Privacy policy

Effective date: 22 September 2026 · Last updated: 22 September 2026

Watson AM AG ("Watson AM", "we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This policy explains what we collect when you visit watsoncapital.ch, why we collect it, who we share it with, and the rights you have over it.

1. Who is responsible for your data

The controller responsible for processing your personal data is:

2. Which laws apply

We process personal data in line with the Swiss Federal Act on Data Protection (FADP, revised version in force since 1 September 2023) and, where you are located in the European Union or European Economic Area, the EU General Data Protection Regulation (GDPR). Where both apply, we hold ourselves to the higher standard.

3. The personal data we collect

Data you give us

When you use one of our forms, write to us, or call us, we collect the information you choose to provide:

• Registration form (joining the Watson Capital Partners list): your name and email address, your phone number and company if you add them, the amount you expect to invest, your preferred investment duration, your preferred risk and return profile, and any message you write.
• Contact form: your name, email address, your phone number and company if you add them, and your message.
• Newsletter: your email address.

We use your investment preferences only to decide which projects to send you and to answer your questions. They are not a financial assessment. If you later decide to invest, we will ask for the identity and financial information the law requires before you can take part, and we will explain at that point how we handle it.

Data we collect automatically

When you visit the site, certain data is collected by the systems that deliver and measure it:

• Technical and log data, including your IP address, browser type, device type, operating system, referring page, and the pages you view. This is generated by our hosting provider for delivery and security.
• Usage and analytics data, including how you arrived at the site, which pages you spend time on, and approximate location derived from your IP address. This is collected through cookies and similar technologies, and only where you have given consent.
• Advertising and measurement data, used to understand whether our advertising campaigns reach the right people and to measure their effect. This is also collected only where you have given consent.

We do not knowingly collect special categories of data through the website, and we ask that you do not send us sensitive personal data through our forms.

4. Cookies and similar technologies

A cookie is a small text file placed on your device when you visit a website. We group the technologies we use into two categories:

• Strictly necessary. Needed for the site to function and to stay secure. These do not require consent.
• Complementary. Everything else, offered as a single choice. This covers Google Analytics, the HubSpot tracking pixel, and, through HubSpot, the LinkedIn Insight Tag, Google Ads, and the Meta pixel. Together they measure how the site is used, link your visit to your contact record where you get in touch, measure campaign performance, record when an advert leads to a registration or a message, and reach people most likely to be interested. These require your consent. They are presented as one choice because the HubSpot script is what places the three advertising tags on the page, so they cannot meaningfully be accepted or refused apart from it.

Until you accept complementary cookies, none of that tracking runs. You can refuse or withdraw consent at any time through the cookie banner, and you can also manage cookies in your browser settings. Disabling strictly necessary cookies may stop parts of the site from working.

The cookie banner shows the current, authoritative list of the cookies and tags in use, with their providers and durations. We keep that list current as our tools change, which is why it, rather than this policy, is the live record of exactly what runs on the site at any given time.

5. Why we process your data, and on what legal basis

Under the FADP we rely on the equivalent grounds: your consent where required, the performance or preparation of a contract, our overriding legitimate interests, and our legal obligations.

6. The tools and third parties we use

We work with a small number of service providers. Some process data strictly on our behalf (processors). Others, such as LinkedIn, also process it for their own purposes, which makes them independent or joint controllers for that processing. We share only what each one needs, and this list reflects the tools in use at the date above.

