Privacy Policy
How Helvetica Capital AG collects, processes, and uses personal data when you visit our website or interact with us. Compliant with the Swiss Federal Act on Data Protection (nDSG, in force since 1 September 2023) and the EU GDPR where applicable.
Last updated: April 2026
1. General information
This privacy policy explains how Helvetica Capital AG ("we", "us", "our"), Nüschelerstrasse 1, 8001 Zürich, Switzerland, collects, processes, and uses personal data when you visit our website www.helvetica-capital.ch or interact with us. We process personal data in accordance with the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the General Data Protection Regulation (GDPR) of the European Union. We reserve the right to update this privacy policy from time to time. The current version published on our website applies.
2. Responsible party (Controller)
Helvetica Capital AG, Nüschelerstrasse 1, 8001 Zürich, Switzerland. Email for data protection inquiries: info@helvetica-capital.ch. Telephone: +41 55 511 20 20.
3. What personal data we collect
We collect data automatically when you visit our website (IP address, anonymised where technically feasible, date and time of access, pages visited, browser type and version, operating system, referrer URL, device type) and data you provide voluntarily (name, email, telephone, message content when you use our contact form or write to us). We may also receive personal data from professional intermediaries (M&A advisors, lawyers, trustees) in the context of a potential investment transaction, subject to your knowledge or consent. We do not purchase personal data from third parties for marketing purposes.
4. Purposes and legal basis
We process personal data to provide and improve our website (legitimate interest), respond to your inquiries via the contact form or email (consent / pre-contractual measures), produce anonymised website analytics (legitimate interest), ensure website security and prevent abuse (legitimate interest), and comply with legal obligations.
5. Cookies
Cookies are small text files stored on your device when you visit a website. We use strictly necessary cookies (no consent required under Art. 45c nFDV), analytics cookies (consent required, used for Google Analytics if enabled), and may use third-party cookies set by embedded services such as LinkedIn (consent required). When you first visit our website you are presented with a cookie consent banner that lets you accept or reject non-essential cookies. You can change your preferences at any time and configure your browser to block or delete cookies; note that blocking certain cookies may affect site functionality.
6. Google Analytics
If activated and consented to via the cookie banner, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have IP anonymisation enabled, so Google truncates your IP address within the European Economic Area and Switzerland before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. You can prevent the collection of data by Google Analytics by refusing analytics cookies via our cookie consent banner, installing the Google Analytics opt-out browser add-on, or configuring your browser to block cookies from google-analytics.com. Legal basis: consent.
7. Contact form and email communication
When you use our contact form or send us an email, we collect and process the personal data you provide (typically name, email address, telephone number, message content) for the purpose of responding to your inquiry. We store this data only for as long as necessary to process your inquiry and any follow-up correspondence, or as required by legal retention obligations. We do not use data submitted through the contact form for marketing purposes without your explicit consent.
8. Third-party services and hosting
Our website includes a link to our LinkedIn company page; LinkedIn's privacy policy applies to any data processing on their platform. Our website is hosted on Vercel infrastructure; the hosting provider processes data on our behalf and is contractually bound to comply with applicable data protection legislation. If additional third-party tools are integrated in the future, each will be disclosed in this section with its purpose, the data processed, and a link to its privacy policy.
9. Data transfer to third countries
Personal data may be transferred to countries outside Switzerland and the European Economic Area, in particular to the United States, in the course of using Google Analytics and other third-party services. Where such transfers occur, we ensure that appropriate safeguards are in place, including adequacy decisions by the Swiss Federal Council or the European Commission, standard contractual clauses (SCCs) approved by the European Commission, and where applicable certification under the EU-US Data Privacy Framework.
10. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this privacy policy, or as required by law. Contact-form inquiries are deleted after completion of the inquiry and any related correspondence unless a longer retention period is required by law. Anonymised website-analytics data is retained according to Google Analytics default settings (up to 26 months). Legal and contractual records are retained for 10 years in accordance with Swiss commercial law (Art. 958f CO).
11. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or destruction. These include encryption of data in transit (TLS/SSL), access controls and authentication for internal systems, and regular review and updating of security measures. No system is completely secure; while we take reasonable precautions, we cannot guarantee absolute security of data transmitted to or stored on our systems.
12. Your rights
Under the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the GDPR, you have the right of access (information about whether and which personal data we process about you), the right to rectification, the right to erasure (subject to legal retention obligations), the right to data portability, the right to object (where processing is based on legitimate interest), the right to withdraw consent, and the right to lodge a complaint with the competent supervisory authority; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). To exercise your rights, contact us at info@helvetica-capital.ch. We will respond to your request within 30 days.