Privacy Policy

1. Introduction

This Privacy Policy explains how Swisspayments (hereinafter: "Swisspayments", "we", "our" or "us") collects, uses, stores, and protects your personal data when you access our website swisspayments.ch or use any of our services.

We are committed to ensuring the confidentiality, integrity and availability of your personal data, in compliance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller is:

Swisspayments
Rue du Mont-Blanc 11
1201 Geneva, Switzerland
CHE- 492.759.632
compliance@swisspayments.ch

3. Scope of Application

This policy applies to:

• Visitors of our website;
• Clients and merchants using our payment infrastructure;
• Natural persons linked to corporate clients (e.g. UBOs, directors);
• Business partners, suppliers and service providers.

4. What Personal Data We Collect

We collect and process the following categories of personal data:

5. Purpose of Processing

We process your data for the following purposes:

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by Swiss law (e.g. 10 years under the Code of Obligations for transactional data).

7. Data Sharing

We may share your data with:

• Regulatory authorities (e.g. FINMA, MROS) when legally required;
• SO-FIT, our OAR, for compliance supervision;
• Third-party service providers, such as:
  • KYC/AML providers
  • IT infrastructure (cloud, cybersecurity)
  • Payment partners (banks, PSPs, crypto processors)

All partners are contractually bound to ensure data protection and may only process data on our instructions.

8. Data Transfers Abroad

Where we transfer data outside of Switzerland or the EEA, we ensure such transfers comply with the revFADP and, if applicable, GDPR requirements (e.g. Standard Contractual Clauses, adequacy decisions).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption
• Role-based access control
• Secure servers located in Switzerland and/or the EU
• Regular penetration testing
• Data pseudonymisation and minimisation

10. Your Rights as a Data Subject

Under the revFADP, you have the following rights:

• Access to your data
• Rectification of inaccurate or outdated data
• Erasure where permitted by law
• Objection to processing (in certain cases)
• Data portability (if processing is automated and based on consent or contract)

To exercise your rights, please Sign up at compliance@swisspayments.ch with proof of identity.

11. Use of Cookies

We use cookies for technical operation, analytics and site optimization. You can control cookie settings through your browser. Details are available in our Cookie Policy.

12. Automated Decision-Making

Swisspayments does not perform automated decisions that produce legal effects on users without human intervention (e.g., credit scoring, profiling). If this changes, we will inform you in advance and obtain explicit consent if required.

13. Updates to This Policy

This Privacy Policy may be updated periodically. We encourage users to review this page regularly to stay informed of changes. The date of the latest version is always indicated at the top of the document.

14. Contact

For all data protection-related questions or to exercise your rights:

Data Protection Officer (DPO)
compliance@swisspayments.ch
Swisspayments – Rue du Mont-Blanc 11, 1201 Geneva, Switzerland