Privacy Policy
IDEAS welcome you to our website, mobile applications and other services provided via electronic
means (together referred to as “Electronic Services”) and appreciate your interest in our products
and services. IDEAAS attaches importance to appropriate data protection. This page explains how we
treat your personal data in connection with your use of our Electronic Services (“Privacy Policy”).
By continuing to use the IDEAAS, you confirm that you are 18 years of age or older. Please note that
we may amend this Privacy Policy from time to time. The applicable version is always the current
one, as referenced above (last updated).
Purpose and scope of the privacy policy:
Protecting your privacy and treating the personal data of all users of our Electronic Services in
accordance with the law is important to us. We understand that by using our Electronic Services you
may be entrusting us with personal information (“data”) and assure you that we take our duty to
protect and safeguard this data very seriously. This Privacy Policy therefore explains the kind of
data we process when using our Electronic Services, the purpose for which we process it, how we
process it, whom we may disclose it to and the security measures we have put in place to protect
it.
This Privacy Policy applies to all data we obtain through your use of our Electronic Services. It
does not apply to data we obtain through other channels nor to Electronic Services of third parties
(“third-party Electronic Services”), even if you access them via a link in our Electronic Services
or even if they are necessary for the operation of our Electronic Services. We have no influence on
the content or privacy policy of third-party Electronic Services and therefore cannot assume any
responsibility for them.
Types of data being processed:
When you use our Electronic Services, details of your usage may be automatically registered by our
backend systems (such as your IP address, browser, http-header user agent, device-specific
information the content you accessed, including time and date of access, usage and user interaction,
and the redirecting website from which you came to our Electronic Services). We also process
personal data such as your name, address, e-mail address, phone number, date of birth, gender and
other data transmitted to us if you register for the usage of our Electronic Services or if you
complete a registration form or comment field for a newsletter, product demos, etc..
Legal grounds and purpose of data processing
We process the data based on the following legal grounds:
-For the performance of a contract to which you are a party or in order to take steps at your
request prior to entering into a contract;
-For compliance with a legal obligation to which we are subject;
-For the purposes of our legitimate interests.
We process the data for the following purposes:
-To comply with bank’s own internal guidelines;
-To check the identity and suitability of clients for certain products and services;
-To establish a basis for future information on the products and services offered by IDEAAS and to
improve their quality;
-To facilitate technical administration, research and further development in connection with the
Hellenium;
-To ensure the security and operation of our IT environment;
-To use it for marketing and advertising measures (e.g. newsletters via e-mail, online advertising);
-To analyse and monitor the usage, user behaviour and navigation while using the Electronic
Services;
-To facilitate client administration.
We process all your personal data in accordance with the applicable laws on data protection and for
as long as required.
Disclosure of electronic services usage data
IDEAAS only discloses Electronic Services usage data to third parties as permitted by law, if we
are legally obliged to do so or if such disclosure becomes necessary to enforce our rights, in
particular to enforce claims arising from a contractual relationship. Within this scope as well as
for the purpose of optimising our products and services, we may transmit data within the IDEAAS
Group between Group companies in Switzerland or abroad. Furthermore, we may disclose data to
external service providers if this is necessary for the provision of products and services. Such
service providers may not use the data for any other purpose than to process the order in question.
All of the above persons and entities that may receive data must observe the applicable national and
international data protection laws as well as the data protection standards of IDEAAS.
Where so prescribed by applicable legislation, IDEAASmay on request or under an ongoing duty to
provide information disclose data to supervisory authorities, judicial authorities or other persons
of authority.
Security measures of IDEAAS
IDEAAS will make every effort to take appropriate technical and organisational security measures to
ensure that your personal data processed within the IT environment controlled by IDEAAS is protected
against unauthorised access, misuse, loss and/or destruction, taking account of the applicable legal
and regulatory requirements.
IDEAAS takes both physical and electronic process-specific security measures, including firewalls,
personal passwords, and encryption and authentication technologies. Our employees and the service
providers commissioned by us are bound by professional secrecy and must comply with all data
protection provisions.
Additionally, access to personal data is restricted to only those employees, contractors and third
parties who require this access in order to assure the purpose of data processing and the provision
of products and services (need to know principle).
Transmission of data via an open network
IDEAAS would like to draw your attention to the fact that if you use our Electronic Services via an open network, this may allow third parties (e.g. app stores, network providers or the manufacturer of your device), wherever they are located, to access and process your data. Open networks are beyond IDEAAS control and can therefore not be regarded as a secure environment. Any transmission of data via such open network cannot be guaranteed to be secure or error-free as data may be intercepted, amended, corrupted, lost, destroyed, arrive late or incomplete, contain viruses or may be monitored. In particular, data sent via an open network may leave the country – even where both sender and recipient are in the same country – and may be transmitted to and potentially processed in third-party countries, where data protection requirements may be lower than in your country of residence.
Where data is transmitted via an open network, we cannot be held responsible for the protection of this data and we accept no responsibility or liability for the security of your data during transmission. We, therefore, recommend avoiding the transmission of any confidential information via open networks.
