Privacy Policy

Last Updated: October 26, 2023 Version: 4.2.1

Commitment to Data Integrity

Swisstrade Analysis operates as a critical infrastructure layer for professional and institutional traders. We recognize that in the financial markets, data security is indistinguishable from operational reliability. This Privacy Policy delineates our systematic approach to collecting, processing, and safeguarding your operational and personal data with institutional-grade protocols.

1. Information Collection Architecture

KYC & Identity Data

  • Legal name and corporate entities
  • Government-issued identification
  • Proof of residence and tax residency
  • Source of funds documentation

Telemetry & Execution Data

  • Order routing and execution timestamps
  • Trading strategy parameters (encrypted)
  • API connection logs and latency metrics
  • Hardware fingerprinting for security

2. Processing & Utilization

Your data is processed explicitly for the execution of financial services and maintenance of system integrity:

Processing PurposeData Category UsedLegal Basis (GDPR)
Order Execution & RoutingExecution Data, Account IDPerformance of Contract
Risk Management & Margin CallsAccount Balance, Open PositionsLegitimate Interest
AML / KYC ComplianceIdentity Data, Source of FundsLegal Obligation

3. Institutional Data Sharing

We operate a strict zero-monetization policy on client data. Sharing occurs strictly within the operational pipeline:

Tier-1 Liquidity Providers

Anonymized order flow data is transmitted to execution venues (ECNs, Dark Pools, Prime Brokers) to facilitate trade settlement. No identifiable client data is shared.

Regulatory Authorities

Mandatory transaction reporting (e.g., MiFID II, EMIR) is submitted to designated national competent authorities and trade repositories as required by jurisdictional law.

Cryptographic Security Standards

AES-256At-Rest Encryption
TLS 1.3In-Transit Encryption
FIPS 140-2Hardware Security Modules
MFAMandatory Access Control

All client infrastructure is isolated within virtual private clouds (VPCs). Cold storage procedures are mandated for sensitive cryptographic material, with multi-signature authorization required for operational changes.

Contact the Data Protection Officer

For inquiries regarding GDPR compliance, data subject access requests (DSAR), or the right to be forgotten, initiate secure communication with our compliance desk.

Submit DSAR Request
PGP Key: 0x8F92A1B3