Privacy Policy

1. Controller

RAIIS GmbH, Gaishausstrasse 31, 9050 Appenzell, Switzerland, privacy@raiis.ch

This policy applies to our websites raiis.ch and saladin.raiis.ch. It is based on the Swiss Federal Act on Data Protection (FADP). Where we process data of individuals in the EU or EEA, we also comply with the General Data Protection Regulation (GDPR).

2. Visiting our websites

Hosting and log files. Our websites are hosted on Microsoft Azure in a data centre in Switzerland. When you visit them, technically necessary data is recorded (IP address, date and time, page accessed, browser and operating system). We use this data solely to keep the websites secure and stable, and we delete it after 30 days at the latest.

Cookies. We only use cookies that are technically necessary to operate the websites, for example to submit forms, for downloads or to keep you signed in after logging in. We do not use analytics or marketing cookies, and we do not track your browsing behaviour. You can refuse or delete cookies in your browser settings. The contact form, downloads and login will then no longer work.

3. Contact form, email and case studies

When you contact us or download a case study, we process the information you provide: your name, email address, organisation and, where applicable, your message. We use it to respond to your enquiry and to send you the requested materials. You will only receive further messages or updates if you have agreed to this. A short reply is enough to stop them.

4. Access to Saladin

When you request access on saladin.raiis.ch, we process the information in your request: your name, business email address, organisation and role. We use it to assess whether we can grant you access and to contact you about it. If access is not granted, we delete your request within 6 months at the latest.

Once you have access, we also store your account details and information about your logins (time, IP address) in order to operate the platform securely and prevent misuse. We keep your account details for as long as your access remains active and delete them within 3 months after it is closed, unless statutory obligations require otherwise.

For data that our clients process in Saladin, we act as a processor on the client's behalf. The agreements with the respective client apply.

5. Contact details of prospects and business partners

We approach individuals in their professional capacity, such as those responsible for investments, finance or management at pension funds, asset managers and their service providers.

What data. We process your name, professional role and employer, business contact details (email address, phone number, LinkedIn profile), publicly available information about your professional activities, and our notes on our correspondence (date, channel and content).

Sources. The data comes from publicly available sources, in particular annual and business reports, organisations' websites, the commercial register, media reports and professional networks such as LinkedIn. We do not process information about your private life. We also obtain and verify business email addresses through contact data providers.

Purpose. We contact organisations for which our services may be relevant, arrange meetings and maintain existing business relationships. This constitutes direct marketing in a business context. It is based on our legitimate interest in establishing business relationships. We do not sell contact details or share them with third parties for their marketing purposes. No automated individual decision-making takes place.

Retention. We keep the data for as long as the contact remains relevant for a business relationship, and no longer than 24 months after our last exchange. If you do not wish to receive further messages, we retain only your name and email address on an internal suppression list so that we do not contact you again.

6. Who has access to your data

Within RAIIS, only the people responsible for client relationships and the Saladin platform have access. We also use service providers as processors, who process data only on our instructions: for hosting, email and file storage, internal collaboration, customer relationship management, research and verification of business contact details, and AI-assisted research and drafting.

Our websites and Saladin run on Microsoft Azure in a data centre in Switzerland. Some providers also process data in the United States, based on the Swiss-U.S. Data Privacy Framework or standard contractual clauses.

We do not disclose data to anyone else unless we are legally required to do so.

7. General retention

We delete personal data as soon as it is no longer needed for its purpose, unless statutory retention obligations apply, such as the ten-year retention period for business records.

8. Data security

We protect your data with appropriate technical and organisational measures, including access restrictions, encrypted transmission and two-factor authentication on our systems.

9. Your rights

You may at any time:

• request information about the data we process about you
• have inaccurate data corrected
• have your data deleted
• object to processing, in particular for marketing purposes
• request a copy of your data in a common format
• withdraw any consent you have given

A message to privacy@raiis.ch is sufficient; you do not need to give a reason. You may also contact a data protection supervisory authority.

10. Changes

We will update this policy if our data processing changes. The version published on this page applies.