Who is responsible
Weiss Group GmbH, trading as Paligan, is responsible for the processing described here. We follow the Swiss Federal Act on Data Protection and, where it applies to you, the EU General Data Protection Regulation.
- Controller
- Weiss Group GmbH
- Address
- Forchstrasse 2
8008 Zürich, Switzerland - Contact
- legal@paligan.com
When you browse this website
This website sets no cookies and never asks you to identify yourself. We count page views and measure loading speed with Vercel Web Analytics and Speed Insights, which work without cookies and without recognising you from one visit to the next.
To deliver the pages and protect them from abuse, our hosting provider processes technical data such as your IP address, browser and the pages requested, and keeps it in server logs for a short period. The cookie policy lists everything this website and the portal store on your device.
When you write to us
If you email us, we receive your name, your address and whatever you choose to tell us. We use it to reply, to assess a possible investment or engagement, and to keep a record of the conversation for as long as it remains relevant.
When you use the client portal
The portal is open by invitation only, on the web and in the Paligan app. For each account we hold your name and email address, your password as a one-way hash that cannot be read back, and your display preferences such as base currency and theme.
We also hold what you do through the portal: the opportunities you register interest in, your commitments and positions, and the fees and valuations that relate to them. For security, we keep a log of sign-ins and of changes made in the portal, and for the app a record of each signed-in device.
We use this data to run the portal, to administer the investments you join, to keep accounts secure and to meet our legal and record-keeping obligations.
Legal basis
Where the GDPR applies, we process portal data to perform our agreement with you, correspondence and website data on the basis of our legitimate interest in running and protecting our business, and records we must keep to comply with a legal obligation. We do not rely on consent, because we do nothing that would require it.
Who else sees your data
A small number of providers process data on our behalf and under contract: Vercel, which hosts the website and the portal on servers in Frankfurt, and Supabase, which hosts the portal database in Zurich. We also use an email provider for our correspondence.
When you join an investment, we share what is needed to complete it with the parties to that transaction, such as the administrator of the investment vehicle. We share data with our professional advisers under confidentiality, and with authorities where the law requires it. We never sell or rent personal data.
Transfers abroad
Some of our providers are based outside Switzerland and the European Economic Area, notably in the United States. Where data reaches them, we rely on safeguards recognised under Swiss and EU law, such as the Swiss-US and EU-US Data Privacy Frameworks or standard contractual clauses.
How long we keep it
Server logs are kept for a short period and then deleted. Correspondence is kept while it is relevant to a relationship. Portal data is kept for as long as your account is active, and records of investments and payments for the ten years Swiss law requires for business records, after which we delete them.
Your rights
You may ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, or to receive it in a portable format. Write to legal@paligan.com and we will respond within thirty days. Some records we must keep by law even when asked to delete them, and we will tell you if that is the case.
If you are not satisfied with our answer, you may complain to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, if you live in the EU, to your local data protection authority.
Changes to this policy
When our processing changes, we update this page and the date at the top. If a change affects portal users materially, we will tell them in the portal.