We take the protection of your personal data extremely seriously. When we handle your personal details, we do so in confidence and in accordance with the statutory data protection requirements covered by the EU General Data Protection Regulation and this Data Protection Declaration. Various items of personal data are collected when you use this website. The term “personal data” refers to information that can be used to identify you in person. This Data Protection Declaration explains which details we collect and the use to which we put them. It also explains how and with what aim this is done. Please note that some security risk may be involved when you transfer data over the internet (e.g. when you communicate by e-mail). It is impossible to guarantee that your data is completely protected against access by third parties.
1. Who is responsible for data processing and whom can I contact?
The responsible organisation is:
Swiss Fintec Invest AG
Tel: +41 71 888 32 88
You can contact our external Data Protection Officer as follows:
2. An overview of your rights
a) Withdrawal of your consent to the data processing activity
Many data processing activities can only be carried out with your explicit consent. You can withdraw your consent at any time, even after it has previously been given. To do this, you just need to send us a simple message by e-mail. This withdrawal of consent does not affect the lawfulness of any data processing activities undertaken before the withdrawal of consent.
b) Right to object to the collection of data in specific cases, and to direct marketing activities (Art. 21 GDPR)
If your details are being processed within the framework of Art. 6 Para. 1, e or f, of the GDPR, you have the right to file an objection against the processing of your personal data at any time for reasons that arise from your own specific circumstances; this also applies to any profiling activities based upon these provisions. The specific legal basis for any processing activity is set out in this Data Protection Declaration. If you file an objection, we will no longer process your relevant personal data, unless we are able to demonstrate compelling and legitimate reasons for this processing activity that outweigh your interests, rights and freedoms, or if the processing activity serves to assert, exercise or defend legal entitlements (objection in accordance with Art. 21 Para. 1 GDPR).
If your personal data is being processed in order to undertake direct marketing activities, you have the right to object at any time to the processing of any personal data relating to you for the purpose of such marketing activities; this also applies to profiling, to the extent that it is connected to such direct marketing. Once you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection in accordance with Art. 21 Para. 2 GDPR).
c) Right of appeal to the responsible regulatory authority
In the event of any violations of the GDPR, the affected individual has the right to appeal to a regulatory authority, specifically in the Member State in which that individual habitually resides or works, or at the place in which the supposed infringement took place. The right of appeal exists regardless of any other administrative or judicial remedy.
d) Right to data portability
You have the right to arrange that any data that we subject to an automated processing procedure, whether on the basis of your consent or in fulfilment of a contract, should be handed over to you, or to a third party, in a conventional, machine-readable format. If you ask for the direct transfer of the data to some other responsible person, this will only be undertaken to the extent that it is technically feasible.
e) Informing, blocking, deleting and correcting
Within the framework of the applicable statutory provisions, you have the right (which is free of charge and available at all times) to obtain information about the personal data stored about you, the origin thereof and the recipients of that personal data and the purpose of the data processing activity; you also have the right, if necessary, to correct, block or delete this data. Please contact us at any time, using the contact details set out above, about this or any other questions regarding the subject of personal data.
f) Within the framework of the applicable statutory provisions, you have the right (which is free of charge and available at all times) to obtain information about the personal data stored about you, the origin thereof and the recipients of that personal data and the purpose of the data processing activity; you also have the right, if necessary, to correct, block or delete this data. Please contact us at any time, using the contact details set out above, about this or any other questions regarding the subject of personal data.
You have the right to demand a restriction of the processing of your personal data. You can contact us at any time about this matter, using the contact details set out above. The right to restrict the processing activity exists in the following circumstances:
3. Data security
a) SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons, and to protect the transfer of confidential contents (such as any orders or enquiries that you may send to us as the operator of this site). You can recognise an encrypted connection by a change in the address line of the browser, from “http://” to https://, and by the appearance of the padlock symbol in your browser bar. If the SSL or TLS encryption function has been activated, it is impossible for any third party to read the data that you send to us.
