Privacy notice
How AXESS SUISSE AG collects, uses and protects personal data, in line with the Swiss FADP and the EU GDPR.
Who is responsible
The controller responsible for processing personal data in connection with this website and our business activities is:
Bahnhofstrasse 8
8953 Dietikon, Switzerland
Company ID (UID): CHE-182.261.553
Email: intouch@axess-suisse.com
For any question about data protection or to exercise your rights, contact us at the email address above with the subject line “Data protection”.
Scope and applicable law
This notice explains how we collect and use personal data when you visit our website, contact us, or deal with us as a business partner, investor, counterparty or service provider.
As a Swiss company we are subject to the Swiss Federal Act on Data Protection (FADP). Where our processing falls within the scope of the EU General Data Protection Regulation (GDPR) — in particular when we offer services to, or monitor the behaviour of, individuals in the European Union or the European Economic Area — we also comply with the GDPR. References to legal bases below follow the GDPR.
Personal data we process
- Website usage data. When you visit the website, our hosting provider automatically records technical data such as your IP address, date and time of access, pages requested, referring URL, browser type and operating system (server log files).
- Contact data. When you email us or message us on WhatsApp, we process your name, contact details, the content of your message and any information you choose to share.
- Business relationship data. For counterparties, investors, portfolio companies and service providers we process names, job titles, company affiliation, contact details, correspondence, contractual and transaction data and, where required by law, identification and due diligence data (e.g. for anti-money-laundering checks).
We do not intentionally collect special categories of personal data (such as health data) through this website.
Purposes and legal bases
- Providing and securing the website — legitimate interests in a stable, secure website (Art. 6(1)(f) GDPR).
- Responding to enquiries — taking steps prior to entering into a contract or performing a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering communications (Art. 6(1)(f) GDPR).
- Investments, consulting and contract management — performance of a contract (Art. 6(1)(b) GDPR) and legitimate interests in running our business (Art. 6(1)(f) GDPR).
- Legal and regulatory compliance, including bookkeeping, tax and anti-money-laundering duties — compliance with a legal obligation (Art. 6(1)(c) GDPR).
- Establishing, exercising or defending legal claims — legitimate interests (Art. 6(1)(f) GDPR).
Where we rely on your consent, you can withdraw it at any time with effect for the future.
Who receives your data
We only share personal data where necessary for the purposes above, with:
- IT, hosting and email service providers acting as our processors under data processing agreements;
- professional advisers such as lawyers, auditors, tax advisers and banks;
- portfolio companies, co-investors or transaction counterparties, where required for a transaction;
- courts, authorities and other public bodies, where we are legally required to do so.
We do not sell personal data.
International transfers
Our company is based in Switzerland, which the European Commission recognises as providing an adequate level of data protection. Some of our service providers may process data in other countries, including the United States. Where data is transferred to a country without an adequate level of protection, we ensure appropriate safeguards, such as the EU Standard Contractual Clauses (with the Swiss addendum) or certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. You can request a copy of the relevant safeguards from us.
How long we keep data
- Server log files are deleted or anonymised after no more than 30 days, unless needed to investigate a security incident.
- General enquiries are kept for as long as needed to handle them and are then deleted, usually within 12 months.
- Business records and correspondence relevant to accounting are kept for 10 years, as required by Swiss commercial law (Art. 958f Swiss Code of Obligations), or longer if needed to defend legal claims.
Your rights
Subject to the applicable law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data rectified;
- have your data erased;
- restrict processing;
- receive your data in a structured, commonly used format (data portability);
- object at any time to processing based on our legitimate interests, on grounds relating to your particular situation;
- withdraw any consent you have given, without affecting the lawfulness of prior processing.
To exercise these rights, email intouch@axess-suisse.com. We may ask you to verify your identity. We respond within one month, as required by law.
Right to lodge a complaint
You have the right to complain to a data protection supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you are in the EU or EEA, you may also contact the supervisory authority in your country of residence, place of work or place of the alleged infringement.
Security and automated decisions
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted (HTTPS) connections to this website and restricted internal access.
We do not use automated decision-making, including profiling, that produces legal or similarly significant effects for you.
Changes to this notice
We may update this notice to reflect changes in our activities or the law. The current version is always published on this page.
