We (“Ledgy”, “we”, “our” or “us”) understand how sensitive equity information is for any business. That’s why your privacy and your data’s security is crucial to us. We comply with the applicable data protection laws, including in particular the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).
When you access the Website or use any of our Services, we may collect and process all or a part of the following types of personally identifiable information about you or your business (the “Personal Data”), including: shareholder and company information, share ledger transaction history and other cap table details, all together the cap table data (the “Cap Table Data”), and identity and contact date, financial payment data, profile, usage and website interaction, and technical data, all together the general personal data (the “General Personal Data”).
The following compilation will help you understand which data we handle and in which role.
|Cap Table Data||Shareholder information|
Share ledger transaction history
Other cap table details
|General Personal Data||Identity and contact data|
Date of birth
Financial and payment data
Credit card details
Profile, usage and website interaction
Information about how you use our Website
Browser type and version
Time zone setting
Operating system and platform
|Provided to us||Our role|
|Cap Table Data||Indirectly by the company||Data processor|
We carry out the processing of Cap Table Data which we obtained indirectly by a company under the specific instructions of each company/data controller.
|Directly by you||Data controller|
|General Personal Data|
To perform our contractual obligations or take steps linked to a contract with you or your organization.
We may rely on your freely given consent at the time you provided your Personal Data
To communicate information about our Services (including newsletters and marketing material).
We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable and balanced.
To meet regulatory and public interest obligations.
To maintain records and conduct compliance checks, e.g. anti-money laundering, fraud, and crime prevention.
Via our Website and electronic communications
Personal data may be obtained from public registers (such as commercial registers), news articles, sanctions lists, and Internet searches.
Our customers may engage us to perform professional services which involve them sharing personal data they control with us as part of that engagement.
We have implemented technical and organizational measures in an effort to safeguard the Personal Data in our custody and control.
A list of measures can be found on our Security page.
While we endeavor to always protect our systems, sites, operations, and information against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transfer or storage, will be absolutely safe from interception.
All data is stored in a highly secure data center in Zurich, Switzerland.
Disclosure to third parties
We do not share Cap Table Data with anyone except as explicitly instructed by the company.
Cap Table Data, including equity data, documents and shareholder data is stored in Switzerland and the data center provider has no access to it.
Disclosure to third parties
In the context of our business activities and in line with the purposes set out in Section 3 and the applicable data protection laws, we may transfer General Personal Data to third parties, and certain integrated services may enable you to directly provide data to third party providers (together the “Recipients”). This includes, among others, services for chatbots, e-signature solutions, online forms, usage monitoring, crash reporting and newsletter subscription. We do not transfer Cap Table Data to any Recipients and will indicate to you whenever your data input may be transferred to Recipients so you have full control which data to disclose to such Recipients.
We may be legally required to disclose Personal Data to courts, arbitral tribunals or other authorities for the purposes of a legal or administrative proceeding. Where reasonably possible, we will inform you about such disclosure.
You have legal rights that you can exercise under certain circumstances with respect to your Personal Data that we hold.
You may request a copy of your Cap Table Data at any time, even in the event of bankruptcy of Ledgy. Please note that this right may not be guaranteed in the event of bankruptcy due to legal uncertainty and that a fee may be charged.
We will respond to your request without undue delay, at the latest within one calendar month after receipt.
You have a right to request a copy of the Personal Data held by us as a data controller, which we will provide to you in an electronic form. At our discretion, we may require you to prove your identity before providing the requested information.
You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you.
If you have provided your consent to the collection, processing, and transfer of your Personal Data, you have the right to fully or partly withdraw your consent. This includes cases where you wish to opt out from marketing messages.
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing. To stop receiving emails from us, please click on the “unsubscribe” link in the email you received from us or use our contact form.
You have the right to request that we delete your Personal Data when it is no longer necessary for the Purposes for which it was collected, or when it was unlawfully processed.
You have the right to request the restriction of our processing of your Personal Data where you believe it to be inaccurate, our processing is unlawful, or where we no longer need to process it for the initial Purpose, but where we are not able to delete it due to a legal obligation or because you do not want us to delete it.
You have the right to request that we transmit your Personal Data to another data controller in a common format such as Excel, where this is data which you have provided to us and where we are processing it on the Legal Ground of your consent or in order to perform our contractual obligations (e.g. to provide our Services).
Where the Legal Ground for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate Legal Grounds for the processing which override your interests, or if we need to continue to process the Data for the establishment, exercise or defense of a legal claim.
You have the right to appeal to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
Phone: +41 (0) 44 585 21 23