data protection

Privacy policy – What is it all about?

VERUS Advisory AG (hereinafter also referred to as "we") collects and processes personal data relating to you or third parties (hereinafter referred to as "third parties"). The term "data" is used in this statement as synonymous with "personal data."

When and how is your data processed?

This privacy policy explains how we handle your data, especially when you:

  • our website www.verus-advisory.ch .

  • use our products or services,

  • are contractually associated with us,

  • communicate with us or

  • interact with us in other ways.

Should data processing take place that is not listed in this statement, we will inform you of this separately and in good time.

What are the applicable legal principles?

This privacy policy is based on the requirements:

  • the EU General Data Protection Regulation (GDPR),

  • of the Swiss Data Protection Act (DSG) and

  • of the revised Swiss Data Protection Act (revDSG).

Should any contradictions arise between this privacy policy and the otherwise applicable contractual or business terms and conditions of VERUS Advisory AG with regard to data protection issues, the provisions of this privacy policy shall take precedence.

Data protection - Responsibility

The entity responsible for the data processing described in this privacy policy is:

VERUS Advisory AG
Zürichstrasse 98
8600 Dübendorf
Switzerland

(unless otherwise specified in individual cases).

Contact for data protection concerns:

If you have any questions about data protection, please contact us at:

VERUS Advisory AG
Zürichstrasse 98
8600 Dübendorf
Switzerland

info@verus-advisory.ch

Definitions of terms

To ensure that our privacy policy is easy to understand, we explain the most important terms used below.

Personal data
Personal data is any information relating to an identified or identifiable natural person (the "data subject"). A person is considered identifiable if they can be identified directly or indirectly, for example by name, location data, an online identifier, or special characteristics such as their genetic, economic, or social identity.

Data subject
This is any natural person whose personal data is processed—e.g., customers, employees, or website visitors.

Processing of data
Processing is understood here to mean any operation in connection with personal data, regardless of whether it is automated. This includes, for example, the collection, storage, adaptation, retrieval, transmission, deletion, or restriction of data.

Restriction of data processing
This means that stored personal data is marked to restrict its future processing.


profiling Profiling refers to the automated analysis of personal data in order to analyze and evaluate certain personal characteristics of an individual—e.g., preferences, behavior, locations, or economic situation.

Pseudonymization
This involves processing personal data in such a way that it can no longer be attributed to a specific person without additional information. This additional information is stored separately and protected so that it cannot be attributed to a natural person.

Consent
Consent is the voluntary, informed, and unambiguous agreement of the data subject to the processing of their personal data.

Duration of data storage

We only store your personal data for as long as is necessary to achieve the purpose for which it was collected or as required by statutory retention obligations.

Your rights as a data subject

As a data subject, you have various rights regarding your personal data. These rights include:

Right to confirmation
You have the right to know whether we process your personal data.

Right to information
You can request information about the personal data we store about you at any time, free of charge. This includes information such as:

  • Processing Purposes

  • Categories of data

  • Recipients or categories of recipients

  • Planned storage periods

  • Your rights to rectification, erasure, and objection

Right to rectification
If your data is inaccurate or incomplete, you can request that it be corrected.

Right to erasure
In certain cases, you may request the erasure of your personal data, e.g., if it is no longer needed or has been processed unlawfully.

Right to restriction of processing
In certain situations, you may request that we restrict the processing of your data.

Right to object
As a data subject affected by the processing of personal data, you have the right to withdraw your consent to the processing of personal data at any time within the framework of contractual and legal agreements.

Legal basis for data processing

The processing of personal data in our company is based on the Swiss Data Protection Act (DSG) or, where applicable, Art. 6 I lit. a DS-GVO of the General Data Protection Regulation (DS-GVO).

Processing based on consent
If we process personal data for a specific purpose and obtain the consent of the data subject for this purpose, the processing is carried out in accordance with the Swiss DSG or, if applicable, in accordance with Art. 6 1 lit. a DS-GVO.

Processing for the performance of a contract or in order to take steps prior to entering into a contract
If processing is necessary for the performance of a contract to which the data subject is party—e.g., for the delivery of goods or the provision of a service—it is carried out on the basis of the Swiss FADP or Art. 6(1)(b) GDPR.
The same applies to processing operations that are necessary for the implementation of pre-contractual measures, such as inquiries about our products or services.

Processing based on legal obligations
If our company must comply with a legal obligation that requires the processing of personal data—for example, to fulfill tax obligations—the processing is based on the Swiss DSG or, where applicable, on Art. 6 1 lit. c GDPR.