4. Data collection on our website
Internet pages sometimes make use of components called “cookies”. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our service more user-friendly, effective and secure. Cookies are small text files that are deposited on your computer and are saved to your browser. Most of the cookies we use are those known as “session cookies”. These are deleted automatically at the end of your visit. Other cookies are stored on your terminal device until you delete them. These cookies allow us to recognise your browser again when you next visit.
You can set your browser so that you are notified when a cookie is placed, or so that you only allow cookies on an individual basis, or so that you prevent the acceptance of cookies in particular cases or in general, or so that you activate the automatic deletion of the cookies when you close down the browser. The functionality of this website may be restricted if cookies are deactivated. Any cookies that are necessary to carry out the electronic communications process or to provide particular functions required by you are stored within the framework of Art. 6 Para. 1 f, GDPR. The website operator has a legitimate interest in the storage of cookies for the technically optimised and flawless provision of its service. If any other cookies are stored (e.g. cookies used to analyse your surfing behaviour), this Data Protection Declaration will deal with them separately.
b) Server log files
The website provider collects and stores information automatically in “server log files”, which your browser automatically transmits to us. These details are the:
This information is not aggregated with other data sources.
The information is collected within the framework of Art. 6 Para. 1 f, GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimisation of its website – and the server log files need to be recorded for this purpose.
c) Enquiry by e-mail or phone
When you contact us by e-mail or telephone, we store and process your enquiry, including all the personal data arising from it (e.g. name, enquiry), in order that we can deal with the matter that concerns you. The handling of your concern may make it necessary for us to pass the details onwards within our corporate group.
The information is processed within the framework of Art. 6 Para. 1 b, GDPR, insofar as your enquiry is connected with the fulfilment of a contract, or is necessary for the execution of pre-contractual measures. In every other circumstance, any processing activities are based upon your consent (Art. 6 Para. 1 a, GDPR) and/or upon our legitimate interests (Art. 6 Para. 1 f, GDPR), since we have a legitimate interest in dealing effectively with any enquiries directed towards us. The details forwarded to us through contact enquiries are stored by us until you ask us to delete them, or until you withdraw your consent to store them, or the reason for the data storage no longer applies (e.g. once the processing of your issue has been successfully concluded). Any mandatory legal provisions – and any statutory retention period in particular – remain unaffected.
When users give their consent, e.g. to the receipt of newsletters or other similar advertising information, we use the information to which the relevant consent relates (e.g. the user’s e-mail address to send a newsletter) so that we can make the applicable information available to the user. This type of consent can be withdrawn at any time with respect to the future. When users request a newsletter on the website, we send them a confirmatory and/or authorisation e-mail, in which they are asked to click on the link contained within this e-mail in order to confirm to us that they really do want to receive the newsletter. We will only send the relevant newsletter to the user after we have received this confirmation. Users can stop their order for the newsletter at any time by clicking on the (unsubscribe) link designed for this purpose and included in each newsletter. We only send our newsletter to publicise our own products and services.
5. Is there a duty to provide information?
Within the framework of our business relationship or the procurement of services, you are required to provide those items of personal data that are necessary so that the business relationship can be implemented or the service provided, or for the fulfilment of the associated contractual obligations, or if we are obliged by law to collect them. If you do not provide us with this information, we normally have to refuse to enter into the contract or decline to carry it out, or we will no longer be able to execute an existing contract and are therefore forced to terminate it.
6. Do you use an automated decision-making process, including profiling?
We categorically do not use a fully-automated decision-making process including profiling, in accordance with Article 22 of the GDPR.
7. Links to the websites of other providers
In order to expand the information available, our website may contain links to other providers’ websites. We have no influence on the adherence of these sites to the data protection and security provisions. As a result, our Data Protection Declaration does not extend to these websites.
Effective as of May 2019