Privacy notice

Last modified 15 October 2026

This privacy notice explains how we collect, use, disclose and retain personal information when you visit or use our websites, social media pages, online applications and contact forms; receive our marketing communications; register for or attend our webinars and events; or otherwise interact with us in connection with our business activities globally. This privacy notice does not apply to personal information processed in the context of employment, recruitment, customer onboarding or office visits, where separate privacy notices may apply. If you are a US resident, please refer to the US Privacy Notice Addendum.

Our website and social media are hereinafter jointly referred to as our “online platform”.

We may occasionally update this privacy notice. We encourage you to periodically review this privacy notice so that you can stay up to date with how we process your information.

1. Who we are

We are Avaloq Group Ltd (“we”, or “us”), a Swiss company registered at Allmendstrasse 140, 8041 Zurich, Switzerland, and a subsidiary of NEC Corporation (“NEC”). We are the data controller and/or entity responsible for the processing of personal information as described in this privacy notice, including in relation to our activities globally.

2. How we obtain personal information

We may collect and receive personal information through our online platform. Personal information means any information relating to an identified or identifiable natural person.

We collect personal information that you choose to provide voluntarily in order that you can use our online platform.

3. The types of personal information we may obtain

We may collect and receive the following personal information from you:

• Name and contact details (such as name, address, email, username, phone numbers)
• Account details (such as username and password)
• Personal information included in your traffic data (e.g. IP address, preferences, behavioural data on our website)
• Personal information included in your comments
• Personal information of individuals included in your uploaded content (such as name and email address)

We may collect other types of personal information if required under applicable law or if necessary for the purposes listed below.

4. How we use personal information

We may collect and process your personal information for the purposes and on the legal bases identified below:

Providing our online platform and delivering the services you have requested:
We may process your personal information to perform our contract with you for the use of our online platform and to fulfil our obligations under the applicable terms and conditions; if we have not entered into a contract with you, we base the processing of your personal information on our legitimate interest to operate and administer our online platform and to provide you with the content you access and request.

Managing account registrations:
If you have registered for an account with us, we process your personal information by managing your user account for the purpose of performing our contract with you according to the applicable terms and conditions.

Handling contact and user support requests:
If you fill out a contact form or request user support, or if you contact us by other means including via a phone call, we may process your personal information in order to perform our contract with you and insofar as is necessary for our legitimate interest in fulfilling your requests and communicating with you.

Developing and improving our online platform:
We may process your personal information to analyse trends and track your usage of and interactions with our online platform insofar as is necessary for our legitimate interest in developing and improving our online platform and providing our users with more relevant content and service offerings, or where we seek your valid consent.

Identifying customer opportunities:
We may process your personal information to assess new potential customer opportunities insofar as you have provided your prior consent.

• We use HubSpot to gather your contact information and may share it with our Customer Relationship Management (“CRM”) database using Tibco integration. The CRM we use is provided by Microsoft Ireland Operations Limited (“Microsoft”) to manage and track our marketing and sales efforts. The personal information processed for these purposes may include relevant business information, such as contact data, the website activity of registered users of our website, and other business information included by our employees based on their personal interactions with you. The CRM information will be transmitted and stored by Microsoft on servers in the European Union.
• HubSpot and Microsoft Exchange Online integration transfers your personal information to Microsoft and enables us to send you our marketing communications via Microsoft Exchange Online servers. The information generated with the HubSpot and Microsoft Exchange Online integration will be transmitted and stored by Microsoft on servers in the European Union.
• If you have previously consented to a HubSpot Performance Cookie (see Section 8 “How we may use cookies and similar technologies”), the information that you may provide at a later point in time via our contact form may be matched with the data gathered by the cookie regarding your behaviour on our website.
• Lead Forensics is a web analytics tool that helps us to analyse how our website is being used. The Lead Forensics tool uses a tracking code to identify businesses visiting our website based on their business IP addresses as available in the public domain. The Lead Forensics tool cannot be used to identify an individual visitor who has visited our website. The Lead Forensics tool does not provide us with IP addresses. It provides us with information about which companies have visited our website, the date and duration of their visit, and the web pages that they visited. The information generated will be transmitted and stored by Lead Forensics on servers in the United Kingdom. This information allows us to analyse the use of our website and eventually contact those companies about their experience or for sales purposes.

Displaying personalized content and ads:
We may process your personal data to conduct marketing research, advertise to you, provide personalized information about us on and off our online platform and to provide other personalized content based upon your activities and interests to the extent you have provided your prior consent.

