Privacy policy

Privacy policy

Last updated: October 29, 2026

1. Data controller

The controller responsible for processing personal data on this website is:

Golden Wave int. GmbH
Chaltenbodenstrasse 4a
8831 Schindeleggi
Switzerland

Technical support: WIBSS Informatik Sulke

2. General information

We take the protection of personal data seriously. We process personal data to provide this website, to carry out the DupliSog information and contact process, and to ensure the security and functionality of our systems. In doing so, we comply with the applicable Swiss Data Protection Act (DPA) and, where applicable, the European Union’s General Data Protection Regulation (GDPR).

3. Hosting and technical access data

Our website is hosted by the Swiss hosting provider cyon.

When you visit the website, technically necessary connection data may be processed, in particular IP address, date and time of access, pages accessed, browser and device information, and technical error messages. This is used to provide and protect the website and to troubleshoot errors.

4. Cookies and technical storage technologies

This website uses cookies and comparable storage technologies for its functions and security. This may include language settings, personal access permissions, and saving video progress.

We do not use our own advertising or marketing cookies and do not carry out general visitor analytics for advertising purposes. Where legal consent is required for individual technologies, the relevant legal requirements apply.

5. Information videos via Vimeo

Our website embeds informational videos from the provider Vimeo. When the video player loads, a connection to Vimeo is established. In the process, technical data, in particular the IP address, may be transmitted to Vimeo and may also be processed outside Switzerland and the European Economic Area.

The Vimeo player is embedded with the Do Not Track setting (dnt=1) to reduce analytics cookies. However, Vimeo may still use technically required storage technologies, for example to protect and operate the video player.

More information: Vimeo Privacy Policy.

6. Prospect data and personal access links

DupliSog gives prospects access to an informational video and then enables them to contact an assigned contact person. For this purpose, we process in particular first and last names, email addresses, where applicable phone numbers, details about the contact person, and the submitted form responses.

Personal access links to the informational video are generally valid for seven days.

7. Saving video progress

Video progress is saved so the video can be continued after an interruption, even on another device. As part of follow-up, the assigned contact person may be informed whether the video has already been started.

8. Processing and sharing of personal data

Personal data is processed to communicate with and support prospects and to operate our website securely. Where necessary, it is shared with the assigned contact person or service providers we use.

Processing is carried out on the basis of applicable data protection law. Where the GDPR applies, we rely in particular on Art. 6(1)(b) (contractual and pre-contractual measures), (f) (legitimate interests) or, where required, (a) (consent). Consents given can be withdrawn at any time with effect for the future.

9. Retention and deletion

The following retention periods apply:

• Prospect data: twelve months from the last relevant activity.
• Email and follow-up history in DupliSog: twelve months from the last relevant activity.
• Security logs: twelve months from the respective event, with regular clean-up.
• Technical error logs: 60 days.
• Personal video links: valid for seven days; link expiry does not automatically mean the prospect record is deleted.

Business-required information may be retained longer in the case of an existing business relationship, due to statutory retention obligations, or to safeguard legitimate claims, insofar as this is legally permissible. Once the respective reason for retention no longer applies, the data concerned will be deleted or anonymized.

10. Data transfers abroad

For hosting, we use a provider in Switzerland. When integrating external services, in particular Vimeo, technical data may be transferred to recipients abroad, including the USA. Where legally required, such transfers are carried out on the basis of appropriate data protection requirements and safeguards.

12. Data security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, and unlawful alteration. This includes protected storage areas, access restrictions, and measures to secure data transmission.

13. Your data protection rights

Under applicable data protection law, you have the right to access, rectification and, where applicable, deletion of your personal data, as well as other rights provided by law.

You can contact the controller named above or the competent data protection supervisory authority with your concerns.

14. Changes to this Privacy Policy

We may update this Privacy Policy if legal requirements, technical functions, or our data processing processes change. The version published on this website at the time applies.