Swiss Sovereign Data Protection

Privacy Policy

Datenschutzerklärung in accordance with the revised Swiss Federal Act on Data Protection (revDSG / nDSG) and the EU General Data Protection Regulation (GDPR / DSGVO).

Effective Date: September 2, 2026Jurisdiction: Luzern, SwitzerlandData Residency: 100% Hosted in Switzerland

1. General Scope & Responsible Entity

Wasserbären GmbH (“we”, “us”, or “our”), registered in Zurich, Switzerland, operates this digital platform. As an architecture firm dedicated to sovereign computing and technical precision, the safeguarding of personal data is our primary foundational imperative.

Responsible Body (Controller):

Wasserbären GmbH

Gotthardstrasse 26, 8002 Zürich, Switzerland

Email: paul.c.carahan@wasserbaren.ch

2. The Swiss Data Sovereignty Guarantee

In strict compliance with revDSG / nDSG (SR 235.1) and FINMA Circular 2018/3 recommendations:

  • No Overseas Telemetry: We do not route server logs, telemetry, or client data to non-Swiss hyperscalers or third countries without explicit mutual cryptographic consent.
  • Swiss Hosting: All production infrastructure, databases, and AI model weights reside within verified ISO 27001 certified Swiss facilities (Infomaniak, SwissGPU).
  • Zero Cloud-Act Exposure: Operating under Swiss sovereign corporate jurisdiction shields enterprise client workloads from extraterritorial surveillance requests.

3. Collection and Processing of Personal Data

We collect personal data only when strictly necessary for technical fulfillment, security diagnostics, or when voluntarily provided via our Readiness Assessment portal:

Inquiry Data

Full name, corporate email address, enterprise entity name, canton of operation, and technical workload specifications provided during assessment scheduling.

Server Access Logs

Anonymized IP addresses, HTTP request headers, timestamps, and SSL handshake ciphers strictly for intrusion detection and DDoS mitigation. Retained for 14 days maximum.

4. Cookies and Tracking Technologies

We adhere to a Zero Third-Party Tracker policy. We do not employ tracking pixels, invasive ad networks, or cross-site fingerprinting scripts. Essential session cookies are used exclusively for interface state and security tokens.

5. Your Rights Under Swiss Law

Under Articles 25–32 of the revDSG (nDSG), you possess statutory rights regarding your personal data:

  • checkRight to Information (Art. 25 revDSG)
  • checkRight to Data Portability (Art. 28 revDSG)
  • checkRight to Rectification (Art. 32 revDSG)
  • checkRight to Erasure / Deletion (Art. 32 revDSG)

To exercise any of these rights, contact our Data Protection Officer at paul.c.carahan@wasserbaren.ch.

arrow_backBack to Overview View Impressum →