Privacy notice

Controller and contact

AquaSands AG, c/o Kaurum GmbH, Hasenbüelweg 32, 6300 Zug, Switzerland, UID CHE-450.964.623; contact@aquasands.net; +41 77 981 72 76. This notice covers aquasands.net and client work. Banks, authorities and local professionals acting independently give their own notices.

Information and sources

We receive contact information and correspondence, voluntarily submitted form answers, technical browsing data, identity and address evidence, corporate and ownership documents, beneficial ownership statements, business, residence, income and source-of-funds information, engagement material and billing records. A client sharing another person's data should give that person this notice where reasonably possible.

Your answers to the diagnostic stay in your browser and reach us only when you send your request. When the booking page opens, it asks our server for free slots; the server then reads your IP address, in a local database, to suggest your time zone, without keeping it for that purpose. If you arrived through a campaign or an introducer's recommendation, that origin is kept in your browser for ninety days and attached to your request.

Purposes

We answer enquiries, quote and contract, verify identity and compliance risk, decide whether to accept work, perform and document services, coordinate specialists, invoice, keep necessary evidence and protect legal claims. Electronic prospecting or targeted advertising is carried out only if actually enabled and lawful; none is at the date of this version. A verification tool may produce alerts, but a person reviews onboarding decisions under the internal procedure.

Recipients and international transfers

Where needed, authorised staff, our hosting, email, video, transcription, signing and billing providers, the local professionals needed for the matter, and the competent banks, registries and authorities may receive data.

The public site is served by GitHub Pages (United States) and receives no form data. Requests, the client area and uploaded documents are received and stored on our server in Switzerland (Infomaniak); documents are encrypted on arrival. The emails we send you go through a delivery provider based in the United States. When you consent to a meeting being recorded, its transcription and the assistance given to the adviser during the call may use services based in the United States. Not all data therefore stays in Switzerland.

Before sending data to a country without adequate protection we assess suitable contractual safeguards or a lawful exception, minimise what is shared and provide the required information about countries and safeguards under the Swiss Federal Act on Data Protection (FADP). The engagement states recipient categories and known countries; provider identities are kept internally and disclosed where required by law. We neither sell nor rent your data.

Retention

Enquiries that do not lead to an engagement are kept for as long as needed to follow them up, subject to objection, evidence needs and disputes; you may ask for their deletion at any time. Engagement files and invoices are retained for the applicable legal periods and the time reasonably needed for claims. Identification records subject to a specific legal duty follow that duty and its lawful start date; other documents are deleted when no longer necessary.

Audio recordings of a meeting are deleted after ninety days, their transcripts after two years. Backup copies of our database rotate over thirty days.

Security and rights

Access is limited by role. Sensitive documents are uploaded to your client area, where they are encrypted on arrival; please do not send identity documents or financial records by unencrypted email.

Individuals may request access, correction, deletion, restriction or objection where legally available, and information about transfers. Applicable retention duties or overriding lawful interests may limit deletion. Write to contact@aquasands.net; reasonable identity evidence may be requested. Complaints may be made to the Swiss Federal Data Protection and Information Commissioner (FDPIC), subject to other competent authorities where applicable.

Cookies and updates

The public site uses the Google Ads tag (Google Ireland Limited, Dublin, and Google LLC, United States) to measure how well our ads work: how many visitors coming from an ad send a request. It is loaded from googletagmanager.com. Without your consent it sets no advertising cookies (Google consent mode: everything refused by default); with your consent, Google may set its measurement and advertising cookies. You are asked on your first visit and can change your choice at any time: change my choice. No other analytics; fonts are hosted on the site. Your browser keeps only your preferences there (currency, time zone), the origin described above and, if you have started a questionnaire, your answers — without your contact details. The client area and the meeting room use a technical session cookie, needed to sign in; the meeting room loads the video library from the jsDelivr content network.

Any other analytics or advertising will require updated disclosure and, where necessary, a choice before placement. Material changes and the effective date will appear on this page.