• Simply.com A/S (Denmark) hosts the website. It processes technical and log data, including IP addresses, to deliver the site and keep it secure.
• Google Workspace. Email you send us, and our replies, are processed in our Google Workspace inbox.
• Google Analytics (Google Ireland Limited). Measures how visitors use the site, through cookies and online identifiers, only after you consent. Data may be transferred to Google LLC in the United States.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company), placed on the site by HubSpot. A tag that measures campaign performance and lets us show our adverts to relevant audiences on LinkedIn. After you consent, it processes data including your IP address, device and browser information, page activity, and a pseudonymised LinkedIn identifier. LinkedIn processes some of this for its own purposes as a controller. Data may be transferred outside the EEA and Switzerland.
• Google Ads (Google Ireland Limited), placed on the site by HubSpot. Measures whether an advert led to a visit, a registration or a message, through cookies and online identifiers, only after you consent. Data may be transferred to Google LLC in the United States.
• Meta pixel (Meta Platforms Ireland Limited), placed on the site by HubSpot. A tag that measures campaign performance and lets us reach audiences on Facebook and Instagram. After you consent, it processes data including your IP address, device and browser information, and page activity. Meta processes some of this for its own purposes as a controller. Data may be transferred outside the EEA and Switzerland.
• HubSpot (HubSpot, Inc.). Our customer relationship management system, where we record registrations, messages and contact details so that we can manage our correspondence with you. The registration, contact, and newsletter forms submit directly to HubSpot, so the details you enter are received by HubSpot and written to your contact record. We also run the HubSpot tracking pixel on the website. After you consent, it sets cookies and processes data such as your IP address, device and browser information, and the pages you view, so we can understand how visitors engage with the site and link that activity to your contact record if you get in touch. The same script places the three advertising tags listed above. Where you register or send us a message, HubSpot also reports that back to those advertising platforms so we can measure which campaigns lead to real registrations; the data it sends is protected by one-way hashing. HubSpot, Inc. is based in the United States.

Each of these providers acts under a data processing agreement or its own published terms. We do not sell your personal data.

7. Transfers outside Switzerland and the EEA

Several of our providers process data in the United States. Where data leaves Switzerland or the EEA, we rely on recognised safeguards, including the European Commission's standard contractual clauses, the Swiss addendum to those clauses, and, where applicable, the EU-US and Swiss-US Data Privacy Framework. You can ask us for a copy of the relevant safeguard using the contact details above.

8. How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it, and then delete or anonymise it.

• Correspondence: kept for the duration of our exchange and for 24 months after our last contact, then reviewed and deleted if no relationship follows.
• CRM contact records: kept while the relationship is active and for 24 months after the last meaningful interaction, after which inactive or cold records are reviewed and deleted.
• Analytics data: retained for 14 months in Google Analytics.
• Advertising data: HubSpot tracking cookies expire after 6 months, and activity tied to a contact is held with that contact's CRM record and follows the CRM retention rule above. The LinkedIn Insight Tag cookie expires on a rolling 6-month basis; LinkedIn removes direct identifiers within 7 days and deletes the remaining pseudonymised data within 180 days. Google Ads conversion cookies expire after up to 90 days, as does the Meta pixel cookie.
• Newsletter data: kept until you unsubscribe.

Data we are legally required to retain is kept for the period the law requires.

9. Your rights

Subject to the conditions in the FADP and the GDPR, you have the right to:

• ask for access to the personal data we hold about you,
• ask us to correct data that is inaccurate or incomplete,
• ask us to delete your data,
• ask us to restrict how we process it,
• object to processing based on our legitimate interests,
• ask us to transfer your data to you or another controller, where that right applies,
• withdraw consent at any time, without affecting processing that already took place, and
• lodge a complaint with a supervisory authority.

To exercise any of these, write to contact@watson.am. We will respond within the time the law allows. We may need to verify your identity first.

10. How we protect your data

We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No website or transmission method is completely secure, so we cannot guarantee absolute security, but we work to keep our measures current.

11. Children

The website is intended for adults. Only people aged 18 or over can register to invest, and we do not knowingly collect data from anyone under 16.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top, and where the change is significant we will give clearer notice on the site.

13. Contact and supervisory authorities

For any question about this policy or your data, contact us at contact@watson.am.

If you are in Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you are in the EU or EEA, you may contact the data protection authority in your country of residence.