP address, user-agent string, timestamp, requested path, and HTTP response status. These logs are retained by Vercel for approximately 30 days and are used for security monitoring and operational purposes.

No analytics, no marketing

This website does not use any analytics tracking (no Google Analytics, no Plausible, no Matomo, no PostHog, no equivalents). It does not set marketing or advertising cookies. It does not embed third-party tracking pixels.

Browser storage

The site uses browser storage strictly for site functionality:

• AccessGate state — stored in sessionStorage under the keys buyinvest_access and buyinvest_investor_type. These record that you have self-classified as a professional or institutional investor for the duration of your browser session and are cleared when you close the browser.
• Language preference — stored in localStorage under the key buyinvest-lang. Retained until you clear your browser data.

See our Cookie Policy for further detail.

3. Legal bases

We process personal data on the following legal bases:

• Performance of a contract / pre-contractual measures (Article 31(2)(a) revDSG; Article 6(1)(b) GDPR) — when you contact us with an inquiry or otherwise initiate communication that may lead to a business relationship.
• Legitimate interest (Article 31(2)(d) revDSG; Article 6(1)(f) GDPR) — for the security and operational integrity of our website, including server logs.

4. Third-party data processors

We engage the following processors who handle personal data on our behalf:

• Vercel Inc. (United States) — website hosting and global edge delivery. Vercel processes server logs and serves all static and dynamic content. Privacy notice: vercel.com/legal/privacy-policy.
• Microsoft Corporation — Microsoft 365 / Outlook for the info@buyinvest.ch mailbox. Microsoft processes inbound and outbound email content and metadata. Privacy notice: privacy.microsoft.com.
• GoDaddy.com LLC — DNS registrar for the buyinvest.ch domain. GoDaddy processes administrative contact data associated with the domain. Privacy notice: godaddy.com/legal/agreements/privacy-policy.

5. International transfers

Vercel and Microsoft process personal data in the United States. Where data is transferred outside Switzerland or the European Economic Area, we rely on the EU Standard Contractual Clauses (SCCs) and, for transfers to U.S. recipients certified under the program, the EU-US Data Privacy Framework. The Swiss Federal Council has recognised both Vercel's and Microsoft's underlying U.S. operations as providing an adequate level of data protection in their certified scope.

6. Retention

Email correspondence and contact-form submissions are retained for as long as needed to handle the conversation, and then for 12 months after the final correspondence, after which they are deleted unless we are legally required to retain them longer (for example, under accounting or anti-money-laundering obligations). Server logs are retained by Vercel for approximately 30 days.

7. Your rights

Under the revDSG (Articles 25-31) and the GDPR (Articles 15-22), you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data, subject to retention obligations;
• request restriction of processing;
• request portability of data you have provided;
• object to processing carried out on the basis of legitimate interest;
• lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch or, for EU-based data subjects, with your local supervisory authority.

8. How to exercise your rights

Send your request to info@buyinvest.ch. We will respond within 30 days. We may ask you for additional information to verify your identity before disclosing personal data.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the services we use, or in applicable law. Material changes will be reflected in the "Last updated" date below. The version published on this page is always the current version.