Legal

Privacy Policy

Effective: 11.12.2025Last updated: 11.06.2026

This Privacy Policy explains how CEGStake AG, trading as “CEG Group” (“CEG”, “we”, “us”), collects, uses, discloses and protects personal data when you visit ceg.ag and its related sites and services (the “Website”), contact us, register interest, or invest through us. We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, for visitors located in the EU/EEA, the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for processing your personal data is CEGStake AG, Baarerstrasse 43, 6300 Zug, Switzerland. For any privacy matter, contact us at info@ceg.ag.

2. What personal data we collect

  • Identity and contact data: name, email, phone, postal address, country of residence, nationality.
  • Investor onboarding / KYC data: date of birth, identification documents, proof of address, source-of-funds information and tax residency, collected to meet anti-money-laundering and financial-market obligations.
  • Transaction and account data: investment amounts, interests or tokens held, wallet address, payment details and account activity.
  • Technical and usage data: IP address, device and browser type, pages viewed and referring URLs, collected via cookies and similar technologies.
  • Communications: messages and enquiries, and records of calls or meetings when you contact us or book a consultation.

3. Why we process it and our legal basis

  • To respond to enquiries and provide requested information — pre-contractual steps / legitimate interest.
  • To onboard you, verify identity and comply with AML/KYC and financial-market law — legal obligation.
  • To operate your account, process investments and administer your holdings — performance of a contract.
  • To send updates and marketing where permitted — consent, which you may withdraw at any time.
  • To secure, maintain and improve the Website and prevent fraud — legitimate interest.

4. Cookies and analytics

We use necessary cookies to operate the Website and, with your consent, analytics and marketing cookies. Necessary cookies enable core functions such as security and navigation and cannot be switched off. With your consent, we use the Meta (Facebook) Pixel to understand which channels our visitors and leads come from and to measure the performance of our advertising; this may involve Meta processing data as described in its own policies. You can manage or withdraw consent at any time through our cookie banner and your browser settings.

5. How we share data within CEG Group

Your personal data is collected and controlled by CEGStake AG and may be used across the CEG Group businesses — CEG Broker, CEG Setup & Accounting, CEG Stake, CEG Home & Rentals, and CEG Buying & Selling — only where necessary for the purposes set out in this Policy, such as onboarding, providing the services you request, account administration, compliance, and (with your consent) marketing across the group’s offerings.

We do not sell your personal data. We disclose it only where necessary to: professional advisers, auditors and banks; and authorities, regulators or courts where required by law. Where we engage any external provider in future (for example hosting, payment or identity verification), we will require them to keep your data confidential and use it only on our instructions, and will update this Policy accordingly.

6. International transfers

Where personal data is transferred outside Switzerland or the EU/EEA, we ensure an adequate level of protection through recognised adequacy decisions or appropriate safeguards such as the EU Standard Contractual Clauses and the Swiss addendum.

7. How long we keep your data

We keep personal data only as long as necessary for the purposes above and to meet legal retention obligations. In line with Swiss law, business and anti-money-laundering records (including KYC and transaction data) are generally retained for ten (10) years after the end of the business relationship or the transaction. Other data is deleted when no longer needed.

8. Your rights

Subject to applicable law, you may request access to your personal data, correction, deletion, restriction or portability, and you may object to certain processing or withdraw consent. EU/EEA visitors have the rights set out under the GDPR. You may lodge a complaint with a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). To exercise your rights, contact us at info@ceg.ag.

9. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes

We may update this Privacy Policy from time to time. The current version is always available on the Website with its effective date.