This Privacy & Cookies Notice describes how Rive Advisory ("we", "us", or "our") collects, uses, stores, and shares personal data when you visit this website. It has been prepared in compliance with the Swiss Federal Act on Data Protection (nDSG, in force from 1 September 2023) and the European General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), to the extent each applies to the processing of your personal data.
1. Identity and Contact Details of the Data Controller
The data controller responsible for your personal data is:
Laurens Menger
trading as Menger Rive Advisory
Zug, Switzerland
For all data protection enquiries: admin@riveadvisory.ch
2. Data We Collect and How We Collect It
Data you provide directly: When you book an introductory call through our scheduling tool (Cal.com) or contact us by email, we collect your name, email address, organisation name (optional), and the content of your message. This data is provided voluntarily and is necessary to respond to your enquiry.
Data collected automatically: When you visit this website, our server infrastructure may automatically record certain technical data, including your IP address (in anonymised or pseudonymised form), browser type and version, operating system, referring URL, pages visited, and date and time of access. This data is collected for the security, stability, and performance monitoring of the website and is retained in a form that does not identify you individually, for a maximum of 30 days.
3. Legal Basis for Processing (GDPR, Art. 6)
We process your personal data on the following legal bases: performance of a contract or pre-contractual steps (Art. 6(1)(b)), when you submit an enquiry or book a call; compliance with a legal obligation (Art. 6(1)(c)), where required by applicable Swiss or EU law; and legitimate interests (Art. 6(1)(f)), for the security and stability of our website, provided such interests are not overridden by your fundamental rights and freedoms. We do not process personal data on the basis of consent (Art. 6(1)(a)), as we do not engage in tracking, profiling, or advertising of any kind.
4. Purposes of Processing
We use your personal data to respond to enquiries and schedule introductory calls; to ensure the technical operation, security, and integrity of this website; to comply with legal obligations under Swiss and EU law; and to prevent fraud, abuse, and other unlawful activity. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of Art. 22 GDPR.
5. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Enquiry and booking data is retained for up to 12 months from the date of last contact, unless a longer period is required to perform or conclude a contractual engagement. Server and access logs are retained in pseudonymised or anonymised form for a maximum of 30 days. Legal and compliance records are retained for the period required by Swiss commercial and tax law, typically 10 years. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.
6. Sharing of Personal Data
Rive Advisory does not sell, rent, or trade personal data, and does not share your personal data with third parties for marketing purposes. We may share data with trusted technical service providers (e.g. scheduling, hosting, infrastructure) acting as data processors under binding agreements, including data processing agreements where required under GDPR Art. 28; with legal authorities where required by binding legal obligation, court order, or the legitimate request of a competent authority; and in connection with a merger, acquisition, or sale of assets, subject to equivalent data protection obligations. Our scheduling provider, Cal.com, processes booking data under its own privacy policy.
7. International Data Transfers
Switzerland is recognised by the European Commission as providing an adequate level of data protection; transfers of personal data between Switzerland and the EU/EEA are therefore permitted without additional safeguards. Where personal data is transferred to countries that do not benefit from an adequacy decision, we ensure appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses (SCCs) pursuant to GDPR Art. 46(2)(c), or equivalent mechanisms under Swiss law.
8. Your Rights
Depending on your location and applicable law, you have the right of access (Art. 15 GDPR / Art. 25 nDSG); the right to rectification (Art. 16 GDPR / Art. 32 nDSG); the right to erasure (Art. 17 GDPR); the right to restriction of processing (Art. 18 GDPR); the right to data portability (Art. 20 GDPR / Art. 28 nDSG); the right to object (Art. 21 GDPR); and the right to withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3) GDPR). To exercise any of these rights, please contact admin@riveadvisory.ch. We will respond within 30 days and may request verification of your identity before processing your request.
9. Cookies
This website sets no cookies. Rive Advisory does not use tracking cookies, analytics cookies, advertising cookies, or any other form of browser cookie. No cookie is placed on your device by this website.
For preferences such as your selected display language and the dismissed state of this privacy notice, we use your browser's localStorage, a standard browser storage mechanism that is entirely local to your device. Unlike cookies, localStorage data is never transmitted to any server, is not shared with any third party, and cannot be used to identify or track you across websites.
When you use the Cal.com booking widget to schedule an introductory call, Cal.com operates as an independent service and may set its own session cookies to facilitate the booking process. These cookies are solely under Cal.com's control and are governed by Cal.com's own privacy and cookies policy.
Because this website itself sets no cookies, there is nothing for you to accept, decline, or manage on our side. If you schedule a call and wish to review or manage cookies set by Cal.com during that interaction, please refer to Cal.com's privacy policy available at cal.com.
10. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern (www.edoeb.admin.ch). EU/EEA residents may also contact the supervisory authority in their country of habitual residence. We would, however, welcome the opportunity to address your concerns directly before you approach a supervisory authority, please contact us first at admin@riveadvisory.ch.
11. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Changes to This Notice
We may update this Privacy & Cookies Notice from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this notice periodically. Continued use of this website following any update constitutes your acknowledgement of the revised notice.