Privacy Statement

This privacy notice explains how MEVB Consulting GmbH (“MEVB”, “we” or “us”) collects and processes personal data in connection with this website, enquiries and our business relationships. “Personal data” means information relating to an identified or identifiable individual.

We process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and its implementing ordinance. Additional notices may apply where a specific service or project requires different processing.

If you provide us with personal data about another person, please ensure that you are authorised to do so, that the information is accurate and that the person has been informed about this notice.

1. Controller

The controller responsible for the processing described in this notice is:

MEVB Consulting GmbH
Hübelistrasse 28
4603 Olten

Contact us

Please use these details for questions about data protection or to exercise your rights.

2. Personal data and sources

When you visit this website, the web server processes technical connection data such as your IP address, the date and time, the requested page, the referring page, browser and operating-system information and the response status. We receive this data from your device.

If you contact us, we process the information you provide, including your name, contact details, message and subsequent correspondence. In business relationships, we process identification and contact details, professional role, contract and project information, communications, billing and payment information, and records required to provide our services or meet legal obligations.

We usually receive data directly from you or from the organisation for which you work. Where necessary for a business relationship, we may also receive professional contact and company information from business partners, authorities or publicly accessible sources such as commercial registers and company websites.

3. Processing purposes

We process personal data to provide and secure this website, respond to enquiries, prepare, conclude and perform contracts, deliver consulting and project services, manage suppliers and business partners, administer and document our business, issue and pay invoices, comply with legal obligations, and establish, exercise or defend legal claims.

Where we ask for consent for a specific activity, you may withdraw it at any time with effect for the future. We do not use automated individual decision-making or high-risk profiling on this website.

4. Website, cookies and external links

The website and email service are hosted by our current hosting provider in Switzerland. Server log data is processed to deliver the requested content, maintain security and diagnose faults.

Our public pages do not use analytics, advertising or newsletter tracking and do not load the Google Maps API. We do not currently set non-essential cookies on these pages. If this changes, we will update this notice and provide the controls required by applicable law.

The contact page contains a static map and an external directions link to Google Maps. The footer contains an external link to LinkedIn. Google and LinkedIn receive data from your browser only after you choose to follow the relevant link and leave our website. Their own privacy notices then apply.

5. Recipients

We disclose personal data only where this is necessary for the stated purposes. Recipient categories may include our Swiss hosting and IT providers, banks and payment-service providers, professional advisers, suppliers and subcontractors involved in a project, clients and business partners, and competent authorities or courts where disclosure is required or permitted by law. We do not sell personal data.

Processors may use personal data only for the agreed purposes and must provide appropriate data security.

6. Disclosures abroad

The website and email systems described above are hosted in Switzerland. We do not automatically disclose website visitor data to Google Maps, analytics or advertising providers.

If a specific project requires personal data to be disclosed abroad, we inform the affected person about the destination country and, where required, the applicable safeguard or exception before the disclosure. We disclose data to a country without an adequate level of protection only where an appropriate safeguard under Article 16 FADP applies or a specific exception under Article 17 FADP is available.

7. Retention

We retain personal data only for as long as it is required for the relevant purpose, the business relationship and applicable legal retention or documentation obligations, or for as long as claims may be asserted. Enquiry data is retained for as long as needed to respond and document the matter. Contract, project and accounting records are retained in line with the applicable statutory periods. Operational data such as server logs is generally retained for no longer than twelve months. Data that is no longer required is deleted or anonymised where possible.

8. Data security and provision of data

We and our processors use technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, misuse, alteration and disclosure. These measures are reviewed and adapted where appropriate. Internet communications cannot, however, be guaranteed to be completely secure.

You are generally not legally required to provide personal data to us. Technical connection data is necessary to deliver the website. Information required to enter into or perform a contract must be provided if you wish to use the relevant service; without it, we may be unable to respond, conclude the contract or provide the service.

9. Your rights

Subject to the conditions and limits of applicable law, you may request information about whether we process personal data about you, access that data, have inaccurate data corrected, object to processing, or request deletion or destruction. You may also request the release or transfer of personal data in a commonly used electronic format where the statutory conditions for data portability are met.

Requests for information are generally free of charge and are normally answered within 30 days. We may ask for information needed to verify your identity and may restrict or refuse a request where permitted by law. Please send requests to the controller details in section 1.

You may enforce your rights before the competent civil court. If you believe that data protection law has been infringed, you may also submit a report to the Federal Data Protection and Information Commissioner (FDPIC). The FDPIC decides independently whether to open an investigation.

10. Amendments to our privacy policy

We may amend this privacy notice when our processing activities or the legal requirements change. The current version published on this website applies. Material changes will be identified by an updated effective date.