Privacy Policy
1. Who we are
The controller responsible for processing your personal data is:
Happy Pot SàRL
Hornbachstrasse 69, 8008 Zürich, Switzerland
Contact: support@happypot.ch
Company number: CHE-138.927.337
2. Applicable legal framework
This privacy policy is drawn up in accordance with:
- The new Federal Act on Data Protection (nFADP), which came into force on 1 September 2023 in Switzerland
- The General Data Protection Regulation (GDPR) for users located in the European Union or the European Economic Area
3. What data do we collect?
We collect only the data necessary for our services to function properly.
When creating an account:
First name, last name, email address, password stored in encrypted (hashed) form and never accessible in plain text.
When creating a collection:
The information needed to create and manage your collection, such as its title, description, currency, goal, beneficiary, or any other information you choose to add.
When contributing to a collection:
First name, last name, email address, postal address.
When requesting a fund transfer:
The information required to process the transfer and verify your identity, including your bank details, postal address and the information required as part of the identity verification process.
When contacting our team:
Email address, content of your request.
When browsing our site:
IP address, browsing data, cookies (see our cookie policy).
4. Why do we use your data?
We use your personal data solely for the following purposes:
Account creation and management to allow you to access the platform and manage your collections. Legal basis: performance of contract.
Processing contributions and transfers to ensure transactions between contributors and organisers run smoothly. Legal basis: performance of contract.
Identity verification (KYC/AML) to comply with our legal obligations regarding anti-money laundering and counter-terrorism financing. Legal basis: legal obligation.
Fraud prevention to monitor suspicious activity and protect all users of the platform. Legal basis: legal obligation.
Responding to support requests to handle your questions and complaints. Legal basis: legitimate interest.
Transactional communications to send you confirmations, notifications and essential information related to your use of the platform. Legal basis: performance of contract.
Marketing communications and newsletters to keep you informed of our news and updates, only where you have given your consent. You can withdraw this consent at any time via the unsubscribe link in each email. Legal basis: consent.
Platform improvement to analyse how the site is used and continuously improve our services. Legal basis: legitimate interest.
5. How long do we keep your data?
Account data is retained for as long as your account is active, then for as long as necessary to comply with our legal obligations, resolve any disputes and defend our rights.
6. Who do we share your data with?
We never sell your personal data. We share it only in the following cases:
Service providers:
Our technical subcontractors (hosting, security, payment processing, identity verification, audience analytics, email delivery and other technical services required to run the platform) may access certain data strictly in the context of performing their services. These partners are bound by contractual confidentiality obligations.
Payment partner:
Payment information is processed exclusively by our specialist partner. Happy Pot does not have access to your full banking details.
Competent authorities:
We may be required to share certain data with Swiss administrative or judicial authorities where required by law, in particular in the context of anti-money laundering and counter-terrorism financing obligations.
7. Transfers outside Switzerland
Some of our service providers may process your data outside Switzerland or the EEA. In such cases, we ensure that appropriate safeguards are in place in accordance with applicable regulations.
8. Security of your data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including:
- Encryption of data in transit (SSL/TLS protocol)
- PCI DSS compliance for payment data
- Continuous monitoring for suspicious activity
- Regular platform updates
9. Your rights
Under the nFADP and GDPR, you have the following rights:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data, subject to our legal obligations
- Restriction: request that processing be restricted in certain cases
- Objection: object to processing based on our legitimate interest
- Portability: receive your data in a structured, machine-readable format
- Withdrawal of consent: withdraw your consent at any time for processing based on consent (without affecting the lawfulness of processing carried out before withdrawal)
To exercise your rights, contact us at: support@happypot.ch. To protect your data, we may ask you to verify your identity before responding to your request.
We endeavour to respond to your request promptly and within the timeframes set out by applicable regulations. If you are not satisfied with our response, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the data protection authority in your country of residence.
10. Cookies
For information on how we use cookies, please see our cookie policy.
11. Changes to this policy
We reserve the right to modify this policy at any time. The most recent version is always available on this page. In the event of a significant change, we may notify you by email or via a notification on the platform.
12. Contact
For any questions about this policy or the protection of your data:
Happy Pot SàRL
Hornbachstrasse 69, 8008 Zürich, Switzerland
support@happypot.ch
