Privacy and Cookie Policy

Multitude Group’s Principles of Processing its Clients Personal Data (Privacy Policy)

Latest updated on January 13, 2025

These principles of Processing of the www.multitude.com website (hereinafter website) the visitors’ Personal Data (hereinafter also principles) describe how we, Multitude Group (hereinafter also we, us or our) process Personal Data of our Clients and any other Data Subjects (hereinafter also you) These principles apply if you visit our website, or in case you have expressed your wish to receive any information about our products or services.

Definitions
1. Data Protection Regulations – Any applicable laws and regulations regulating the processing of Personal Data, including but not limited to the GDPR;
2. Data Subject - an identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
3. FADP – Federal Act on Data Protection of 25 September 2020
4. Multitude – Multitude Bank together with companies the majority shareholder of which is directly or indirectly Multitude Bank's parent undertaking Multitude AG (Registry Code CHE-455.352.012) (Grafenauweg 8, 6300 Zug, Switzerland);
5. Personal Data –Any information relating to Data Subject. Data which is protected by banking secrecy may also include Personal Data;
6. Processing – Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, storing, alteration, granting access to, making enquiries, transfer, viewing, etc.
Data Controller
1. Multitude is responsible for the Processing of your Personal Data and for those reasons we are the data controller under the FADP.
2. As Multitude is a company established under the laws of Switzerland, then the Processing of your Personal Data shall be governed by the laws of Switzerland.
Collecting your Personal Data
1. Multitude Bank collects your Personal Data in the following ways:
  1. Contact and communication data through communications made to us;
  2. By automatic means when you use’s website. Such Processing is further explained in our Cookie Declaration available at our website, which forms part of these principles.
Personal Data Processed
1. Multitude Processes Personal Data collected for the following purposes:
  1. performance of our obligations arising from law;
  2. safeguarding our rights (establishing, exercising, and defending legal claims). The legal basis for such Processing is Multitude Bank’s legitimate interest;
  3. assessing and developing further the quality of our services and products, e.g., customer support service and quality assurance service. The legal basis for such processing is the legitimate interest of Multitude;
  4. assessing the quality of our (potential) service providers services which enables us to evaluate and develop further the quality of the services and products we offer to our Clients. The legal basis for such processing is the legitimate interest of Multitude;
  5. Internal record and statistic keeping:
  6. Security of the website to guarantee a safe consultation and secure interaction with our systems;
  7. To ensure the best used experience;
  8. The purposes you would have requested when providing your Personal Data to us.
Processing Requirement
1. The Processing of your Personal Data by Multitude may be required for statutory purposes as set out in Clause 4.1.1. Where the lawful basis of Processing your Personal Data is either statutory or a contractual requirement, failure to provide your Personal Data to Multitude Bank in either scenario would result in Multitude being unable to enter into a relationship with you and this may prevent you from availing yourself of our services and products.
Processing based on consent
1. Multitude also processes your Personal Data based on your consent (e.g., for direct marketing purposes, preparing and building lookalike audience groups, etc.).
2. When the Processing is based on your consent, you can withdraw your consent at any time by contacting Multitude on the contact details provided below in Section 10. Please note that withdrawing your consent does not affect the lawfulness of Processing based on consent before its withdrawal.
3. To manage and change your cookie-based preferences, see the Cookie Declaration on our website, which forms part of these principles.
4. As for direct marketing messages received by e-mail, you can also withdraw consent and unsubscribe from receiving any further e-mails by clicking on the ‘unsubscribe’ link at the end of each e-mail.
Disclosing the Personal Data
1. We do not share your personal data with third parties and do not transfer your personal data outside of the European Economic Area.
Protection of Personal Data