Managing our relationship with you:
We may process your personal data to send you marketing information, product recommendations and other non-transactional communications about us and our partners, including information about our products, promotions, or events to the extent you have provided your prior consent.

Managing your event registrations and attendance:
We may process your personal data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you, to perform our contract with you.

Reviewing compliance with the applicable terms and conditions; ensuring the security of our business, preventing or detecting fraud or abuses of our online platform:
We may process your personal data by tracking the use of our online platform, verifying accounts and activity, investigating suspicious activity, and enforcing our terms and conditions to the extent it is necessary for our legitimate interest in promoting the safety and security of the online platform and in protecting our rights and the rights of others.

Complying with legal obligations:
We may process your personal data when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of personal data to protect our rights or is necessary for our legitimate interest in protecting against misuse or abuse of our online platform, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, respond to lawful requests, or for auditing purposes.

5. How we may store and share personal information

We may store the personal information we collect and receive, and share it on a need-to-know basis with the following parties:

1. Affiliates of the Avaloq group (view list of Avaloq group companies and locations), NEC (view list of NEC group companies and locations) or their agents
2. Service providers and contractors that perform services for us (refer to Annex 1 “List of subprocessors”): our service providers and contractors process personal information on our behalf and are required to protect it and use it only for the purposes for which it was disclosed
3. Our partners (only applicable if you request specific information relating to certain services that involve a respective partner)
4. Advertising and analytics partners: some advertising, analytics or social media partners may process personal information for their own purposes, as described in their own privacy notices
5. Event sponsors (only if you attend an event or webinar organized by us. Refer to “Managing your event registrations and attendance” in Section 4 “How we use personal information”)
6. Other users of the online platform, insofar as you choose to share your messages
7. Competent public authorities or other third parties, where permitted or required by law

In the event that we sell or transfer all or a portion of our business or assets, we may also transfer your personal information on a need-to-know basis. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal information you have provided to us in a manner that is consistent with applicable law and this privacy notice.

6. How we may transfer data internationally

We may transfer the personal information we collect within the Avaloq group, to NEC and/or to third parties in countries outside of the country where you are located. The laws in those countries may offer a different level of data protection than the one that applies in your country. Personal information may be transferred to the European Union (EU) or European Economic Area (EEA), Switzerland, Singapore, the Philippines, India, Japan, Hong Kong, and the United States, among other countries.

When we transfer your personal information outside the country where it was initially collected, we will protect your personal information as described in this privacy notice and in accordance with applicable laws (e.g. by entering into EU Standard Contractual Clauses or equivalent local transfer mechanisms, where such mechanisms are required by law).

7. Links

Our online platform may contain links to other sites. We are not responsible for the content or privacy practices of such other sites. Take care to note when you leave our website and read the privacy notices of any other site that collects personal information. Your data protection and privacy rights under these third-party platforms will be governed by their respective privacy practices.

8. How we may use cookies and similar technologies

We collect certain personal information by using cookies and similar technologies when you visit our website.

Cookies are small text files that are transferred to your computer’s hard drive, browser or mobile device when you visit a website. Cookies hold information that may be accessible by the party that transfers the cookie, which will either be the website itself (first-party cookie) or a third party (see Section 8.2 “Third-party cookies”).

We use both session-based and persistent cookies on our website. Session-based cookies exist only during a single session and disappear from your device when you close your browser or turn off your device. Persistent cookies remain on your device after you close your browser or turn off your device.

To change your cookie settings and preferences for our website, click the “Cookie settings” link below. You can also control the use of cookies on your device, but choosing to disable cookies on your device may limit your ability to use some features on our website.

8.1 The purpose of cookies and similar technologies

We categorize our website cookies and similar technologies as follows:

• 1. Strictly necessary cookies (Category 1)
  These cookies are necessary so you can browse the website and use its features, such as accessing secure areas of the website.
• 2. Performance cookies (Category 2)
  These cookies gather statistical website data to analyse how visitors use the website, such as which pages they visit, how long they spend on pages, and the paths they take as they move from page to page.
• 3. Functional cookies (Category 3)
  These cookies facilitate the operation of the website and improve its functions. For example, we store your language settings in functional cookies.
• 4. Targeting cookies (Category 4)
  These cookies may be transferred through our site by our advertising partners, who may use them to build a profile of your interests and show you relevant adverts on other sites. They do not store personal information but are based on uniquely identifying your browser and internet device. Disabling these cookies means you will experience more generalized advertising across the web instead of tailored recommendations.

