Data Privacy Policy

At WaVeritas, we take data protection and dataprivacy very seriously. Compliance with data protection provisions in the jurisdictions we operate is very important for us.

This policy describes our practice with regard to information we collect online through and in general within the scope of our business. In this statement we outline what data we collect, how we handle such data and inform you about your rights in line with the provisions outlined in the General Data Protection Regulation of the EU(GDPR) and the Swiss Federal Act on Data Protection (nFADP).


1. What information we collect about you

We collect as little personal data as possible. The following points describe the reasons and the kind of personal data we may collect:
In general, we do not require personal data to perform our services to other businesses and we explicitly do not collect, or store sensitive personal data as defined by the Swiss law.

1.1 Data provided on the online contact form

When you choose to contact us through our web contact form, we collect your email
address, in case your name and telephone number.

1.2 Data provided by you through the course of business relationships

We collect and process personal data that you provide us within the scope of our
business relationships.

1.3 Data sent to us by third-parties or public entities

WaVeritas may receive data legitimately sent to us by third parties for contractual fulfillment purposes.

1.4 Data procured from third parties or public entities

WaVeritas may legitimately procure personal data from publicly accessible sources or
other sources such as databases for verifying and monitoring business relationships.


2. How we use the information about you

We use the information about you to carry out our obligations arising from the laws and
regulation applicable to us or any contracts entered into between you and us and to provide
you with the information, products and services that you request from us (e.g. to provide ESG
research services). More concretely, the company may use personal data for the following

2.1 To contact you

To respond to your requestby email, telephone calls, SMS, or other equivalent forms
of electronic communication.

2.2 To manage your requests

To attend and manage your requests to us.

2.3 No profiling

We do not use your personal data for automated profiling activities.


3. Forwarding of data

Entities within and outside our company may obtain access to your data. Within our company,
your data can only be processed by entities or employees if they require your data for the
fulfillment of our contractual, legal, and supervisory obligations and to safeguard legitimate

If the company’s business activities and services are fully or partially outsourced to group
companies or to service providers outside our company or if they render services this will be
done in compliance with applicable legal provisions. All group companies as well as external
service providers or fulfillment agents to which personal data is transmitted are contractually
obliged to safeguard data protection, to process your data exclusively within the scope of
rendering their services, and to abide by data protection laws, directives, and legal provisions.


4. Data Security and retention

In order to keep your personal data secure, we have implemented a number of security
measures, including: securing our operating environments that are only accessible to our
employees, agents and contractors on a need-to know basis. We will only retain your personal data for as long as it is necessary for the stated purpose,
taking into account also our need to answer queries or resolve problems, provide improved
and new services, and comply with legal requirements under applicable laws.


5. Links to other websites

Our website may, from time to time, contain links to and from other websites. If you follow a
link to any of these websites, please be aware that these websites have their own privacy
policies and that we do not accept any responsibility or liability for these policies. Please check
these policies before you submit any personal data to these websites.


6. Your rights

6.1 Right of access, correction and erasure

Upon your request, we will send you a copy of the information that we hold about you.
This will be provided to you without undue delay in a structured, commonly used and
machine readable form. We want to make sure that your personal information is
accurate and up to date. You may ask us to correct or remove information you think is
inaccurate. If we hold personal information about you and you want it to be removed
from our database or inactivated, please contact us at

6.2 Object to processing and right to opt-out of marketing communications

You have the right to ask us not to process your personal data. You can exercise your
right to object by contacting us at

6.3 Complaint

You always have a right to lodge a complaint with a supervisory authority or directly
to us by sending an e-mail to


7. Notes on the use of cookies

When our website is accessed, users are informed about the use of cookies for analysis
purposes and they are asked to give their consent to the processing of personal data used in
this context. In the same context, this data protection statement is referred to.

7.1 Why are cookies used?

All websites of our company use cookies for statistical purposes and to improve the
user experience. When you use this website, you consent to the use of cookies for this

7.2 What are cookies?

Cookies are text files that are stored on your electronic device to track your use of
electronic services as well as your navigation preference settings across the individual
web pages and if applicable to store your settings between visits. Cookies support the
developers of electronic services in compiling statistical information regarding visit
frequencies of certain website areas. In general, a cookie contains a characteristic
string of characters that allows the unambiguous identification of the browser when the
user returns to the website.


8. Analysis tools

WaVeritas uses Google Analytics, a web analysis service of Google Inc. (”Google”). In this
context, pseudonymized data is collected and cookies are used to analyze how users make
use of our homepage (for instance the area from which an IP address accessed the website).

As a rule, the information regarding your usage of the website, as generated by cookies, is
transmitted to a Google server in the USA and stored there. However, in those cases in which
users have anonymized their IP address when using this website, their IP addresses will be
truncated by Google within the member states of the European Union or in other states of the
European Economic Area. Only in exceptional cases will the full IP address transmitted to a
Google server in the USA and truncated there. On behalf of the operator of this website,
Google will use such information to evaluate your usage of the website, to compile reports
concerning website activities, and to render further services to the website operator in
conjunction with website and Internet usage patterns. Within the scope of Google Analytics,
Google may merge and aggregate the IP address communicated by your browser with other data.
You can prevent the storage of cookies with appropriate settings of your browser
software; however, if you elect to do so, you may not be able to fully utilize all of the functions
of this website.


9. Definitions

9.1 Personal data

Personal data means any information relating to an identified or identifiable natural
person (hereinafter: ‘data subject’) An identifiable natural person is one who can be
identified, directly or indirectly, in particular by reference to an identifier such as a
name, an identification number, location data, an online identifier or to one or more
factors specific to the physical, physiological, genetic, mental, economic, cultural or
social identity of that natural person.

9.2 Data subject

A data subject is any identified or identifiable natural person whose personal data are
processed by the controller in charge of processing.

9.3 Processing

Processing means any operation or set of operations which is performed on personal
data or on sets of personal data,whether or not by automated means, such as
collection, recording, organization, structuring, storage, adaptation or alteration,
retrieval, consultation, use, disclosure by transmission, dissemination or otherwise
making available, alignment or combination, restriction, erasure or destruction.

9.4 Profiling

Profiling means any form of automated processing of personal data consisting of the
use of personal data to evaluate certain personal aspects relating to a natural person,
in particular to analyze or predict aspects concerning that natural person’s
performance at work, economic situation, health, personal preferences, interests,
reliability, behavior, location or movements.


10. Changes to our privacy policy

We keep our Privacy and Cookies Policy under regular review and consequently, it may
change at any time in the future. We will place any updates on our website.


11. Information controller

WaVeritas took appropriate measures to ensure data protection and safety. We are pleased to help all concerned in connection with the handling of personal data and
exercising their rights.We are committed to dealing with all questions promptly.
For assistance please contact or +41 (0)44 621 60 42


The controller is:


  • WaVeritas AG
  • Stadel 15
  • 9496 Balzers
  • Fürstentum Liechtenstein