GSG Global Security Group

Privacy policy

Stand / Updated: October 2026

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR. This policy covers the website. For staff, the separate employee privacy notice also applies (/de/datenschutz-mitarbeitende).

1. Data controller

GSG Basel GmbH, Global Security Group, Sandgrubenstrasse 44, 4058 Basel (UID CHE-115.691.560)

GSG Bern GmbH, Global Security Group, Waldheimstrasse 16, 3012 Bern (UID CHE-254.559.806)

Privacy contact: Oronzo Legittimo (management), info@globalsecuritygroup.ch

2. Data we process

  • Contact form: chosen location, last name, first name, company, email, phone, message, language
  • Technical data when visiting: IP address, browser, page viewed, date and time (server logs of the hosting provider). We do not use any analytics, tracking or advertising services.
  • Staff portal: username, role and a session cookie (only for logged-in staff)
  • Google Maps: data is sent to Google only after your consent, when the map is loaded

3. Purposes

  • Answering enquiries and quotes
  • Operating and securing the website
  • Providing the protected staff portal

5. Cookies & local storage

For logging in to the staff portal we use a technically necessary session cookie (httpOnly).

Your choice in the cookie notice (incl. Google Maps) is stored in your browser's local storage.

You can withdraw your consent at any time by deleting the website data in your browser.

6. Recipients & processors

For transfers abroad (USA) we rely on the Swiss-U.S. Data Privacy Framework or standard contractual clauses.

  • Vercel Inc., USA (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) — hosting of the website and portal, servers in Frankfurt (EU)
  • Web3Forms — delivery of your contact request by email to the chosen office
  • Virtualtec AG, Switzerland — email mailboxes and email sending
  • Neon Inc. (database, data centre in Frankfurt/EU), Vercel Blob (file storage) and Upstash Inc. (technical cache) — only for the staff portal and contact requests
  • Google LLC, USA (Google Maps) — only after consent

7. Retention

  • Contact requests: until handled, at most 24 months, unless a legal retention duty applies
  • Server logs: only briefly, according to the hosting provider's periods
  • Portal sessions: at most 8 hours or until the browser is closed

8. Your rights

Send requests to: info@globalsecuritygroup.ch

  • Access to your personal data (Art. 25 FADP)
  • Rectification of inaccurate data
  • Erasure or restriction of processing
  • Handover of your data
  • Objection to processing
  • Complaint to the Federal Data Protection and Information Commissioner (FDPIC)

9. Contact form

We use your details only to handle your enquiry. Transmission is encrypted (HTTPS); without agreeing to this policy the form cannot be sent.

The request is emailed to the chosen office and stored in the protected portal for processing.

10. Data security

We take appropriate technical and organisational measures: TLS encryption, passwords stored only in hashed form, role-based access in the portal and protection against abuse (rate limiting).

Absolute security on the internet cannot be guaranteed.

11. Minors

This website is not aimed at persons under 16. We do not knowingly collect data from minors.

12. Changes

We update this policy when the website or the legal situation changes. The current version is available on this page.

Version: October 2026