Privacy Policy
1. Controller
The controller responsible for processing personal data on this website is:
CEO.CH
Alexander Baum
c/o RA Matutis
Rheinstrasse 71
CH-7012 Felsberg
Switzerland
Email: [email protected]
Phone: +41 43 200 22 22
EU representative (Art. 27 GDPR):
Kanzlei Matutis
Berliner Strasse 57
D-14467 Potsdam
Germany
Email: [email protected]
2. Scope and legal framework
This privacy policy explains which personal data we process when you visit www.ceo.ch or contact us, for what purposes and on what legal basis. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). The platforms LuxuryBroker.com, Immoz.ch and Asset.ch have their own privacy policies, which apply exclusively to their use.
3. Visiting this website (server log files)
Each time you access this website, our hosting provider in Switzerland automatically records technical data that your browser transmits: IP address, date and time of the request, page requested, referring page, HTTP status code, amount of data transferred, browser type and operating system. We need this data to deliver the website, to ensure its security and stability and to investigate misuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log data is retained only as long as necessary for these purposes, as a rule no longer than 30 days, unless a specific incident needs to be investigated.
4. Content delivery and protection (Cloudflare)
To protect this website against attacks and to deliver it quickly, we use the services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Requests to this website are routed through Cloudflare’s network, which processes the technical data listed in section 3, in particular your IP address. Cloudflare acts as our processor. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, and its data processing addendum additionally includes standard contractual clauses. The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Further information: cloudflare.com/privacypolicy.
5. Contact form and email
If you contact us via the form or by email, we process the details you provide (name, company, email address, phone number, topic and message) to answer your enquiry and handle any follow-up. Form submissions are sent to our mailbox by email; they are not stored in a database on the website. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).
To prevent abuse of the form, we temporarily store a pseudonymised (hashed) form of your IP address together with the time of submission. This data is deleted automatically after 24 hours at the latest.
We keep correspondence for as long as necessary to deal with your enquiry. Business correspondence may be subject to statutory retention obligations of up to ten years (Art. 958f Swiss Code of Obligations).
6. Cookies and local storage
We do not use tracking, analytics or advertising cookies. Only two strictly necessary settings are stored in your browser: your choice of light or dark mode (local storage, key “theme”) and your language choice (cookie “lang”, valid for one year). Both stay on your device and are not used to identify you. You can delete them at any time in your browser settings.
7. No third-party content
This website loads no content from third parties: fonts and images are hosted on our own server, and we use no social media plugins, maps or video embeds. Links to our platforms and other websites only transmit data to them once you click them.
8. Disclosure and transfer abroad
We do not sell your data and only disclose it to service providers that process it on our behalf (hosting, email and Cloudflare) or where we are legally obliged to do so. Where data is processed outside Switzerland or the EEA, we ensure an adequate level of protection, in particular through recognised adequacy decisions or standard contractual clauses.
9. Data security
We protect your data with appropriate technical and organisational measures, including encrypted transmission (HTTPS/TLS), restrictive access rights, current software and protection of the contact form against misuse.
10. Your rights
Within the scope of the applicable law, you have the right to access your personal data and to have it rectified, erased or restricted; to object to processing; to receive your data in a portable format; and to withdraw any consent given, with effect for the future. To exercise your rights, write to [email protected]. We may ask for proof of identity.
You also have the right to lodge a complaint with a supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch), in the EU the authority of your place of residence.
11. Automated decisions
We do not use automated individual decision-making or profiling.
12. Changes
We may update this privacy policy when our website or the legal situation changes. The version published on this page applies.