Privacy policy
Verified by bettercallclaude.ch
1. Controller
The controller responsible for data processing in connection with this website is:
Arvut GmbH
Untermüli 9
6300 Zug, Switzerland
Email: hello@arvut.ch
Arvut GmbH has not appointed a data protection advisor or data protection officer. For questions about data protection, you can reach us at hello@arvut.ch.
2. Principles
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). We process only the data required to operate this website and to respond to your enquiries. This website uses no analytics tools, no marketing cookies and no profiling.
3. Data processed and purposes
3.1 Contact form
When you use our contact form, we process the following information: name, fiduciary company, email address, number of mandates (as a range) and, optionally, your message. The form is protected against automated access by Cloudflare Turnstile (see Section 5.1).
The submitted data is transferred to us and delivered as an email to our internal mailbox and as an internal notification (Telegram) to our team. We use this data exclusively to process and respond to your enquiry. No disclosure for advertising purposes takes place.
3.2 Matching request "Best fiduciaries"
On the page "The best fiduciaries in Switzerland" (arvut.ch/en/best) you can submit a request to be put in contact with a suitable fiduciary from the Arvut network. For this purpose we process: name, company, email address, company size (as a range), canton and, optionally, your message.
We use this information to select a suitable fiduciary and disclose it to the selected fiduciary for this purpose. The category of recipients within the meaning of Art. 19 para. 2 FADP is therefore the fiduciaries of the Arvut network in Switzerland. The transfer takes place via our platform or encrypted channels. The fiduciary processes your data as a separate controller, exclusively to assess and handle your request, and informs you about its data processing at the latest upon first contact. Technical marketing data (e.g. UTM parameters) remains with Arvut and is not passed on.
3.3 Server log data
When you visit this website, technical data is collected automatically, in particular the IP address, user agent (browser and device information) and timestamps of access. This data serves the secure and stable operation of the website, error analysis and the defence against attacks. The hosting infrastructure is operated by Arvut GmbH on servers in Switzerland and in the EU.
4. Cookies and local storage
We use only technically necessary cookies and local storage entries (e.g. as part of bot protection by Cloudflare Turnstile). No cookies are used for analytics, tracking or marketing purposes.
5. Third-party providers
5.1 Cloudflare (DNS/CDN and Turnstile)
We use services of Cloudflare, Inc., USA, for DNS, content delivery / proxy and the Cloudflare Turnstile bot protection. In doing so, Cloudflare processes technical data such as your IP address and browser information in order to deliver the website, protect it against attacks and detect automated access. Standard contractual clauses are in place with Cloudflare (see Section 6).
5.2 Google Fonts
This website loads fonts (Google Fonts) from servers of Google LLC, USA. When the website is accessed, your IP address is transmitted to Google so that the fonts can be delivered to your browser. Further information can be found in Google's privacy policy.
5.3 AI concierge (Anthropic)
This website offers an AI chat assistant ("Arvut Concierge") based on the Claude technology of Anthropic, PBC, USA. When you use the chat, your messages are transmitted to Anthropic and processed there to generate the responses; under Anthropic's API terms they are not used to train AI models. Arvut does not permanently store the conversations. Only if you expressly ask to be contacted in the chat and provide your name and email address for that purpose do we process this information as a contact request (Section 3). The chat is protected by Cloudflare Turnstile (Section 5.1). Please do not enter any sensitive personal data in the chat.
6. Disclosure abroad
In the context of the services mentioned in Section 5, personal data (in particular IP addresses and technical data) may be disclosed to the USA. The transfer is based on the Swiss–U.S. Data Privacy Framework, insofar as the respective provider is certified under it, and, additionally or alternatively, on the standard contractual clauses (Standard Contractual Clauses) recognised by Switzerland, which ensure adequate data protection.
7. Retention
We retain personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations exist. Enquiries submitted via the contact form are deleted once the correspondence is concluded, unless a further business relationship is established. Server log data is deleted automatically after a short period, insofar as it is not needed to investigate security-relevant incidents.
8. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss and misuse. Website content is transmitted in encrypted form (TLS/HTTPS).
9. Your rights
Under the FADP, you have in particular the following rights:
- Access (Art. 25 FADP): you may request information on whether and which personal data we process about you.
- Rectification (Art. 32 FADP): you may request the rectification of inaccurate personal data.
- Deletion: you may request the deletion of your personal data, insofar as no statutory retention obligations preclude this.
- Data delivery and portability (Art. 28 FADP): you may request the delivery of your personal data in a commonly used electronic format.
To exercise your rights, a message to hello@arvut.ch is sufficient. We may request proof of your identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
10. Visitors from the EEA
Insofar as the EU General Data Protection Regulation (GDPR) applies to individual processing activities — for example for visitors from the European Economic Area — we grant the data subject rights provided for therein (in particular access, rectification, erasure, restriction of processing, data portability and objection) in a corresponding manner. The legal bases in this case are in particular Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interests in the secure operation of the website).
11. Changes to this privacy policy
We may amend this privacy policy at any time. The version published on this website at the relevant time applies.
Last updated: July 2026
