Last updated: September 2026
We take the protection of your personal data seriously. This privacy policy explains which personal data we process when you visit smbccapital.com or contact us, for what purposes and on what legal basis, and which rights you have. It is based on the Swiss Federal Act on Data Protection (FADP, in force in its revised version since 1 September 2023) and, where it applies to visitors from the European Union / European Economic Area (Art. 3(2) GDPR), on the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for the processing of personal data on this website is:
SMBC Capital
Zugerstrasse 32, 6340 Baar, Switzerland
Email: info@smbccapital.com
If you have any questions about data protection, please contact us at the address above.
2. Principles and legal bases
We process personal data lawfully, in good faith, proportionately and only for the purposes described in this policy (Art. 6 FADP). Where the GDPR applies, we rely on the following legal bases: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR) and our legitimate interests (Art. 6(1)(f) GDPR). Under Swiss law, processing is justified in particular by your consent, by law or by an overriding private or public interest (Art. 31 FADP).
3. Server log files and hosting
This website is hosted by an external service provider. When you access the website, the server automatically records information that your browser transmits: the IP address, the date and time of the request, the page requested, the referrer URL, the browser type and version and the operating system. This data is required to deliver the website, to ensure its stability and security and to detect misuse. It is not merged with other data sources and is deleted after a short period, unless it is needed to investigate a security incident.
The legal basis is our legitimate interest in the secure and error-free operation of the website (Art. 6(1)(f) GDPR; overriding interest under Art. 31 FADP). The hosting provider processes the data on our behalf under a data processing agreement (Art. 9 FADP, Art. 28 GDPR).
4. Cookies and consent management
This website uses cookies. Cookies are small text files stored on your device. Essential cookies are required for the website to work; all other cookies are set only with your consent. On your first visit, our cookie notice offers the buttons "Options", "Reject" and "Accept" with equal prominence; under "Options" you can choose the following categories individually:
- Essential (always on): needed for the website to work, stay secure and remember your choice. Your decision is stored in the first-party cookie ck_consent_v2 (a JSON record of your choice, stored for 1 year).
- Analytics (only with your consent): Google Analytics, see section 5.
- Marketing (only with your consent): Google Ads; Meta: Facebook and Instagram, see section 6.
You can change or withdraw your choice at any time via the Cookie Preferences link in the footer of every page. When you withdraw your consent, the analytics and marketing cookies stored on this domain (_ga, _ga_*, _gcl_au, _fbp, _fbc) are deleted. A detailed list of the cookies, their purposes and storage periods can be found in our Cookie Policy.
5. Web analytics: Google Analytics
Subject to your consent, this website uses Google Analytics 4 (measurement ID G-72HWVEQ65G), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (_ga, _ga_*) to help us understand how visitors use our website, for example which pages are visited and for how long. According to Google, Google Analytics 4 does not log or store IP addresses.
The Google Analytics script is loaded only after you have given your consent in the "Analytics" category; before that, no request is sent to Google Analytics. The legal basis is your consent (Art. 6(1)(a) GDPR; Art. 31(1) FADP). You can withdraw your consent at any time with effect for the future via the Cookie Preferences link.
Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework; transfers are therefore based on the European Commission's adequacy decision of 10 July 2023 and on the recognition of adequate protection by the Swiss Federal Council (in force since 15 September 2024), supplemented by standard contractual clauses. Further information: Google Privacy Policy.
6. Marketing: Google Ads and Meta (Facebook and Instagram)
We may use Google Ads conversion measurement (Google Ireland Limited) and advertising tools of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Facebook and Instagram) to measure the impact of our advertising and to show relevant ads. These tools are loaded only if you have given your consent in the "Marketing" category; without that consent no request is sent to Google Ads or Meta. They may set the cookies _gcl_au (Google Ads), _fbp and _fbc (Meta). At present, no such marketing tag is active on this website.
The legal basis is your consent (Art. 6(1)(a) GDPR; Art. 31(1) FADP), which you can withdraw at any time via the Cookie Preferences link. Data may be transferred to Google LLC and Meta Platforms, Inc. in the USA; both are certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.
7. Google Fonts and Google Maps
To display the website consistently, fonts are loaded from the Google Fonts service (fonts.googleapis.com, fonts.gstatic.com) of Google. For this purpose your browser connects to Google's servers, and your IP address is transmitted to Google. Google Fonts does not set cookies.
Our contact page contains an embedded map from Google Maps (Google). When the map is displayed, your IP address and technical browser information are transmitted to Google, and Google may set its own cookies on the google.com domain in accordance with its privacy policy. If you prefer, you can find our address in text form on the contact page instead.
The legal basis is our legitimate interest in an appealing presentation of our website and in making our location easy to find (Art. 6(1)(f) GDPR; overriding interest under Art. 31 FADP). Transfers to Google LLC in the USA take place under the Data Privacy Framework described in section 5.
8. Contact by email
If you contact us by email (for example at info@smbccapital.com), we process the information you provide in order to handle your enquiry and any follow-up questions. The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR; Art. 31 FADP). We delete this data once it is no longer required, unless statutory retention obligations apply.
9. Job applications
For the processing of personal data in recruitment procedures, our Candidate Privacy Notice applies in addition, together with, for the voluntary extended retention of your documents in our talent pool, our Explicit Consent declaration.
10. Recipients and processors
We do not sell personal data. Within our company, only the persons who need the data to perform their tasks have access to it. We use carefully selected service providers (in particular hosting and IT service providers) who process personal data on our behalf and in accordance with our instructions (Art. 9 FADP, Art. 28 GDPR). The providers named in sections 5 to 7 receive data as described there. We may also disclose data where we are legally required to do so.
11. Transfers abroad
We process personal data primarily in Switzerland. The European Commission has recognised that Switzerland provides an adequate level of data protection. Where personal data is transferred to a country that does not provide an adequate level of protection, we do so only in accordance with Art. 16 et seq. FADP and Art. 44 et seq. GDPR, in particular on the basis of standard contractual clauses or, for the USA, the Data Privacy Framework (see section 5).
12. Retention
We store personal data only for as long as it is needed for the purposes for which it was collected, or for as long as statutory retention periods (for example under Swiss commercial and tax law) require. The storage periods of cookies are listed in our Cookie Policy.
13. Your rights
Subject to the applicable law, you have the following rights:
- Right of access (Art. 25 FADP; Art. 15 GDPR)
- Right to rectification (Art. 32 FADP; Art. 16 GDPR)
- Right to erasure (Art. 32 FADP; Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 28 FADP; Art. 20 GDPR)
- Right to object to processing (Art. 30 and 32 FADP; Art. 21 GDPR)
- Right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR); for cookies, via the Cookie Preferences link
To exercise these rights, please contact us at info@smbccapital.com. We may ask you to verify your identity.
14. Right to lodge a complaint
You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland (www.edoeb.admin.ch). If the GDPR applies, you may also lodge a complaint with a data protection supervisory authority in the EU/EEA member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
15. Data security
We use appropriate technical and organisational measures to protect personal data. This website uses SSL/TLS encryption; you can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
16. Changes to this privacy policy
We may amend this privacy policy to reflect changes in the law or in our services. The version published on this website applies.