Privacy policy
Data protection notice
The Swiss Financial Market Supervisory Authority FINMA processes personal data in order to fulfil its statutory responsibilities. It is obliged when doing so to comply with prevailing Swiss data protection provisions.
Purpose of the whistleblowing system
The whistleblowing system (BKMS® system) enables tip-offs concerning breaches of financial market regulations or other irregularities at FINMA-supervised institutions to be received in a secure and confidential manner.
Responsible authority
Responsibility for the data protection of the whistleblowing system lies with the Swiss Financial Market Supervisory Authority FINMA.
The whistleblowing system is operated by a company specialising in this, EQS Group GmbH, Hardturmstrasse 11, CH-8005 Zurich, and its affiliated company EQS Group GmbH, Bayreutherstrasse 35, DE-10789 Berlin, on behalf of FINMA.
Personal data and information entered in the whistleblowing system are stored at a high-security data centre in Switzerland. Only FINMA is able to access the data. The operator of the system and other third parties have no access to the data.
All data are encrypted, password-protected at multiple levels and subject to an authorisation concept so that access is restricted to a very small group of recipients comprising explicitly authorised persons at FINMA.
Please submit any enquiries concerning data protection using the contact details specified in the publication details.
Type of personal data collected
Use of the whistleblowing system is voluntary. If you submit a report via the whistleblowing system, we collect the following personal data and information:
- your name and contact details if you disclose your personal data,
- any names of institutions and persons and other personal data concerning the institutions and persons that you specify in your report.
Confidential handling of tip-offs
Incoming tip-offs are received by a small group of explicitly authorised and specially trained FINMA employees. The information may be forwarded to the responsible specialist units within FINMA for review, documentation and further investigations.
FINMA endeavours to handle your tip-off confidentially as far as possible. However, we wish to point out that FINMA cannot guarantee the confidential handling of your tip-off, as it may be obliged to disclose the tip-off, for example in administrative proceedings.
Data subject rights
You are entitled at any time to request information free of charge about the processing of your personal data at FINMA. Please address any request for information in writing, signed and with a copy of your ID (passport or ID card) to: Swiss Financial Market Supervisory Authority FINMA, Legal and Compliance, Laupenstrasse 27, 3003 Bern. Further rights such as the right to data deletion, data correction and restriction of data processing are upheld within the framework prescribed by law.
Retention period of personal data
Personal data are retained at FINMA for as long as they can potentially be of use for the fulfilment of FINMA’s statutory responsibilities and subsequently offered to the Swiss Federal Archives for storage. The data are deleted from the whistleblowing system once tip-off processing is complete.
Use of the whistleblowing system
Communication between your computer and the whistleblowing system takes place via an encrypted connection (SSL). The IP address of your computer is not stored during use of the whistleblowing system. In order to maintain the connection between your computer and the BKMS® system, a cookie is stored on your computer that contains merely the session ID (so-called session cookie). The cookie is only valid until the end of your session and loses its validity when the browser is closed.
You have the option of setting up a secured postbox in the whistleblowing system with a pseudonym/user name and password of your choice. This way you can receive feedback from FINMA and answer any questions that remain open or supplement your report anonymously and securely. Through this function the data are stored exclusively in the whistleblowing system and therefore particularly well secured; this is not conventional email communication.
Information on sending attachments
When submitting or supplementing reports, you have the option of sending FINMA attachments. Please observe the following security advice if you wish to submit a report anonymously: files can contain hidden personal data that may jeopardise your anonymity. Please remove such data prior to sending. Should you be unable or uncertain how to remove such data, copy the text of your attachment into your report text or send the printed document anonymously to the address shown in the footer, quoting the reference number you receive at the end of the reporting process.
October 2022