Privacy Policy
1. Controller
El Gebali Crypto, owner Akram El Gebali
[Street and house number], [Postal code] Allschwil, Switzerland
Email: info@elgebali-crypto.ch
For data protection inquiries, you can reach us at the email address above.
2. What data we process
a) Order form: When you place an order through our website, we collect your name, email address, wallet address, order amount, the cryptocurrency selected, and the time and rate of the order.
b) Identification under the Anti-Money Laundering Act (AMLA): As a financial intermediary affiliated with the self-regulatory organization VQF, we are legally required, depending on the transaction amount and circumstances, to collect and verify identification data (e.g. copies of identity documents, information on beneficial ownership). This collection takes place as part of the process established for that purpose and is a legal obligation — without this information, we may not execute certain transactions.
c) Payment data: For bank transfers, we see the details transmitted by your bank (name, IBAN, payment reference).
d) Technical data: When you visit the website, technical access data is generated server-side (e.g. IP address, date/time, page accessed), which is processed by our hosting providers to ensure operation and security.
3. Purposes of processing
- Contract processing: receiving, confirming and executing your order, communication (order confirmation, payment reminder).
- Legal obligations: fulfilling due diligence, documentation and retention obligations under the AMLA and other legal requirements.
- Security and operation: ensuring secure, stable operation of the website and order systems, prevention of misuse.
4. Recipients and processors
We use carefully selected service providers for our operations, who process personal data on our behalf:
- Cloudflare, Inc. (USA/EU): hosting of the order systems and database; order data is stored in a data center in Western Europe.
- Hostinger (EU): website hosting.
- Resend / Amazon Web Services (EU, Ireland region): sending transactional emails (order confirmations, reminders).
- Banks: processing of payments.
Disclosure to authorities takes place only where we are legally required to do so (e.g. reports to the competent authorities under the AMLA).
Where data is transferred to countries without an adequate level of data protection, the transfer is based on appropriate safeguards (in particular the recognized standard data protection clauses of the respective providers).
5. Retention
We retain transaction and identification records for ten years in accordance with the requirements of the AMLA. Other personal data is deleted or anonymized as soon as it is no longer required for the purposes stated above and no statutory retention obligations apply.
6. Cookies and Tracking
Our website does not use tracking or marketing cookies and no analytics services. Only technically necessary functions are used.
7. Your Rights
Under the FADP, you have in particular the right to access the data processed about you, to have inaccurate data corrected, to have data deleted (unless statutory retention obligations — in particular under the AMLA — apply), and to receive a copy of your data. Please contact info@elgebali-crypto.ch for this purpose. We may require proof of identity to process your request.
8. Changes
We may amend this privacy policy as needed. The version published on this website at any given time shall apply.