Privacy Policy

1. Controller

The party responsible for the processing of personal data in connection with the use of sanctioncheck.ch is:

Daniba Services GmbH
Stampfenbachstrasse 125
8006 Zurich
Switzerland

UID: CHE-361.956.490

E-mail: info@daniba.com

2. Purpose of this Privacy Policy

This Privacy Policy explains which personal data is processed in connection with the use of sanctioncheck.ch and for which purposes.

The service is aimed exclusively at companies, organisations, authorities and persons acting in a professional or commercial capacity.

3. Data processed

When the service is used, the following data in particular may be processed:

Account data

• e-mail address
• password (stored in encrypted form)
• profile information, if provided voluntarily

Sign-in with Microsoft

Signing in and registering with a Microsoft account is voluntary. Microsoft is used as an external identity provider. Registration and sign-in with e-mail address and password remain available at all times.

In doing so, the Provider only processes the identity data required for sign-in and account matching. Depending on the information actually supplied by Microsoft, this includes in particular:

• name (first name and last name);
• e-mail address;
• Microsoft subject (identifier of the Microsoft account);
• tenant ID (identifier of the Microsoft tenant).

The Microsoft subject and tenant ID are used to reliably recognise the linked Microsoft account.

E-mails, files, contacts, calendars and Teams content are not accessed.

Microsoft's privacy terms additionally apply to processing by Microsoft.

Billing data

• company name
• name of the contact person
• billing address
• VAT information
• other billing data provided by the customer

Usage data

• date and time of access
• functions used
• searches
• reports created
• technical logs
• IP addresses
• browser and device information

Communication data

• enquiries by e-mail
• support requests
• other communications from the customer

4. Purposes of data processing

The Provider processes personal data in particular in order to:

• provide the service;
• manage user accounts;
• carry out sanctions list checks;
• create screening reports;
• process payments;
• issue invoices;
• detect misuse and fraud;
• ensure the security and stability of the service;
• comply with legal obligations;
• communicate with customers;
• further develop the service.

5. Searches and screenings

When using the service, customers may enter the names of natural persons, companies or organisations.

The customer is responsible for ensuring that the entry and processing of such data is lawful.

The Provider uses this data exclusively to carry out the screening initiated by the customer and for technical, security-related and legally required purposes.

6. Payment processing

External payment service providers are used for payment processing.

Payments are currently processed in particular via:

Wallee AG

To carry out payments, the data required for this purpose may be transmitted to the respective payment service provider.

This data is additionally processed in accordance with the privacy terms of the respective payment service provider.

The Provider does not, as a rule, receive complete credit card data.

7. Hosting and infrastructure

The technical provision of the service is carried out in particular via:

Infomaniak Network SA

In the course of operating the service, data may be stored and processed on the systems of the hosting provider.

8. Disclosure to third parties

Personal data is not sold as a matter of principle.

Disclosure may take place in particular:

• to payment service providers;
• to hosting and infrastructure partners;
• to technical service providers;
• to authorities or courts, where legally required;
• where this appears necessary to enforce claims or to safeguard legitimate interests.

9. International data transfers

The Provider may use service providers based outside Switzerland or the Principality of Liechtenstein.

The customer agrees that personal data may in this context also be processed in countries whose data protection law may not correspond to the Swiss level of data protection.

The Provider endeavours to apply appropriate contractual and organisational safeguards in this respect.

10. Retention period

Personal data is retained for as long as is necessary for the provision of the service, compliance with legal obligations or the protection of legitimate interests.

The Provider is entitled to retain data after the contractual relationship has ended, insofar as:

• statutory retention obligations exist;
• this appears necessary to preserve evidence;
• claims are outstanding or may be asserted;
• security or misuse reasons justify it.

11. Cookies and similar technologies

sanctioncheck.ch may use cookies, session cookies, local storage technologies or comparable methods.

These serve in particular:

• sign-in;
• security;
• technical functionality;
• user-friendliness;
• statistical analysis;
• error analysis.

Users can adjust the relevant settings in their browser at any time.

Disabling individual technologies may restrict the service.

12. Web analytics with Google Analytics

To evaluate the use of sanctioncheck.ch, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Ireland) or Google LLC (USA).

In doing so, Google collects technical usage data, in particular pages viewed, time and duration of the visit, approximate location, browser, device and operating system information, and a pseudonymous identifier. The evaluation serves to understand how the website is used and to improve the service. We receive only statistical reports from it.

Google Analytics is only used with your consent. On your first visit, a notice at the bottom of the screen asks whether you accept or decline Google Analytics. As long as you have not consented, or if you decline, Google Analytics is not loaded and no data is transmitted to Google.

We store your decision for 180 days in a cookie (sc_consent) on your device. You can change or withdraw it at any time via the “Cookie settings” link in the page footer.

If you have consented, data may be transmitted to Google servers and processed there, including outside Switzerland, in particular in the USA.

Irrespective of the notice, you can prevent collection as follows:

• by installing the browser add-on to disable Google Analytics (tools.google.com/dlpage/gaoptout);
• by adjusting the advertising and privacy settings in your Google account (myaccount.google.com);
• by blocking cookies and scripts in your browser settings.

Further information on data processing by Google can be found in Google's privacy policy (policies.google.com/privacy).

13. Data security

The Provider takes appropriate technical and organisational measures to protect personal data.

Nevertheless, absolute security cannot be guaranteed for electronic data transmission, data storage or the use of internet-based systems.

14. Access and further rights

Within the scope of applicable data protection law, data subjects may in particular request information about the data processed about them.

Requests can be addressed to the following address:

info@daniba.com

The Provider reserves the right to require suitable proof of identity before processing a request.

15. Deletion of user accounts

User accounts can currently be deleted by sending a request to:

info@daniba.com

The Provider may continue to retain data despite the deletion of a user account, insofar as this is necessary due to legal obligations, legitimate interests, security requirements or pending legal relationships.

16. Changes to this Privacy Policy

The Provider may amend this Privacy Policy at any time.

The version published on sanctioncheck.ch applies in each case.

17. Contact

Questions about data protection can be addressed to the following address:

Daniba Services GmbH
Stampfenbachstrasse 125
8006 Zurich
Switzerland

E-mail: info@daniba.com

Last updated: October 12, 2026