Eti-Tech AG offers its services from Switzerland to clients in Switzerland. We do not market, advertise or offer services in your country, and nothing on this website is an offer, solicitation or invitation directed at residents of your jurisdiction.
By clicking the button "Confirm and Continue" below, you confirm that
www.eti-tech.ch — Version 2.0 — 29 July 2026
The website www.eti-tech.ch is produced and published by Eti-Tech AG, Müligässli 1, 8598 Bottighofen, Switzerland ("Eti-Tech", "we", "us"), registered in the Commercial Register of the Canton of Thurgau. Eti-Tech AG is a member of the VQF Self-Regulatory Organisation (SRO) since November 2023 and is a Virtual Asset Service Provider (VASP) within the meaning of Art. 2 para. 3 of the Swiss Federal Act on Combating Money Laundering and Terrorist Financing (AMLA), supervised in that capacity through its VQF membership. Eti-Tech AG takes its data protection obligations with the utmost seriousness.
We are responsible for the collection, processing and use of your personal data in accordance with applicable law, including the Swiss Federal Act on Data Protection (revDSG/nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR). We are committed to protecting your personal data and your privacy.
This Privacy Policy explains how Eti-Tech AG collects, uses, and discloses your personal data. Please read it carefully. Where the processing of your personal data requires your consent (for example, for marketing communications or non-essential cookies), we will request this separately and explicitly. Your access to or use of the website does not in itself constitute consent to any processing of personal data.
The data controller responsible for the processing of your personal data is:
Eti-Tech AG
Müligässli 1, 8598 Bottighofen, Switzerland
Email: compliance@eti-tech.ch
Website: www.eti-tech.ch
For data protection enquiries, including in your capacity as a data subject, please contact us at compliance@eti-tech.ch. This address is monitored by our compliance team and can be used by data subjects and supervisory authorities to raise data protection questions or concerns.
When you visit our website for informational purposes only, our systems automatically collect the following technical data:
As a VASP and VQF SRO member, Eti-Tech AG is legally required to verify the identity of its customers (KYC – Know Your Customer) before providing services. When you register or place an order, we collect the following data depending on your account type:
Individual Accounts:
When you use our exchange, conversion, and non‑custodial wallet services, we collect:
Note on wallet addresses and blockchain data: Public wallet addresses and transaction hashes, when held by Eti-Tech in combination with your KYC identity information, constitute personal data and are treated as such throughout this Privacy Policy. Blockchain transactions are recorded on public, immutable ledgers beyond our control. The right to erasure applies to data held in Eti-Tech's systems but cannot extend to public blockchain records, which we have no technical ability to modify or delete.
If you contact us by email, chat or other channels, we retain the content of your messages together with your contact details in order to respond to your enquiry and maintain our compliance records. This includes communication via Telegram, via the chat function of a P2P platform and via our AI-based chat assistant (see Section 6.1).
If you transact with us via a peer-to-peer platform on which we act as merchant, we receive from the platform your username, the order details (order ID, amount, price, timestamps), the messages you exchange with us in the platform chat and, after verification, the name associated with your platform account. Our bank also provides us with the payer name and IBAN of your payment.
Where we do not collect data from you directly, we obtain it from: sanctions, PEP and adverse-media databases (via Sumsub); blockchain analytics providers; our banking partners; P2P platforms; and, where required for enhanced due diligence under our AML obligations, publicly available sources such as internet searches, company registers, social media and street-view services.
If you provide us with personal data about other persons (for example in payment references, support requests or source-of-funds documents), you must ensure that you are entitled to do so and that these persons are aware of it. We process such data in accordance with this Privacy Policy.
We use your personal data for the following purposes:
We process your personal data on the following legal bases:
Providing your personal data: by law (AMLA), you must provide the identification and due diligence data described in Sections 2.2 and 2.3 before we can open or maintain an account for you; without it we cannot enter into or continue a business relationship with you. The same applies to any additional information we request during the business relationship for enhanced due diligence, transaction monitoring or the periodic review of your client file (see Section 2.2). If you do not provide it within the period we set, we may restrict our services and, if necessary, terminate the business relationship. Providing data for marketing purposes and consenting to non-essential cookies is voluntary; refusing has no effect on your use of our services.