Processing to protect vital interests
In exceptional cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person.
An example of this would be a medical emergency at our company. In such cases, processing is carried out on the basis of the Swiss DSG or Art. 6 1 lit. d GDPR.

Processing to safeguard legitimate interests
In certain cases, processing is carried out to safeguard a legitimate interest of our company or a third party—provided that the interests, fundamental rights, and freedoms of the data subject do not prevail. Here, too, the Swiss FADP or, where applicable, Art. 6 1 lit. f GDPR serves as the legal basis.

Purpose of processing personal data

At VERUS Advisory AG, personal data is processed for various reasons. These processing purposes can be divided into different categories. We process personal data in whole or in part for one or more of the following purposes:

  • Processing purposes in connection with our goods and services offerings

  • Processing purposes in connection with the implementation of customer projects as a processor

  • Processing purposes in connection with customer communication

  • Processing purposes related to the analysis of customer behavior

  • Processing purposes related to direct marketing

Disclosure of personal data

Personal data may be passed on to companies affiliated with VERUS Advisory AG . These companies may process the data for the same purposes as we do, in particular for the analysis of customer behavior and direct marketing. Access to personal data within these companies is only granted to the extent necessary for the performance of the respective tasks.

In addition, personal data may be passed on to third-party providers who are necessary for the provision of technical or organizational services to support our business activities. These service providers are contractually obliged to process personal data only in accordance with our instructions and for the specified purposes. They must ensure that data protection is guaranteed.

Personal data may also be disclosed if this is necessary to comply with legal requirements or in the context of legal proceedings in order to protect the rights of VERUS Advisory AG.

Collection of general data and information

VERUS Advisory AG collects personal data when a data subject contacts us. This occurs in the following cases:

  • Visiting our business premises or providing personal data for future cooperation

  • Purchase of goods or services at our business premises or on our website

  • Use of our services

  • Participation in events, seminars, or training courses

  • Communication by telephone or electronic means of communication

Our website collects general data and information each time it is accessed, which is stored in the server's log files. This information includes:

  • Browser type and version used

  • Operating system of the accessing system

  • Referrer (the website from which access is made)

  • Accesses to subpages of our website

  • Date and time of access

  • IP address of the accessing system

  • Internet service provider of the system

This anonymous data helps us to optimize our website, ensure the security of our systems, and guarantee the functionality of our services.

Contact via the website

Our website contains legally required information that enables quick electronic contact, including an email address. If a data subject contacts us by email or via a contact form, the personal data transmitted is automatically stored. This data is used exclusively for contact purposes and is not passed on to third parties.

Newsletter VERUS Advisory AG

Users can subscribe to our newsletter on the VERUS Advisory AG website. The personal data collected in this process is listed below.

  • Registration and confirmation
    To receive our newsletter, the data subject must:

  • Have a valid email address

  • Sign up for the newsletter

After registration, a confirmation email will be sent to the email address of the person concerned. This confirmation serves to ensure that the owner of the email address has expressly authorized the receipt of the newsletter.

Additional data during registration
In addition to your email address, we also store the IP address of your Internet service provider (ISP) and the date and time of registration. This information is used for legal protection purposes.

Use of data
We use the personal data collected during newsletter registration exclusively for the purpose of sending the newsletter. Subscribers may also be notified by email in the event of changes to the newsletter offering or technical adjustments. The data will not be passed on to third parties.

Unsubscribing and revoking consent
The data subject may unsubscribe from the newsletter at any time and revoke their consent to the storage of their personal data. Each newsletter contains a link to unsubscribe. Alternatively, the data subject may unsubscribe directly on our website or by other means.

Newsletter tracking
The newsletters from VERUS Advisory AG contain technical methods that allow us to evaluate the opening and use of the newsletter. These methods enable us to obtain information such as:

  • When and how often an email was opened.

  • Which links in the email were clicked, including the times and frequency of openings.

Purpose of tracking
The data collected through tracking helps us measure the success of our marketing campaigns and tailor the newsletter content to the interests of the recipients. This personal data is not shared with third parties.

Withdrawal of consent
The data subject may withdraw their consent to tracking at any time. After withdrawal, all personal data will be deleted. Unsubscribing from the newsletter also constitutes withdrawal of consent to tracking.

Use of cookies

Our website uses cookies —small text files that are stored on a user's device to facilitate and optimize the use of the website.

Purpose of cookies
Cookies enable us to provide users with a more user-friendly experience by:

  • Recognized to facilitate access (e.g., storage of login data or shopping cart contents).

