Legal

Privacy Policy

Last updated: 10 April 2026

This Privacy Policy explains how Sovren SA ("Sovren", "we", "us") collects, uses, and protects personal data when you visit our website sovren.ch (the "Website").

1. Data Controller

Sovren SA Geneva, Switzerland Contact: sovren.ch/contact

2. Legal Framework

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/nDSG) and, where applicable, the European Union General Data Protection Regulation (GDPR).

3. Data We Collect

Server Log Data When you visit the Website, our servers automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and data volume transferred. This data is processed for security purposes and to ensure the proper functioning of the Website. Contact Data If you contact us via email or a contact form, we collect the information you provide (name, email address, message content). This data is processed to respond to your inquiry. Cookies and Tracking Technologies This Website uses technically necessary cookies to ensure proper functioning. We also use Google Analytics to analyse website traffic and improve our services. Google Analytics uses cookies to collect anonymised usage data, including pages visited, session duration, and approximate geographic location. This data is processed by Google LLC and may be transferred to servers in the United States. Google is certified under the EU–US Data Privacy Framework. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. This data is processed based on our legitimate interest in understanding and improving the Website (Art. 31 FADP / Art. 6(1)(f) GDPR).

4. Legal Basis for Processing

We process personal data on the following legal bases: • Legitimate interest (Art. 31 FADP / Art. 6(1)(f) GDPR): server log data for security and Website operation; analytics data for Website improvement. • Consent (Art. 6(1)(a) GDPR): where you have given explicit consent, for example by submitting a contact form. • Contract performance (Art. 6(1)(b) GDPR): where processing is necessary to respond to your request.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties, except: • To service providers who assist in operating the Website (e.g., hosting provider, Google Analytics), bound by contractual data protection obligations. • Where required by law or to comply with legal proceedings.

6. International Data Transfers

Our Website is hosted in Switzerland. Google Analytics data may be transferred to servers operated by Google LLC in the United States. Google is certified under the EU–US Data Privacy Framework, and we rely on standard contractual clauses and adequacy decisions where applicable to ensure appropriate safeguards for any data transferred outside Switzerland or the EEA.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Server log data is retained for 30 days. Google Analytics data is retained in accordance with Google's standard retention settings. Contact form data is retained for the duration of the correspondence and 12 months thereafter.

8. Your Rights

Under the FADP and, where applicable, the GDPR, you have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data, subject to legal retention obligations. • Restrict or object to certain processing activities. • Request data portability. • Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal. • Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if applicable, a supervisory authority in the EU. To exercise any of these rights, contact us via our contact form.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11. Contact

For questions regarding this Privacy Policy or our data processing practices: Sovren SA Geneva, Switzerland Contact: sovren.ch/contact