We retain your personal data only for as long as necessary for the purposes for which it was collected, and in strict accordance with our legal obligations under Swiss AML law (Art. 7 AMLA, Art. 64 VQF-Regulation, Art. 958 CO):
Customer identification and KYC records: Retained for a minimum of 10 years following the termination of the business relationship, as required by Art. 7 para. 3 AMLA and Art. 64 VQF-Regulation.
Transaction records and documentation: Retained for a minimum of 10 years after the end of the financial year in which the relevant transaction was executed or the report was made, in accordance with Art. 958 CO and Art. 7 para. 3 AMLA. This may therefore extend beyond 10 years from the end of the business relationship depending on when transactions occurred.
Other records:
After the applicable retention period, data is securely deleted or anonymised.
We do not sell, rent or trade your personal data to third parties. We may share your data in the following limited circumstances:
We engage carefully selected third-party providers to assist with identity verification (Sumsub), blockchain analytics and wallet screening, IT infrastructure, and compliance tooling. These providers act as data processors under contractual data protection agreements and are subject to confidentiality obligations. We currently use the following categories of providers:
We are required by Swiss law to disclose data to our supervisory authority, the VQF Self-Regulatory Organisation, and to the Money Laundering Reporting Office Switzerland (MROS), upon lawful request or where we have a legal obligation to report. This includes mandatory reporting under Art. 9 AMLA and sanctions reporting to SECO. FINMA, as the authority recognising VQF, may receive information indirectly through VQF's supervisory process, or directly where required by law.
International Tax Reporting (AEOI/CRS): Switzerland participates in the OECD Automatic Exchange of Information (AEOI) framework (Common Reporting Standard / CRS) via the AEOI Act (AEIA). Depending on your country of residence, Eti-Tech may be required to report your account information to the Swiss Federal Tax Administration (FTA), which may onward-transmit this to the competent tax authority in your country of residence. The legal basis is legal obligation (GDPR Art. 6(1)(c) / revDSG).
FINMA International Supervisory Cooperation: FINMA, as the authority recognising VQF and overseeing the Swiss financial market, has the power under AMLA Art. 29 to share supervisory information with foreign financial market authorities. Where information originates from Eti-Tech, it flows to FINMA via VQF's supervisory process; Eti-Tech has no control over such onward sharing by regulatory bodies once transmitted.
Important limitation on your rights: Your rights of access, rectification, and information under data protection law may be restricted or delayed to the extent required by applicable Swiss law, including anti-money-laundering legislation. This limitation applies for as long as the underlying legal obligation subsists. See Section 9 for how this affects your data subject rights generally.
We provide access to a non-custodial Wallet environment through a third-party Wallet infrastructure provider. When you provide a virtual asset wallet address or initiate a crypto transaction, we take steps to verify that the wallet is genuinely owned and controlled by the relevant party, as required by the Crypto Travel Rule (Art. 14 VQF-Regulation).
Where a wallet was provisioned through our Wallet service for a customer who has completed KYC, that provisioning constitutes evidence of that customer's ownership and control of the wallet in accordance with our AML/CTF Policy; we may nevertheless require additional verification on a risk-based basis. Where verification is required, we verify ownership and control of the relevant wallet using one or more recognised methods, which may include digital-signature / message-signing verification, micro-transaction ("Satoshi test") verification, or equivalent blockchain-analytics proof-of-control checks. This involves processing your wallet address together with the verification data produced by these methods.
Where you receive virtual assets from a wallet you do not own (for example, from a third party), we may request additional information about the source of those funds as part of our AML review, in accordance with Section 8.1A of our General Terms and Conditions.
As required by the Crypto Travel Rule (Art. 14 VQF-Regulation and FATF Recommendation 16), where we ourselves transfer virtual assets to, or receive them from, a wallet or account held at another VASP, we are required to transmit the following information to the receiving or sending VASP via a secure communication protocol:
This data transfer is a legal obligation and constitutes a disclosure to a third party (the counterpart VASP) that we are required to make regardless of your consent. We may reject, delay, or hold any incoming transaction where the Travel Rule information required from the sending side is insufficient, cannot be validated, or is not provided in a form we can process. The safeguards applicable to this transfer — including the legal basis under Swiss and EU data protection law where the receiving VASP is located outside Switzerland or an adequate jurisdiction — are set out in Section 6.7 below.
Limited transaction data is shared with our banking and payment partners (including details required under Art. 10 AMLO-FINMA for fiat transfers: customer name, account number, address or date of birth) as required to process your transactions. Our banking partners are currently Relio and Maerki Baumann & Co. AG, both in Switzerland. They act as independent controllers and may request information from us where required by their own AML obligations.
