Privacy Notice

1. Who is responsible

DEVIS by Nathan Office, Switzerland, is responsible for personal data handled through this site and through engagements. Contact: contact@devisos.com.

2. What we collect

On this site: minimal, privacy-respecting analytics, and whatever you send us when you book a call or email us (such as your name, contact details and what you tell us). In an engagement: information you choose to share, and information we obtain about the subjects of an investigation from public and lawfully obtainable sources.

3. Why we process it, and our lawful basis

We process data to respond to enquiries, to carry out and deliver engagements, and to run and improve the service. Depending on the case, our lawful basis is performance of a contract, your consent, or the legitimate interests of our clients and of DEVIS in carrying out diligence — balanced against the rights of the people concerned.

4. Information about third parties

Exposure intelligence necessarily involves information about people connected to a transaction, drawn from public and obtainable sources. We process it for the specific purpose of an engagement, hold it to the same confidentiality standard as the rest of the work, and qualify it by how far it is verified.

5. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for, for our legitimate business and legal-record requirements, and as set out in the engagement letter — then we delete or anonymise it. Exact retention periods are being finalised with counsel.

6. Who we share it with

We do not sell personal data. We share it only with the service providers needed to run the service (under confidentiality obligations), and where the law requires it. Your confidential engagement material is not handed to other clients.

7. Your rights

Subject to applicable law, you can ask to access, correct, delete or restrict the personal data we hold about you, and object to certain processing. To make a request, contact contact@devisos.com. You also have the right to complain to a data-protection authority.

8. International handling

We are based in Switzerland. Where data is processed outside your country, we use appropriate safeguards consistent with Swiss FADP and GDPR requirements.

9. Changes

We will update this notice as the service and the law evolve. The current version always lives at this address.