Privacy & Cookie Policy

1Data Controller & Contact

The data controller for your personal data is Helveticard SA, registered in Geneva, Switzerland. For any questions regarding data protection, compliance, or to exercise your statutory rights, you may contact our Data Protection Officer (DPO) at the following our contact form.

2Legal Basis for Processing (GDPR Article 6)

We process personal data in accordance with the GDPR and FADP based on the following legal grounds:

• Contractual Necessity (Art. 6(1)(b) GDPR): To perform card issuing operations, manage cardholder accounts, and execute payment transactions.
• Legal Obligations (Art. 6(1)(c) GDPR): To comply with financial regulations, anti-money laundering (AML) laws, and know-your-customer (KYC) requirements.
• Legitimate Interests (Art. 6(1)(f) GDPR): To monitor system security, prevent fraudulent transactions, and optimize our financial service quality.

3Categories of Data Collected & Core Processor

We collect and process only the minimum data required for card issuing, including: identification data, financial profiles, transaction logs, and balances. For core transaction and card processing services, Helveticard SA partners with Thredd (Thredd UK Limited / Thredd OpenLoop IP Limited). Data transmission to Thredd is governed by strict technical, organizational, and contractual privacy safeguards.

4Data Retention Period

Personal data is retained in accordance with financial regulatory mandates and Swiss commercial record-keeping laws. All accounting logs, core transaction records, and contract-related personal data will be kept for a mandatory retention period of 10 years following the end of the fiscal year or contract termination.

5Data Transfer Outside the EEA/Switzerland

Data transfers to external service providers or international financial networks are subject to strict safeguards, including EU Standard Contractual Clauses (SCCs) and adequacy decisions, ensuring an equivalent level of data protection.

6Your Rights under GDPR

As a data subject, you possess the following explicit rights under GDPR and FADP legislation: Right of Access & Rectification, Right to Erasure ('Right to be Forgotten'), Right to Restriction & Object, Right to Data Portability, and the Right to Lodge a Complaint with a relevant European Supervisory Authority or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

7What Are Cookies?

Cookies are small text files stored on your computer or mobile device when you visit our website. They are widely used to make websites work more efficiently, improve user experience, and provide analytical data to the website operators.

8How and Why We Use Cookies

Helveticard SA uses cookies to ensure secure navigation, protect user accounts, maintain web application performance, and understand how visitors interact with our services. These cookies are categorized based on their technical necessity and purpose under GDPR rules.

9Categories of Cookies Used

10Managing and Disabling Cookies

Upon your first visit to our website, a Cookie Consent Banner will allow you to accept or refuse non-essential cookies (Analytical and Functional). You can also manage, block, or delete cookies at any time through your web browser settings. Please note that disabling technical or strictly necessary cookies may restrict your access to key security features and operational aspects of our card management infrastructure.