1. Controller
SUISSE GOLD & FX is the controller of personal data processed through this website. Contact details are available on the Contact page; registration data — on the Licences & registrations page.
2. What we collect and why
Enquiry forms (quote, buyback, contact, currency exchange): name, phone and/or e-mail, preferred office, your message and the products or items you enquire about. We process this data to answer your enquiry and prepare a personal quote — steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Technical data: our server records the IP address and browser identification of requests for security, abuse prevention and rate limiting — our legitimate interest in operating a secure service (Art. 6(1)(f) GDPR).
Statutory duties: for transactions at our offices we process identification data where anti-money-laundering law requires it (Art. 6(1)(c) GDPR) — see the AML/KYC page.
3. What we do not do
We do not sell personal data, do not use it for automated decision-making or profiling, and do not send marketing messages without your explicit consent.
4. Recipients and storage
Data is stored on infrastructure of our hosting and database providers within the European Union (Google Cloud, europe-west4; MongoDB Atlas, EU region). Providers act as processors under data-processing agreements. Enquiry data is kept for as long as needed to handle the enquiry and any follow-up transaction, and thereafter only as required by statutory retention rules (accounting, AML).
5. Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability. To exercise them, contact us through the Contact page. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP, www.cpdp.bg).
Draft — final wording subject to review by legal counsel.