8.2 Third-party cookies

We may use third-party technology to track and analyse usage information so that we can provide enhanced interactions and more relevant communications and to track the performance of our advertisements and digital channels.

Strictly necessary cookies (Category 1):

• OneTrust LLC (OneTrust) is a provider of a privacy management software platform. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in a specific category from being transferred to the user’s browser when consent is not given. This cookie has a normal lifespan of one year so that the website visitor’s preferences are remembered for when they return. It contains no information that can identify the visitor. For more information on how OneTrust processes your data, please refer to One Trust’s privacy policy.
• We use forms provided by our subcontractor HubSpot which may use Google reCAPTCHA by Google, Inc (“Google”).
• We use Google reCAPTCHA to protect the input fields used on our website contact form against improper use (spam, bots, etc.). By analysing your user behaviour on this website, it can be determined whether the user is a natural person or a bot.
• Google reCAPTCHA uses Google Fonts to display the Google reCAPTCHA box so that users are aware that the box is provided by Google directly. For more information on how Google processes your data, please refer to Google’s privacy terms, which are linked in the reCAPTCHA box.

Performance cookies (Category 2):

We may use Google Analytics by Google, Lead Forensics Limited (“Lead Forensics”) and HubSpot insofar as you have provided your prior consent:

• Google Analytics is a web analytics service that uses cookies to help analyse website usage. The information generated by the cookie about your use of our website (such as your IP address, geolocation, the URL visited, the date and time the page was viewed) will be transmitted and stored by Google on servers in the United States or any other country in which Google maintains facilities. In the case of users based in the European Union, Google will not log or store IP addresses, however, Google will retrieve certain metadata from your IP address (e.g. continent, country, etc.) and discard the IP address immediately. Google will use this information to monitor your use of our website and to compile reports on website activity for us. We have entered into a data protection agreement with Google that also includes Controller-to-Processor EU Standard Contractual Clauses safeguarding the cross-border transfer of personal information.
• Lead Forensics is a web analytics tool that helps us to analyse how our website is being used. The Lead Forensics tool uses a tracking code to identify businesses visiting our website based on their business IP addresses as available in the public domain. The Lead Forensics tool cannot be used to identify an individual visitor who has visited our website. The Lead Forensics tool does not provide us with the IP addresses. It provides us with information about which companies have visited our website, the date and duration of their visit, and the web pages they visited. The information generated will be transmitted and stored by Lead Forensics on servers in the United Kingdom. This information allows us to analyse the use of our website and eventually contact those companies about their experience or for sales purposes.
• HubSpot is a marketing and sales platform with a web analytics service that uses cookies to track visitors to our website. The information generated by the cookies about your use of our website (such as your IP address, the URL visited, the date and time the page was viewed) will be transmitted and stored by HubSpot on servers in Germany. We use all information collected exclusively to optimize our marketing measures and, further, insofar as you consent, to provide you with requested information. If you have previously consented to a HubSpot performance cookie, the information that you may provide at a later point in time via our contact form may be matched with the data gathered by the cookie regarding your behaviour on our website.
• To improve and market our products/services, we partner with Microsoft Clarity to capture how you use and interact with our website through aggregated behavioural metrics, heatmaps and session replay. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Functional cookies (Category 3):

• We may use a third-party provider to display videos on our website (Vimeo). Our videos are hosted on Vimeo’s servers. Vimeo may however implement its cookies on our website and collect and process information about you (including in the USA). You can refer to Vimeo’s privacy notice for further information about how it processes your personal information. You can also manage your cookie preferences in the cookie manager centre on our website. To provide additional protection for your privacy, we have activated the “Do Not Track” option on Vimeo and entered into Standard Contractual Clauses (the “Controller-to-Controller” variant thereof) with Vimeo.

Targeting cookies (Category 4):

