AmKey

Privacy Policy

1. Introduction

AmKey (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our banking services, website, and mobile applications.

We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Swiss Federal Act on Data Protection (FADP).

2. Information We Collect

2.1 Personal Information

  • Full name, date of birth, and nationality
  • Contact information (address, email, phone number)
  • Government-issued identification numbers
  • Financial information (income, assets, account numbers)
  • Employment and professional information
  • Tax identification numbers and residency status

2.2 Technical Information

  • IP address and device identifiers
  • Browser type and version
  • Operating system and platform
  • Login data and access times
  • Pages visited and interactions with our services

2.3 Transaction Information

  • Account transaction history
  • Payment and transfer details
  • Investment activities and portfolio information
  • Credit and loan information

3. How We Use Your Information

We use your information for the following purposes:

  • Service Provision: To provide banking services, process transactions, and manage your accounts
  • Legal Compliance: To comply with anti-money laundering (AML), know your customer (KYC), and other regulatory requirements
  • Security: To detect and prevent fraud, unauthorized access, and other illegal activities
  • Communication: To send account statements, alerts, and respond to inquiries
  • Improvement: To enhance our services and develop new products
  • Marketing: With your consent, to inform you about products and services that may interest you
  • Risk Management: To assess creditworthiness and manage financial risks

4. Legal Basis for Processing

We process your personal data based on:

Contract Performance

Processing necessary to provide banking services under our agreement with you

Legal Obligations

Processing required by banking regulations and laws

Legitimate Interests

Processing for fraud prevention and business improvement

Consent

Processing for marketing and optional services based on your consent

5. Information Sharing and Disclosure

We may share your information with:

  • Regulatory Authorities: Financial supervisory authorities, tax authorities, and law enforcement agencies as required by law
  • Service Providers: Third-party vendors who assist in providing our services (under strict confidentiality agreements)
  • Financial Networks: Payment processors, clearing houses, and correspondent banks for transaction processing
  • Professional Advisors: Auditors, lawyers, and consultants bound by professional confidentiality
  • Group Companies: Other entities within the AmKey group for operational purposes
  • Business Transfers: In case of merger, acquisition, or asset sale (with appropriate safeguards)

6. International Data Transfers

As an international bank, we may transfer your data to countries outside your jurisdiction. We ensure appropriate safeguards through:

  • Standard Contractual Clauses approved by regulatory authorities
  • Adequacy decisions recognizing equivalent data protection standards
  • Binding Corporate Rules within our group
  • Your explicit consent where required

7. Data Security

We implement comprehensive security measures including:

Technical Measures

  • 256-bit SSL encryption
  • Multi-factor authentication
  • Firewall protection
  • Regular security audits

Organizational Measures

  • Staff training and confidentiality
  • Access controls and monitoring
  • ISO 27001 certification
  • Incident response procedures

8. Data Retention

We retain your personal data for as long as necessary to:

  • Provide services and maintain your account
  • Comply with legal retention requirements (typically 10 years for financial records)
  • Resolve disputes and enforce agreements
  • Meet regulatory audit and examination requirements

After the retention period, we securely delete or anonymize your data.

9. Your Rights

Depending on your location, you may have the following rights:

Under GDPR (European Union)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Under CCPA (California)

  • Right to know what information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information
  • Right to non-discrimination

To exercise your rights, contact our Data Protection Officer at [email protected]or call +41 22 123 4567.

10. Children’s Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors without parental consent. If you believe we have collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through our website, email, or account notifications. The “Last updated” date at the top indicates the most recent revision.

12. Contact Information

Data Protection Officer

Email: [email protected]

13. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).