Where necessary to establish, exercise or defend legal claims.
Certain processing activities require the transfer of personal data outside Switzerland. The following summarises the transfer categories and applicable safeguard mechanisms:
(a) Travel Rule transfers to foreign VASPs: mandatory legal obligation under FATF R16 / Art. 14 VQF-Regulation. Transfer basis: Art. 17(2)(c) revDSG / GDPR Art. 49(1)(c) (important public interest — AML/CTF compliance).
(b) Identity verification (Sumsub): where Sumsub processes data outside Switzerland or the EEA, transfers are conducted under Standard Contractual Clauses (SCCs) and a Data Processing Agreement imposing GDPR/revDSG-equivalent obligations. The United Kingdom and the EEA are recognised as providing adequate data protection under Swiss law.
(c) Analytics (Google Analytics / Google LLC, USA): EU-US Data Privacy Framework (DPF) for GDPR purposes and Swiss-US DPF for revDSG purposes, based on Google LLC's certification. See Section 8.1.
(d) Regulatory and law enforcement disclosures: transfers to foreign authorities pursuant to AMLA Art. 29, AEOI/CRS, or other mandatory legal obligations are conducted on the basis of legal obligation (GDPR Art. 6(1)(c) / revDSG).
(e) Other service providers outside Switzerland (in particular Privy, QuickNode, Sentry, Klaviyo, Meta and Google Workspace): transfers are based on the provider's certification under the Swiss-US and EU-US Data Privacy Framework where available, and otherwise on SCCs.
Where data is transferred outside Switzerland, we ensure appropriate safeguards are in place. Our AMLA files are kept on our administration system in Switzerland, in accordance with Art. 63 VQF-Regulation and Art. 9/10 of the Swiss Accounts Ordinance.
Data storage location: In accordance with Art. 63 VQF-Regulation, the authoritative copy of all customer records, AMLA files and transaction documentation is kept on servers located in Switzerland. Certain data is also processed by the service providers listed in Section 6.1, including outside Switzerland, subject to the safeguards described above.
If you transact with us via a P2P platform, the platform processes your data as an independent controller under its own privacy policy. We do not transfer your KYC data to the P2P platform.
If you come to us via a partner's referral link, we record the referral identifier with your account in order to calculate the partner's commission based on your transactions and fees. The partner receives no personal data about you.
If Eti-Tech AG is merged, sold or transfers all or part of its business, your personal data may be transferred to the acquirer or successor to the extent necessary to continue the business relationship. Before such a transaction, we may disclose data to potential acquirers and their advisers to the extent necessary for their assessment, under confidentiality obligations and, where possible, in anonymised or pseudonymised form. The successor will continue to process your data in accordance with this Privacy Policy or will inform you of any changes.
As part of our AML/CTF compliance obligations, we use automated tools (including sanctions, PEP, and watchlist screening software) to support the assignment of a risk category to each customer, based on criteria defined in our AML standards. These tools flag relevant factors, but the resulting risk classification — and any decision to accept, restrict, continue, or terminate your business relationship — is always made or approved by a trained member of our compliance staff, and every automated result is reviewed by such a person (see the next paragraph for automated results in onboarding). Consequently, this processing does not constitute a decision “based solely on automated processing” within the meaning of GDPR Art. 22 / revDSG Art. 21.
During onboarding, our identity verification provider produces automated results (for example, a proposed approval or rejection of a verification step). These results are preliminary only: they do not by themselves trigger any decision or further process on our side. The decision to accept or reject your application is always taken by a member of our staff after reviewing the result. If you nevertheless believe that a decision concerning you was based solely on automated processing, you may state your position and request a review by a natural person (Art. 21 revDSG; Art. 22(3) GDPR).
This risk scoring affects:
Risk categorisation is a legal requirement under Swiss AML law. Because it is not a solely automated decision, it is not, strictly speaking, subject to a right to object under Art. 21 GDPR; however, if you believe your risk category has been incorrectly assigned, you may always contact us at compliance@eti-tech.ch to request a review.
Your rights regarding risk decisions (offered as a transparency measure, consistent with the spirit of GDPR Art. 22 / revDSG Art. 21):
Cookies, analytics, and other automated data collection on our website (see Section 8 below) rest on a separate legal basis (consent under applicable cookie/ePrivacy rules) and do not, on their own, result in any decision with a legal or similarly significant effect on you.
