Data Protection
Privacy Policy
SwissTrustOne is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share information in connection with your use of our platform and services, in compliance with the Swiss Federal Act on Data Protection (FADP) and the European Union General Data Protection Regulation (GDPR).
Data We Collect
We collect personal information necessary to provide our financial services, including: identity verification data (full name, date of birth, government-issued identification), contact information (email address, phone number, residential address), financial information (source of funds, investment history, bank account details), technical data (IP address, device identifiers, browser type, session logs), and communication records (correspondence with our advisory team and support staff). We collect this data directly from you, through automated systems, and from third-party verification providers.
Legal Basis for Processing
We process your personal data on the following legal bases: (a) Contractual necessity — to fulfill our obligations under your client agreement; (b) Legal obligation — to comply with AML, KYC, and financial regulatory requirements; (c) Legitimate interests — to improve our services, prevent fraud, and ensure platform security; (d) Consent — for marketing communications and optional data sharing, which you may withdraw at any time. We do not sell your personal data to third parties.
Data Retention
We retain your personal data for the duration of our client relationship and for a minimum of 10 years thereafter, as required by Swiss financial regulations and anti-money laundering laws. Technical logs are retained for 24 months. Marketing preferences are retained until you withdraw consent. Upon expiry of the retention period, data is securely destroyed using industry-standard methods. You may request early deletion of non-mandatory data subject to regulatory constraints.
Data Sharing & Transfers
Your data may be shared with: regulated financial institutions and custodians involved in executing your investments; identity verification and compliance service providers; tax authorities and regulatory bodies as required by law; and our professional advisors (legal, audit, and accounting). All third-party processors are bound by data processing agreements. International transfers outside Switzerland or the EEA are conducted under Standard Contractual Clauses or equivalent safeguards.
Your Rights
Under applicable data protection law, you have the right to: access a copy of your personal data; rectify inaccurate or incomplete data; request erasure of data no longer required for its original purpose; restrict or object to certain processing activities; receive your data in a portable format; and lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority. To exercise any of these rights, contact our Data Protection Officer.
Security Measures
We implement institutional-grade security measures including AES-256 encryption for data at rest, TLS 1.3 for data in transit, multi-factor authentication, role-based access controls, continuous security monitoring, and annual third-party penetration testing. Our infrastructure is hosted in ISO 27001-certified data centers located in Switzerland. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours of becoming aware.
Cookies & Tracking
We use strictly necessary cookies to maintain session security and platform functionality. With your consent, we may use analytical cookies to understand platform usage patterns and improve our services. We do not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings or our cookie preference center. Disabling strictly necessary cookies may impair platform functionality.
Data Protection Officer
Contact our DPO for privacy-related inquiries at dpo@swisstrustonegroup.com or write to SwissTrustOne Data Protection Officer, Bahnhofstrasse 21, 8001 Zürich, Switzerland.