Privacy
Policy

Data Controller

TYM Group SA ("TYM Group", "we", "us") is the data controller for the personal data collected through this website and in the course of our business activities. We are incorporated in Switzerland and our registered office is at Route de Chêne 61A, 1208 Geneva.

We are committed to protecting your personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data We Collect

We may collect the following categories of personal data:

• Identity data — name, title, company name
• Contact data — email address, telephone number, postal address
• Transaction data — details of real estate projects or opportunities you have discussed with us
• Technical data — IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages
• Usage data — information about how you interact with our website and communications
• Communication data — records of correspondence and enquiries you send to us

We do not knowingly collect data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately.

How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide information about our real estate development services
• To evaluate and progress real estate transactions, investments and partnership opportunities
• To administer and manage our business relationships
• To send you relevant communications, updates and invitations (where you have consented or we have a legitimate interest in doing so)
• To improve the performance and content of our website through analytics
• To comply with our legal and regulatory obligations
• To prevent and detect fraud, money laundering and other illegal activity

Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contract — processing is necessary for the performance of a contract to which you are party, or to take steps at your request prior to entering into a contract
• Legitimate interests — processing is necessary for our legitimate business interests, such as managing our pipeline, communicating with prospective partners or improving our services, provided these are not overridden by your interests or rights
• Legal obligation — processing is necessary to comply with Swiss or EU legal requirements
• Consent — where you have given us your explicit consent, for example for marketing communications or cookies

Data Sharing

We do not sell or rent your personal data to third parties. We may share your data with:

• Our affiliated entities and ecosystem partners (Cèdre 10, Rousseau 5) where relevant to a project or transaction
• Professional advisers including lawyers, notaries, architects and financial advisers, under duties of confidentiality
• IT and website service providers acting as data processors on our behalf
• Regulatory authorities, law enforcement or courts where required by law

Where data is transferred outside Switzerland or the European Economic Area, we ensure appropriate safeguards are in place, such as the use of standard contractual clauses approved by the relevant authorities.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

In general, we retain contact and transaction data for a period of ten (10) years following the conclusion of a business relationship, in accordance with Swiss commercial law. Technical and usage data is retained for a maximum of twenty-six (26) months. Marketing preferences and consent records are retained until you withdraw your consent or object to processing.

Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Access — the right to obtain a copy of the personal data we hold about you
• Rectification — the right to have inaccurate or incomplete data corrected
• Erasure — the right to request deletion of your data in certain circumstances
• Restriction — the right to request that we limit how we use your data in certain circumstances
• Portability — the right to receive your data in a structured, machine-readable format
• Objection — the right to object to processing based on legitimate interests, including for direct marketing
• Withdrawal of consent — where processing is based on consent, the right to withdraw consent at any time

To exercise any of these rights, please contact us using the details below. We will respond within 30 days. We may need to verify your identity before processing a request.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include encryption of data in transit, access controls and regular security reviews.

While we take all reasonable steps to protect your data, no transmission over the internet is completely secure. We cannot guarantee the absolute security of data transmitted to our website.

Cookies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use, their purpose and how to control them, please see our Cookie Policy.

Contact & Complaints

If you have any questions or concerns regarding this Privacy Policy or the way we process your personal data, please contact our data protection contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or, if the GDPR applies to you, with the supervisory authority in your country of residence.