Privacy
policy.

Data controller

The controller for this public website is Talewind Capital SA, Place de la Fusterie 7, 1204 Geneva, Switzerland.

Privacy questions or data-rights requests may be submitted through the firm’s privacy request form or sent by post to the address above.

Information collected

Website requests involve technical information such as IP address, browser details, requested page, time and security events needed to deliver and protect the service. Our corporate pages serve their scripts, images and fonts locally, with no third-party analytics, advertising or embedded services. External links open another website only when you follow them.

The enquiry form records your name, email, subject, self-described enquiry category, message, request for a reply and privacy acknowledgement, together with the server-recorded acceptance time. Company, phone and country of residence or entity establishment are optional. Country assists human review; it does not determine eligibility or marketing permission. A request reference prevents duplicate records on unchanged retries. The form keeps entered details in the current page after an error and does not save them in browser storage. Please avoid sending identity documents or sensitive financial details.

The separate investor qualification page records your actual country, professional or institutional self-declaration, acknowledgements and server timestamps in a server session. A Secure, HttpOnly cookie identifies that session for a fixed 30 days. This permits restricted website entry while preview access remains valid; it is not verified identity, legal investor classification or approval to receive an offering. Private investors and visitors unsure of their category cannot proceed. You can change or reset your access profile.

Cookies and browser storage

Necessary cookies protect preview access and administrator sessions. Preview sessions expire at the server-set cookie lifetime (one hour by default) and can be revoked by changing the preview password. Administrator sessions use a 30-minute idle timeout. The separate investor entry session lasts 30 days, is held server-side and is identified by the Secure, HttpOnly, SameSite=Lax cookie __Host-talewind_investor. It can be revoked on the qualification page; expiry or reset requires a fresh declaration. Necessary entry cookies are independent of optional analytics.

No optional analytics is configured in the current operational build. Cookie information and settings remain available on operational pages, including qualification. If optional Plausible analytics is configured in a future build, it stays off until an explicit choice. That choice is stored locally, validated against the current version and treated as expired after 180 days. This is our preference lifetime, not a statutory retention period. Rejection and withdrawal are available in the same settings; withdrawing loaded analytics refreshes the page to clear its listeners. If that choice cannot be saved or verified after analytics loads, a visible warning explains that the static privacy page will open to stop it. Your separate access rules remain unchanged.

Optional analytics choices, their categories, version and time are sent to the website audit service; this event contains no enquiry details or country. The current site has no marketing or newsletter enrolment. Browser records may remain physically stored until overwritten or cleared, even after the application treats them as expired. You may clear local storage in your browser; clearing cookies ends the corresponding sessions.

Why we process information

We use technical information to deliver and secure the website, limit abuse and diagnose failures. The enquiry service uses short-lived rate limits, including a hash of the email address, and restricted staff access. Staff review enquiries and use your contact details to respond. Submissions are stored for review; the website does not automatically send email.

The required form acknowledgement records your request for a reply and awareness of this notice. Ordinary enquiry handling does not require blanket consent to all data processing. This acknowledgement is separate from optional analytics consent, marketing permission and investor classification. No marketing enrolment is added.

Access and retention

Enquiries are available to authorised Talewind staff through the protected website administration interface. Technical infrastructure processes requests and security records to operate the service; information may also be disclosed where required by law.

Our website and its enquiry database and session storage run on a self-managed physical server in Switzerland. This describes current hosting, not a guarantee about every future staff access or backup location.

Our chosen enquiry retention policy is 12 months after closure, subject to applicable legal obligations requiring longer retention. Closure means staff have completed handling the enquiry and any necessary follow-up. This is a company policy, not a statutory default. Data should then be deleted or anonymised. The separate 30-day investor entry session is not an enquiry retention period.

Your rights

Subject to applicable law, you may request information about personal data processed about you and ask for inaccurate data to be corrected or data to be deleted or restricted. You may also object to certain processing and, where applicable, request delivery or transfer of your data. You can withdraw optional analytics permission in cookie settings without affecting your enquiry. Contact us through the privacy request form or by post; we may need to verify your identity proportionately.

You may contact the Swiss Federal Data Protection and Information Commissioner ↗ if you believe your rights have been infringed.

Security, changes and contact

Talewind applies reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss. No internet transmission or storage system can be guaranteed completely secure.

This notice may be updated when the website, service providers or legal requirements change. The date above identifies the current public version.