1. Multitude Bank endeavours to maintain physical, technical, and procedural safeguards appropriate to the sensitivity of the Personal Data in question. These safeguards are designed to protect your Personal Data from loss and unauthorized access, copying, use, modification, or disclosure. Despite these safeguards, please note that no method of transmission over the internet or data storage is fully secure. Should we be required by law to inform you of a breach to your Personal Data we may notify you electronically, in writing, or by phone.
Data retention
1. Multitude retains your Personal Data in accordance with industry guidelines for as long as necessary for the purposes for which they were collected, or for as long as necessary to safeguard our rights, or for as long as required by applicable legal acts. Kindly note that if the same Personal Data is Processed for several purposes, we will retain the Personal Data for the longest retention period applicable. For us, the maximum period applicable is the limitation period for claims arising from transactions, which is up to 10 years from the date of your last transaction or closure of the account, whichever is the latest.
Your rights
1. To the extent required by applicable Data Protection Regulations, you have all the rights of a Data Subject as regards your Personal Data. This includes the right to:
  1. request access to your Personal Data;
  2. obtain a copy of your Personal Data;
  3. rectify inaccurate or incomplete Personal Data relating to you;
  4. erase your Personal Data;
  5. restrict the Processing of your Personal Data;
  6. portability of your Personal Data;
  7. object to Processing of your Personal Data which is based on your overriding particular situation and which is Processed for direct marketing purposes or in reliance on Multitude’s, or a third party’s, legitimate interest;
  8. withdraw your consent where our Processing of your Personal Data is based on your consent;
  9. be informed of the source from which your Personal Data originates where the Personal Data we hold about you was not provided to us directly by you;
  10. should you believe that your rights have been violated, you have the right to lodge a complaint with:
2. When requesting access to, or rectification or deletion of your Personal Data, please note that we shall request specific information from you to enable us to confirm your identity and right to access, rectify or delete, as well as to search for and provide you with the Personal Data that we hold about you.
3. Kindly note that your right to access, rectify, or delete your Personal Data we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse your request. In addition, the Personal Data may have already been destroyed, erased, or made anonymous in accordance with our record retention obligations and practices as described above in Section 12.
4. If we cannot provide you with access to, or rectification or deletion of your Personal Data, we will inform you of the reasons why, subject to any legal or regulatory restrictions. We can assure you we will not discriminate you for exercising any of your rights described in these Principles.
5. To exercise your rights, please contact Multitude on the contact details above. Please note that you can exercise some rights by logging into your Multitude Bank personal user account.
Amending these principles
1. Should our Personal Data Processing practices change or there shall be a need to amend these principles under the applicable law, case-law or guidelines issued by competent authorities, we are entitled to unilaterally amend these principles at any time. Our most recent principles will always be published on our website, and we urge you to check this at least once a month.
Cookies
1. A cookie is a small file to be placed on your computer or any other device you use to access our website. Cookies help analyse web traffic or let you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. A cookie does not give access to the device.
2. The website uses the following cookies:
  1. Essential Cookies. Essential cookies are a site’s basic form of memory, used to store the settings selected by a visitor. They are essential to a website’s functionality and cannot be disabled by visitor;
  2. Web Analytics and Customization Cookies. Analytics and customization cookies track visitor activity in their browsers, so Multitude can better understand how our website is being accessed and used.
  3. Marketing Cookies. Marketing cookies are used to customize visitors’ ad experience on a website based on their browsing history. Using the data collected from these cookies, Multitude can prevent the same ad from appearing again and again, remember visitor ad preferences, and tailor which ads appear in browsers based on a visitor’s online activities.
    - Google Ads. Google Ads uses the cookies and keywords to allow Multitude to advertise and promote the products and services by reaching interested visitors. You can find more information about this here https://support.google.com/google-ads/answer/6319?hl=en
    