  • To analyze the use of our website in order to continuously improve it.

Types of cookies

  • Necessary cookies: Required for the operation of certain features on the website.

  • Analytics cookies: Help us understand and improve the use of our website.

Deactivation and deletion of cookies
Users can deactivate the storage of cookies at any time in their browser settings or delete cookies that have already been stored. Please note, however, that if you deactivate cookies, you may not be able to use all the functions of our website to their full extent.

Data protection for job applications

VERUS Advisory AG collects and processes personal data from applicants as part of the application process. This may also be done electronically, for example when applications are submitted by email or via a web form on our website.

Storage and use of applicant data
We collect and process applicants' personal data for the purpose of handling the application process. Processing may also be carried out electronically. The data transmitted will be stored for the purpose of handling any subsequent application procedures and for sending further information in compliance with the statutory provisions. Unless the parties concerned actively object, we assume their consent in this regard.

Privacy policy regarding the use of Google Analytics, Google AdWords, LinkedIn, and Xing

Google Analytics (with anonymization function)
VERUS Advisory AG uses the web analytics service Google Analytics on its website to analyze user behavior and optimize the website. Google Analytics collects data about how visitors arrive at the website, which pages they visit, and how long they stay on them. This information helps us to improve the user experience and deliver targeted online advertising.

Use of Google Analytics:

  • Google Analytics uses cookies to collect information about how the website is used.

  • The "_gat._anonymizeIp" function anonymizes the IP address of visitors accessing the website from the EU or the European Economic Area.

  • This collected data is transmitted to Google in the USA and stored there.

Preventing data collection:

  • Users can disable the use of cookies in their browser at any time.

  • Alternatively, users can download and install the Google Analytics opt-out browser add-on to prevent data collection by Google Analytics.

For more information about data processing by Google Analytics, please refer to the Google Privacy Policy.


Google AdWords
VERUS Advisory AG uses Google AdWords to display targeted advertising in Google search results and on the Google advertising network. When users click on an AdWords ad, a cookie (conversion cookie) is set that tracks interaction with the website and enables us to measure the effectiveness of our ads.

Use of Google AdWords:

  • A conversion cookie is set when a user arrives at the website via an AdWords ad.

  • The collected data helps us determine the number of users who came to our site through an AdWords ad and evaluate the ad's performance.

Preventing data collection:

  • Users can disable cookies in their browser settings.

  • You can also disable interest-based advertising by Google in your Google Ads settings.

For more information about data processing by Google AdWords, please refer to the Google Privacy Policy.


LinkedIn
Our website uses components from LinkedIn Corporation to enable users to share content on LinkedIn and interact with their network. LinkedIn may collect information about which pages of the website you visit, especially if you are logged into your LinkedIn account at the same time.

Using LinkedIn:

  • When you click on a LinkedIn button, this information is linked to your LinkedIn profile and stored.

  • LinkedIn also receives data about your visit to our website if you are logged into LinkedIn at the time.

Preventing data collection:

  • You can prevent LinkedIn from collecting data by logging out of your LinkedIn account before visiting the website.

For more information about data processing by LinkedIn, please refer to the LinkedIn Privacy Policy.


Xing
Our website also integrates components from Xing, a social network for professional contacts. If you use the Xing components or click on a Xing button, certain information about your user behavior will be collected, especially if you are logged in to Xing.

Using Xing:

  • When you click on a Xing button, this information is linked to your Xing profile and stored.

  • Xing receives information about your visit to our website if you are logged into your Xing account at the same time.

Preventing data collection:

  • To prevent data from being transmitted to Xing, please log out of your Xing account before visiting our website.

For more information on data processing by Xing, please refer to the Xing privacy policy.

log files

When you visit the VERUS Advisory AG website, the web server stores certain log information in a log file. This data includes:

  • The URL accessed

  • Date and time of access

  • The status of access

  • The amount of data transferred

  • The website from which the user accessed our site (known as the "referrer")

  • The HTTP/HTTPS status

We use these log files exclusively for statistical purposes, to improve the website, to ensure system security (e.g., prevention of misuse), and for error diagnosis.

Data Security

VERUS Advisory AG takes appropriate technical and organizational measures to ensure the security of your personal data and prevent unauthorized access, misuse, and loss of your data.

These safety precautions include:

  • Internal training and instructions on data protection

  • Use of IT and network security solutions

  • Access controls and restrictions

  • Encryption of data carriers and data transfers

  • Pseudonymization of data and regular security checks

Dübendorf, April 20, 2025