Privacy Policy
How Aramas GmbH (trading as Aramas Wealth) handles personal data on this website. Compliant with the Swiss Federal Act on Data Protection (revFADP, in force 1 September 2023) and the EU General Data Protection Regulation (GDPR) where it applies to visitors located in the EEA.
Data controller
Aramas GmbH, Niederhofenrain 29, 8008 Zürich, Switzerland (commercial register CH-020.4.062.302-5, UID CHE-312.534.853), trading as Aramas Wealth, is the data controller for personal data processed in connection with this website. For privacy enquiries, contact us at the address below.
Categories of personal data we process
We process only what we need to operate this website and respond to your enquiries:
- Contact-form submissions: name, work email, company, role, inquiry type, and the message body you submit — provided voluntarily by you.
- Server / access logs: source IP address, user-agent string, requested URL, response status, and timestamp — retained for security, performance, and abuse detection.
- Cookies and similar technologies: see our Cookie Policy. We do not place advertising or cross-site tracking cookies on this site.
Purposes and legal bases
Contact-form data is processed to respond to your enquiry (Art. 31 para. 2 lit. a revFADP / Art. 6(1)(b) GDPR — pre-contractual and contractual measures). Server logs are processed on the basis of our legitimate interest in operating, securing, and improving the website (Art. 31 para. 1 revFADP / Art. 6(1)(f) GDPR). We do not sell or rent personal data.
Recipients and storage location
Personal data submitted via this website is processed on infrastructure operated by Aramas GmbH in Switzerland. The reverse-proxy and CDN front-end is operated by Cloudflare, Inc., which may temporarily process technical request metadata at edge locations outside Switzerland for connection acceleration and DDoS protection. Where data is processed outside Switzerland or the EEA, we rely on the appropriate transfer mechanisms (Swiss-EU adequacy, EU Standard Contractual Clauses, or equivalent).
Retention
Contact-form data is retained until the enquiry is resolved plus 12 months for legitimate follow-up. Server logs are retained for 30 days. Tax-relevant correspondence is retained for the statutory 10-year period required by Art. 958f Swiss Code of Obligations.
Your rights
You have the right to access, rectify, or delete personal data we hold about you, to restrict or object to processing, and to data portability. To exercise these rights, contact us in writing. We respond within 30 days. Identity verification may be requested for security purposes.
Supervisory authority
If you believe we have not handled your data correctly, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland — or, for EEA residents, with your national data-protection authority.