    - MaxTraffic. With MaxTraffic web push notification, overlays, and promo bars Multitude is able to reach the interested visitors of the products and services available. You can find more information about this here https://maxtraffic.com/.
    
    - Bing Ads. Bing Ads uses the cookies and keywords to allow Multitude to advertise and promote the products and services by reaching interested visitors. You can find more information about this here https://about.ads.microsoft.com/en-us.
  4. Social Networking Cookies. Social networking tracking cookies allow users to share content on social media platforms and help link activity between a website and third-party sharing platforms.
    -Facebook Plugins are integrated in Multitude website. You can recognize the Facebook plugins from the Facebook logo or the "Like button”. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/. If you visit the website and click on the Facebook plugin, a direct connection will be established between your browser and the Facebook server. Facebook thereby receives the information that you have visited the website with your IP address. If you click on the Facebook "Like button" while you are logged into your Facebook account, you can link the contents of the website pages to your Facebook profile. Thereby, Facebook can associate the visit to the website with your user account. Multitude does not receive any information on the contents of the data transmitted and their use by Facebook. You can find further information about this in Facebook’s Privacy Policy at http://facebook.com/policy.php.
    
    - Functions of the Twitter service are integrated in the Multitude website. By using Twitter and the "re-tweet" function, the websites visited by you are linked to your Twitter account and announced to other users. Data are thereby also transmitted to Twitter. Multitude does not receive any information on the contents of the data transmitted and their use by Twitter. You can find further information about this in Twitter’s Privacy Policy at http://twitter.com/privacy.
    
    - Functions of the Instagram service are integrated in the Multitude website. If you are logged into your Instagram account, you can link the contents of the website pages with your Instagram profile by clicking on the Instagram button. Thereby, Instagram can associate the visit to the website with your user account. Multitude does not receive any information on the contents of the data transmitted and their use by Instagram. You can find further information about this in Instagram’s Privacy Policy: http://instagram.com/about/legal/privacy/.

Name	Description	Category	Expiry
ASP.NET_SessionId	General purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.	Strictly necessary	1 year
AWSALB	AWS ELB application load balancer	Strictly necessary	6 days
AWSALBCORS	This cookie is managed by AWS and is used for load balancing.	Strictly necessary	6 days
AWSALBTG	AWS Application Load Balancer Cookie: Load Balancing Cookie: Used to encode information about the selected target group.	Strictly necessary	6 days
AWSALBTGCORS	AWS Application Load Balancer Cookie. Load Balancing Cookie: Used to map the session to the instance.	Strictly necessary	6 days
__cf_bm	To read and filter requests from bots.	Strictly necessary	A few seconds
_cfuvid	The _cfuvid cookie is set on a user’s browser to assign them a unique ID in addition to identifying them through their IP address. Without this cookie, visitors to a site will be recognized as the same user if they share the same IP, and any data collected will be shared for all users with that IP.	Strictly necessary	End of session
cf_chl_rc_ni	This is a CloudFoundry cookie.	Strictly necessary	0 day
IRPages2_Session	Cookie used to identify a session instance for the user.	Strictly necessary	1 year
__CookieConsentV300	_Cookieconsent cookie is a plugin used to comply with EU guideline	Strictly necessary	180 days
TS01685b3c, TS#	This is a eqs-cockpit.com cookie. Cookie only collects a session ID to ensure an equal distribution of all requests via our server. Valid until the end of the browser session. Can not be traced to the person visiting a website, as this random session ID is not connected to name, email, IP address or any other person related data.	Strictly necessary	1 year
sp_landing	This domain is owned by Spotify, a USA based music streaming service. Spotify provides a number of tools to embed into websites, which enable the tracking of users and non-users across domains.	Strictly necessary	0 day
sp_t	This domain is owned by Spotify, a USA based music streaming service. Spotify provides a number of tools to embed into websites, which enable the tracking of users and non-users across domains.	Strictly necessary	1 year
VISITOR_PRIVACY_METADATA	YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.	Strictly necessary	5 months
YSC	YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.	Strictly necessary	1 year
VISITOR_INFO1_LIVE	This cookie is used as a unique identifier to track viewing of videos	Strictly necessary	5 months
_ga	This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.	Performance cookies	729 days
_ga_xxxxxxxxxx	A Google Analytics cookie used to persist session state, collect information about how visitors use our site. This information is used to compile reports and to help improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, marketing performance, where visitors have come to the site from and the pages they visited.	Performance cookies	729 days
_gat	This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.	Performance cookies	End of browser session
_gid	This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.	Performance cookies	1 day
_gat_INVDSitecore	This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.	Performance cookies	End of browser session
_hjSession_, _hjAbsoluteSessionInProgress, _hjIncludedInPageviewSample, _hjIncludedInSessionSample ,_hjIncludedInSessionSample_, _hjFirstSeen, _hjTLDTest	A cookie that holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session.	Performance cookies	End of browser session
_hjSessionUser_*	Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.	Performance cookies	365 days
_fbp	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers	Marketing cookies	89 days

Contact
1. In case you have any question regarding the Processing of your Personal Data by Multitude or you would like to exercise your rights as a Data Subject, please contact us on contact details provided above in Section 10.
2. Multitude has appointed a data protection officer whom you also may contact regarding the same on the contact details provided above in Section 10.

PRIVACY