Privacy policy

This English translation is provided for your convenience. In the event of any discrepancy, the German version is legally binding.

Last updated: September 2026

Handling your personal data responsibly matters a great deal to us – especially when it comes to something as personal as a loan. This privacy policy explains in plain terms what data we process, why, and who we share it with.

1. Who is responsible?

The controller responsible for processing your personal data on this website is Iberica Kredit GmbH (“we” or “us”). We broker loans in Switzerland and provide advice in German, Portuguese, Spanish, Turkish and English.

If you have any questions about data protection, please contact:

Further details about our company can be found in the legal notice.

2. What is personal data?

Personal data is any information relating to an identified or identifiable person – for example a name, date of birth, email address, phone number or IP address. “Processing” means any handling of such data, such as collecting, storing, using, disclosing or deleting it.

3. What data we process

We only process the data we need to provide our service:

• Contact details: name, email address, phone number, preferred language and preferred way of contact.
• Loan application details: type of loan, amount and term, title, date of birth, marital status, type of ID or residence permit, employment, income, housing costs, number of children and, for refinancing or top-ups, existing loans.
• Content of your messages: anything you tell us via a form, email, phone or WhatsApp.
• Technical data: data transmitted automatically when you visit the website, such as IP address, browser, operating system, and date and time of access.

We receive this data primarily from you. As part of the credit assessment, we also receive information from the lender about the outcome and status of your application.

4. How we use your data

• to answer your enquiry and advise you;
• to prepare your loan application and – with your consent – forward it to a lender for assessment;
• to keep you informed about the status of your application;
• to comply with legal obligations (e.g. record-keeping requirements);
• to ensure this website runs securely and reliably.

We do not use your data for purposes you would not reasonably expect, and we never sell it to third parties.

5. Legal basis for processing

We process your data in accordance with the Swiss Federal Act on Data Protection (FADP), in good faith, transparently and proportionately. Processing is based in particular on your consent, on entering into or performing a contract, on legal obligations, or on our legitimate interests, provided these are not outweighed by your interests.

You can withdraw your consent at any time with effect for the future by emailing us at info@ibericakredit.ch. Processing carried out before the withdrawal remains unaffected.

6. Who we share data with

Lenders

So that you can receive a loan offer, we forward your application – only with your consent – to our partner lenders, namely BANK-now AG, Cembra Money Bank AG and Migros Bank AG. They assess the application under their own responsibility (including information from the ZEK and IKO) and process your data in accordance with their own privacy policies. Details can be found in our terms and conditions.

Service providers

To run this website and communicate with you, we use carefully selected service providers who process your data solely on our behalf:

• Netlify (Netlify, Inc., USA) – hosting of this website and receipt of form submissions;
• IONOS (IONOS SE, Germany) – email mailboxes and sending the automatic confirmation of receipt;
• WhatsApp (WhatsApp Ireland Ltd. / Meta) – if you contact us via WhatsApp;
• fiduciary and accounting services, where necessary for running our business.

Authorities

We disclose data to authorities where we are legally required to do so.

7. Transfers abroad

Some of our service providers (e.g. Netlify, IONOS, WhatsApp/Meta) may also process data outside Switzerland, in particular in the EU and the USA. Where a country does not offer an adequate level of data protection, we ensure appropriate protection through suitable safeguards – such as the European Commission’s standard contractual clauses or certification under the Swiss-U.S. Data Privacy Framework.

8. Visiting this website

Server log files

When you visit this website, your browser automatically transmits technical data (IP address, browser, operating system, date and time, previously visited page). Our hosting provider processes this data to deliver the website and keep it secure. It is not combined with any other data.

Forms

When you complete the loan application, the refinancing/top-up form or the contact form, your details are sent to us in encrypted form (SSL/TLS) and stored with our hosting provider until we have processed them. You will then automatically receive a confirmation of receipt with a short summary of your request at the email address you provided. This message is sent via the IONOS mail server.

Cookies and tracking

We do not use tracking or advertising cookies, nor any analytics tools. If you choose a language in the language menu, your choice is stored locally in your browser only, so we can greet you in your language on your next visit. You can delete this information at any time in your browser settings.

Fonts

The “Inter” typeface is hosted directly on our own server. When you visit this website, no connection is made to Google or any other font provider.

9. Contact by email, phone and WhatsApp

When you contact us, we process the information you provide (e.g. name, contact details, content and time of your message) in order to respond to your enquiry.

Please note: when you communicate via WhatsApp, data is also processed by WhatsApp/Meta. Unencrypted emails can be read by third parties. We therefore recommend that you check with us before sending any sensitive documents.

10. How long we keep data

We keep personal data only for as long as necessary for the relevant purpose. If no contract is concluded, we delete your request once it has been closed and is no longer needed. Business correspondence and accounting records are kept for up to 10 years in line with legal requirements.

11. Data security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and misuse. This website is delivered exclusively over an encrypted connection (HTTPS). Our employees and service providers are bound to confidentiality.

12. Your rights

Under data protection law, you have the following rights in particular:

• Access – to find out whether and what data we process about you;
• Rectification of incorrect or incomplete data;
• Erasure of your data, unless legal retention obligations apply;
• Objection to certain processing and withdrawal of consent;
• Data portability – receiving your data in a common electronic format.

Please send your request to info@ibericakredit.ch. To prevent misuse, we may ask you to verify your identity. We usually respond within 30 days.

If you are not satisfied with our response, you can contact the competent supervisory authority – in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

13. Changes

We may update this privacy policy at any time, for example if we start using new services. The version published on this website at any given time applies.