# Privacy Policy

## **Summit Fintech (Swiss) AG**

Summit Fintech (Swiss) AG (“Summit Fintech”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with applicable data protection laws, including the **Swiss Federal Act on Data Protection (FADP)** and the **General Data Protection Regulation (GDPR)** where applicable.&#x20;

This Privacy Policy explains how we collect, use, and protect personal information when you use the website:&#x20;

\*\*<https://www.summitfintech.ch**&#x20>;

or any related services.

### 1. Data Controller

The data controller responsible for processing personal data is:&#x20;

**Summit Fintech (Swiss) AG** \
Gubelstrasse 11 \
Zug, 6300 \
Switzerland&#x20;

Email: **<info@summitfintech.ch>**&#x20;

### 2. Personal Data We Collect

We may collect the following categories of personal data:

#### 2.1 Website Data

When you visit our website, we may collect:&#x20;

* IP address&#x20;
* Browser type&#x20;
* Device information&#x20;
* Pages visited&#x20;
* Date and time of access&#x20;
* Referring website&#x20;

This data is used for:&#x20;

* Security monitoring&#x20;
* System administration&#x20;
* Website improvement&#x20;

#### 2.2 Contact Information

If you contact us, we may collect:&#x20;

* Name&#x20;
* Email address&#x20;
* Company name&#x20;
* Phone number&#x20;
* Message contents&#x20;

This data is used to:&#x20;

* Respond to enquiries&#x20;
* Provide services&#x20;
* Maintain business relationships

#### 2.3 Business and Compliance Data&#x20;

If you use our services or request onboarding, we may collect:&#x20;

* Identification information&#x20;
* Corporate registration documents&#x20;
* Beneficial ownership information&#x20;
* Compliance documentation&#x20;
* Transaction-related information&#x20;

This data is processed to:&#x20;

* Perform Know Your Customer (KYC)&#x20;
* Perform Know Your Business (KYB)&#x20;
* Conduct Anti-Money Laundering (AML) checks&#x20;
* Meet regulatory requirements&#x20;

#### 2.4 Blockchain Data&#x20;

Our services may involve blockchain technology.&#x20;

Blockchain transactions may include:&#x20;

* Public wallet addresses&#x20;
* Transaction identifiers&#x20;
* Transaction metadata&#x20;

Blockchain records are permanent and publicly accessible.&#x20;

Summit Fintech does not control third-party blockchain networks.

### 3. Legal Basis for Processing&#x20;

We process personal data based on:&#x20;

#### Legal Obligations

Including:&#x20;

* Swiss Anti-Money Laundering regulations&#x20;
* Regulatory compliance requirements&#x20;
* Financial reporting obligations&#x20;

#### Contractual Necessity&#x20;

Processing required to provide services.&#x20;

Legitimate Interests&#x20;

Including:&#x20;

* Business operations&#x20;
* Security monitoring&#x20;
* Fraud prevention&#x20;
* Service improvement&#x20;

#### Consent&#x20;

Where required, such as:&#x20;

* Cookies&#x20;
* Marketing communications

### 4. Sharing of Personal Data

We may share personal data with:&#x20;

#### Regulatory Authorities&#x20;

Including:&#x20;

* Swiss regulatory authorities&#x20;
* Self-Regulatory Organisations (SRO)&#x20;
* Law enforcement agencies&#x20;

When legally required.&#x20;

#### Service Providers&#x20;

Including:&#x20;

* Cloud hosting providers&#x20;
* Compliance service providers&#x20;
* Identity verification providers&#x20;
* Payment service providers&#x20;

Service providers are contractually bound to protect data.&#x20;

#### Professional Advisors&#x20;

Including:&#x20;

* Auditors&#x20;
* Lawyers&#x20;
* Compliance consultants&#x20;

### 5. International Data Transfers&#x20;

Personal data may be transferred to countries outside Switzerland or the European Economic Area.&#x20;

Where such transfers occur, we ensure appropriate safeguards, including:&#x20;

* Standard contractual clauses&#x20;
* Adequate jurisdictions&#x20;
* Contractual protections

### 6. Data Retention&#x20;

We retain personal data only as long as necessary.&#x20;

Compliance data may be retained for: **10 years or longer**

where required by Swiss law.&#x20;

Website data is retained for a shorter period unless required for security.&#x20;

### 7. Data Security&#x20;

We implement appropriate technical and organisational measures including:&#x20;

* Encryption&#x20;
* Access controls&#x20;
* Secure infrastructure&#x20;
* Monitoring systems&#x20;

### 8. Your Rights&#x20;

Depending on your jurisdiction, you may have the right to:&#x20;

* Access your personal data&#x20;
* Correct inaccurate data&#x20;
* Request deletion&#x20;
* Restrict processing&#x20;
* Object to processing&#x20;
* Data portability&#x20;

Requests may be submitted to:&#x20;

**<info@summitfintech.ch>**&#x20;

### 9. Cookies&#x20;

Our website may use cookies and similar technologies.&#x20;

Cookies may be used for:&#x20;

* Essential website functionality&#x20;
* Security&#x20;
* Analytics&#x20;

You may control cookies through your browser settings.&#x20;

Where required, cookie consent will be requested.&#x20;

### 10. Third-Party Links&#x20;

Our website may contain links to third-party websites.&#x20;

We are not responsible for their privacy practices.&#x20;

### 11. Changes to this Policy&#x20;

We may update this Privacy Policy periodically.&#x20;

The latest version will always be available on:&#x20;

<https://www.summitfintech.ch&#x20>;

### 12. Contact&#x20;

For privacy enquiries, contact:&#x20;

**Summit Fintech (Swiss) AG**&#x20;

Email: **<info@summitfintech.ch>**&#x20;

### 13. Regulatory Status&#x20;

Summit Fintech (Swiss) AG operates as a **Virtual Asset Service Provider (VASP)** under Swiss regulations.&#x20;

Personal data may be processed for regulatory compliance and financial crime prevention purposes.&#x20;