• Google Ads & Remarketing: Subject to your prior consent, we utilize Google Ads and features within the Google Marketing Platform to measure the effectiveness of our advertising campaigns and to present relevant offerings to you across third-party websites. When you arrive on our website via a Google advertisement, a tracking identifier (such as a first-party conversion cookie) is saved securely on your browser. This helps Google and the Avaloq group recognize that an ad click led to a visit on our site, allowing us to compile aggregated performance statistics without identifying you personally. If you allow targeting cookies, this infrastructure also enables us to deliver tailored, interest-based advertisements regarding Avaloq solutions when you visit other digital channels within the Google advertising network. To further protect your data, we have signed data protection terms with Google Ireland Ltd. The information gathered by the cookie about your use of our website is usually transmitted by Google to a Google server in the USA, where it is stored. It is used to assign interest-relevant categories to your browser. These categories are used to display interest-relevant advertising.  
• The Google remarketing feature allows us to reach users who have already visited our website. We can thus present our advertising to target groups who are already interested in our products or services.
• We may use social media such as Facebook and LinkedIn advertising for re-targeting purposes. For this purpose, a pixel is placed on our website and, provided you have given your consent, it will generate a cookie on your web browser when you visit our webpage.  
• We may use Microsoft Bing (Advertising) for marketing purposes. For this purpose, we transfer a cookie that we use to measure the use of the website, and that allows us to engage with a user who has previously visited our website.

9. How we protect personal information

We maintain appropriate organizational, physical and technical security measures designed to protect your personal information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure and use. To protect your data, we have, for example, implemented physical access control measures suitable for preventing unauthorized persons from accessing data processing systems that use or process personal information. We have implemented technical and organizational measures designed to prevent data processing systems from being used by unauthorized persons. We have also put in place measures to ensure that those authorized to use a data processing system can only access personal information subject to their access authorization and that personal information cannot be read, copied, modified or removed without authorization during processing, use and after storage. When feasible, we pseudonymize personal information, which means processing it in such a way that the information can no longer be attributed to a specific data subject without the use of additional information. Such additional information is kept separately and is subject to appropriate technical and organizational measures. We have taken a range of transfer control measures to ensure personal information cannot be read, copied, altered or removed by unauthorized persons during electronic transmission or while being transported or stored on data media. Similarly, we have taken a number of steps so we can verify and establish the entities that personal information is to be transmitted to by data transmission equipment, e.g. use of VPN, logging of access and retrieval, and provision of encrypted connections. Additionally, we ensure that personal information is protected against accidental destruction or loss (e.g. fire protection, data backups, secure storage of data media, virus protection, raid systems, disk mirroring, etc.) and that our systems can rapidly restore the availability of, and access to, personal information in the event of a physical or technical incident. However, due to the inherently open nature of the internet, we cannot guarantee that communications between you and us or the personal information stored are absolutely secure. We will notify you in accordance with applicable law of any data breach that is likely to have unfavourable consequences for your privacy.

10. How long we retain personal information

We retain personal information for as long as reasonably necessary for the purposes described in this privacy notice, including to provide our websites and services, manage business contacts, respond to enquiries, conduct marketing activities, comply with legal obligations, resolve disputes, enforce agreements and maintain appropriate business records. The criteria used to determine retention periods include the nature of the information, the purposes for which it is being processed, applicable legal or contractual requirements, security considerations and whether the information is needed to manage our relationship with you. After expiry of the applicable retention periods, all personal information will be destroyed, anonymized or deleted using secure technology. This technology depends on the application and storage media used. Expired records are identified based on their creation or last modification date, the current date and the retention period. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.

11. Your rights

Subject to applicable laws and regulations, you may have the following rights in relation to your personal information:

• The right to obtain, at reasonable intervals and free of charge, information on whether your personal information is being processed, and to receive the personal information that is being processed in an intelligible form.
• The right to have your personal information rectified, blocked or deleted if your personal information is incorrect, incomplete, inaccurate, irrelevant, outdated or processed unlawfully.
• The right to withdraw your consent at any time.
• The right to data portability.
• The right to file a complaint.
• The right to damages or indemnification.

To exercise these rights, please contact us using the details set out below. We may ask you to provide a copy of your ID card or other evidence of your identity. We will respond to your request within the applicable statutory term.

12. Children

The Avaloq group understands the importance of protecting children’s privacy, especially in an online environment. Our online platform is intended for a general business audience and is not aimed at children under 13. We do not knowingly collect personal information from children under 13 through our website without any consent or the authorization required by applicable law. Certain jurisdictions provide additional protection for minors, including teenagers, or require consent for particular processing activities involving minors. Where applicable, the Avaloq group will obtain any required consent and honour rights that are available to minors or their parents or legal guardians. The Avaloq group does not knowingly sell or share the personal information of individuals under 16 years of age.

If you are a parent and become aware that your child has provided us with information, please contact us using the contact information provided at the end of this privacy notice, and we will work with you to address the issue.

12. How to contact us

If you have any comments or inquiries about the information in this privacy notice, if you would like us to update your personal information, or if you want to exercise your rights, please contact our Data Protection Officer by emailing dataprotection@avaloq.com.