Marketing and usage profiling: where you have consented, we use data collected via Google Analytics, the Meta Pixel and Klaviyo to analyse your use of our website and emails and to tailor advertising and communications to your interests. This profiling does not result in decisions with legal or similarly significant effects on you. You can withdraw your consent at any time (see Sections 8 and 12).
Our website uses cookies – small text files stored on your device – to improve your experience. We use:
You may configure your browser to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our website. We implement cookie banners to obtain your consent for non-essential cookies in accordance with applicable law. Our cookie banner names the tools we use and their purpose, links to this Privacy Policy and allows you to accept or reject all non-essential cookies. You can change your choice at any time by reopening the banner via the link in the website footer.
We maintain pages on X, LinkedIn, YouTube, Reddit, Instagram and Telegram and a profile on Trustpilot. When you interact with these pages, the respective operator processes your data under its own privacy policy. For page statistics (insights) we may be joint controller with the operator. We do not currently send review invitations; if you post a review on Trustpilot, Trustpilot processes your data under its own privacy policy.
Subject to applicable law (revDSG / GDPR), you have the following rights regarding your personal data:
Important limitations:
The exercise of certain rights is limited or overridden by our legal obligations as a regulated entity:
To exercise any of the above rights, or to raise a data protection concern, please contact us at: compliance@eti-tech.ch
Response timeframes: We will respond to data subject rights requests within 30 calendar days. Where a request is complex, we may extend by up to a further 60 days, notifying you within the initial 30-day period with reasons for the extension.
Identity verification: To protect your data, we will verify your identity before processing any rights request. We may ask you to confirm information on file (registered email, account number, or other identifying details).
How to submit: Data protection, compliance, and AML requests should all be directed to compliance@eti-tech.ch. Please specify the right you are exercising and include your account details.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. If you are resident in Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you are resident in an EU/EEA member state, you may instead or additionally lodge a complaint with the data protection supervisory authority of your country of residence; a list of EU/EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Eti-Tech AG implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:
Despite our best efforts, no system can guarantee complete security against all threats. In the event of a personal data breach posing risk to individuals: (a) where the breach is likely to result in a high risk to you, we will notify the FDPIC as soon as possible (Art. 24 revDSG) and, where the GDPR applies and requires it, the competent EU supervisory authority within 72 hours; (b) where this is necessary for your protection or required by law, we will also inform you directly without undue delay, describing the breach, its likely consequences, and remedial measures taken; (c) we maintain an internal data breach register; (d) where a breach occurs at a third-party processor, our data processing agreements require them to notify us without undue delay.
Our services are not directed at persons under the age of 18. This reflects both our own policy and the age of legal capacity to enter into binding contracts under Art. 14 of the Swiss Code of Obligations (CO/OR), which our KYC and account-opening processes require. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at compliance@eti-tech.ch and we will take steps to delete it.
If you subscribe to our newsletter or opt in to marketing communications, we will use your name and email address to send you updates about our products, services and the crypto ecosystem. Your consent forms the legal basis for this processing. We collect this consent through a separate opt-in that is not pre-ticked. We use Klaviyo, Inc. (USA) to send newsletters and to measure opens and clicks. If you are a customer, we may also send you information about our own similar services by email without prior consent (Art. 3 para. 1 lit. o UWG); you can object at any time, including via the link in every such email.
You may unsubscribe at any time by clicking the unsubscribe link in any communication or by contacting us at compliance@eti-tech.ch. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
We may update this Privacy Policy from time to time. A material change includes: introduction of a new data category, new processing purpose, new recipient category, or change to retention periods. We will provide at least 30 days' advance notice of material changes by email and via a prominent notice on the Platform. The version published on our website at the relevant time applies. Minor updates (formatting, clarifications, contact details) may take effect immediately.
This Privacy Policy is drafted in English and may be made available in German, French and Italian. In the event of any discrepancy, the English version prevails.
For any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:
Eti-Tech AG
Müligässli 1, 8598 Bottighofen, Switzerland
Email: compliance@eti-tech.ch (contact point for all data protection matters)
Website: www.eti-tech.ch
Eti-Tech AG is a member of the VQF Self-Regulatory Organisation (SRO) and is a Virtual Asset Service Provider (VASP) within the meaning of Art. 2 para. 3 AMLA, supervised in that capacity through its VQF membership. | Version 2.0 — 29 July 2026 | Supersedes Version 1.9