This Privacy Policy explains how Association TGG ("we", "us", or "our"), an association established under Swiss law, collects, uses, stores, and shares your personal information when you use gstaadguy.com (the "Website").

Association TGG is the data controller responsible for your personal information. We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR).

Contact:

Association TGG Viktoriastrasse 3 3780 Gstaad Switzerland

Email: info@gstaadguy.com

1. Who We Are and What This Website Is

The Website is an informational hub for The Gstaad Guy and his associated brands and ventures. It allows visitors to learn about these brands, make enquiries through a contact form, and view career opportunities. The Website does not sell products or process payments directly; links to brand stores and external services will take you to separate third-party websites with their own terms and privacy policies (see Section 8).

2. Information We Collect

Information you provide to us. When you submit our contact form, we collect your name, email address, telephone number, and the contents of your message. If you apply for a role via the careers section, you will be directed to an external form (currently a Google Form) where you may provide your name, contact details, and any application materials you choose to submit.

Information collected automatically (Log Data). When you visit the Website, our systems and analytics tools automatically receive information such as your IP address, browser type and version, device information, the pages you visit, referring pages, and the date, time, and duration of your visit.

Cookies and similar technologies. See Section 7.

We do not intentionally collect special category (sensitive) personal data through the Website.

3. How We Use Your Information and Our Legal Bases

We use your personal information for the following purposes:

• To respond to your enquiries and pass your details to the relevant person or brand so they can follow up. Basis: our legitimate interests in responding to enquiries and, where relevant, taking steps at your request prior to entering into a contract.

• To manage recruitment, where you apply for a role. Basis: our legitimate interests in assessing candidates and, where applicable, taking steps prior to entering into an engagement.

• To operate, maintain, secure, and improve the Website, including analytics. Basis: your consent for non-essential analytics cookies; our legitimate interests in maintaining a secure and functional Website.

• To comply with legal obligations and to establish, exercise, or defend legal claims. Basis: compliance with a legal obligation and our legitimate interests.

4. How We Share Your Information

We do not sell your personal information. We share it only as follows:

• Service providers (processors) who help us operate the Website and our services, including:

  • Framer — website hosting and contact-form processing.

  • Google — analytics (Google Analytics 4) and, for careers applications, Google Forms.

• The relevant brand, venture, or individual to whom your enquiry is directed, so they can respond to you.

• Professional advisers, authorities, or third parties where required by law, to enforce our terms, or to protect our rights, property, or safety.

These recipients are permitted to use your information only as necessary to perform their services for us or as required by law, and are bound by appropriate confidentiality and data-processing obligations.

5. International Transfers

Association TGG is based in Switzerland. Some of our service providers (including Framer and Google) are located in, or process data in, the United States and other countries outside Switzerland and the EEA. Where personal information is transferred outside Switzerland or the EEA, we rely on appropriate safeguards recognised under the FADP and GDPR — such as the European Commission's Standard Contractual Clauses (with the Swiss addendum), the UK International Data Transfer Addendum where relevant, or an applicable adequacy decision or FDPIC recognition.

6. Data Retention

We keep your personal information only for as long as necessary for the purposes set out in this Policy, including to respond to your enquiry, to satisfy any legal, accounting, or reporting requirements, and to resolve disputes. Enquiry data is typically retained for up to 24 months after our last contact with you unless a longer period is required. Recruitment data is retained for the duration of the recruitment process and for a reasonable period afterwards.

7. Cookies

Cookies are small data files stored on your device. We use:

• Essential cookies, necessary for the Website to function.

• Analytics cookies (Google Analytics 4), which help us understand how visitors use the Website so we can improve it. These are only set where you have consented via our cookie banner.

You can withdraw consent or manage cookies at any time through our cookie settings or your browser settings. Blocking some cookies may affect how the Website works. For more detail on the analytics cookies used, see Google's privacy resources.

8. Links to Other Sites

The Website links out to third-party websites, including the stores and pages of associated brands (for example, the brands featured in the "Brands" section). We do not control and are not responsible for the content, security, or privacy practices of those sites. We encourage you to review the privacy policy of any third-party site before submitting personal information.

9. Your Rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you;

• request correction of inaccurate or incomplete information;

• request erasure of your information;

• restrict or object to our processing;

• request data portability;

• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [info@gstaadguy.com]. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch. If you are located in the EEA or the UK, you may instead contact your local supervisory authority or the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's Privacy

The Website is general-audience content and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it. Where you are under the age of legal consent in your jurisdiction, please obtain a parent or guardian's permission before submitting any personal information.

11. Security

We use appropriate technical and organisational measures to protect your personal information against loss, misuse, alteration, or unauthorised access. However, no transmission or storage method is completely secure, and we cannot guarantee absolute security. Any transmission is at your own risk.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version published on the Website applies. Material changes will be reflected by updating the "Last Updated" date above. Please review this Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at:

Association TGG Viktoriastrasse 3 3780 Gstaad Switzerland

Email: info@gstaadguy.com