This Privacy Notice explains how Pangaia Investment Partners AG of Untermüli 9, 6300 Zug, Switzerland and its associated companies ( Arx Pangaia BV, Arx Pangaia (Pty) Ltd, and Pangaia Investment BV) (“Pangaia Group”, “Pangaia”, “we”, or “us”) collects, uses and discloses your personal data and your rights in this regard. Please note that this Privacy Notice is not an exclusive description of how Pangaia processes the personal data of individuals.
Who is the data controller?
The entity within Pangaia with whom you conduct business is the data controller of your Personal Data for the purposes of the EU General Data Protection Regulation 2016/679 (“GDPR”) and any locally applicable data protection laws and regulations.
Where can you contact the data controller?
If you have any questions about this privacy notice or wish to exercise any of your rights as detailed below, you can contact Pangaia at the following address: Pangaia Investment Partners AG of Untermüli 9, 6300 Zug, Switzerland, Tel +41 41 500 0155, Fax +41 41 500 0156, or by email to: firstname.lastname@example.org
What personal data is collected?
Pangaia collects the following information about you:
- your name, place and date of birth, passport or national identity card details;
- country of birth, domicile, residence, tax residence, nationality and citizenship;
- contact information such as residential, business and email addresses, fax and telephone numbers;
- information relating to your tax affairs, including tax identification number(s) (where applicable);
- information relating to your financial situation such as assets, sources of wealth, net worth and financial details (including, but not being limited to, bank account details);
- information about your knowledge and experience of investments;
- information to assess whether you may represent a money laundering or terrorist financing risk (such as whether you are a Politically Exposed Person, have had previous criminal convictions or regulatory sanctions imposed);
- employment details or history and other such information.
If you wish to establish or make an investment through an entity or a trust, or other such structure, we will also collect information as above with respect to the trustees, settlors, protectors and beneficiaries (as applicable) and if you wish to establish or invest through a company, partnership or other such structure, we will also collect information as above with respect to the beneficial owners, directors, officers and employees (as applicable).
How we collect your personal data
We collect and store your personal data from:
- Information contained in account opening forms and contracts relating to your investment with us or setting up of an account with us completed by you, or completed by another person on your behalf;
- Information you provide to us when you meet with an employee(s) of Pangaia;
- When you communicate with us, or when we communicate with you by telephone, fax, email or other forms of electronic communication. In this respect, we may monitor, record and store any such communication;
- Documents and information provided by you at our request to fulfil any legal obligations we have with respect to undertaking due diligence on you, verifying your identity, for reasons of tax compliance or other such legal requirement;
- Your agents, advisers and employees of firms with which you are associated;
- Publicly available sources or third parties where we need to conduct background checks about you.
The Purpose of Processing and Legal Basis for Processing
We may process your personal data for the following purposes:
- to facilitate the opening of your account with Pangaia, the management and administration of your holdings, accounts and affairs with Pangaia on an on-going basis (the “Services”) which are necessary for the performance of your contract with Pangaia, to deliver the Services you have subscribed or applied for and to deal with any complaints or feedback that you may have and for any other purpose for which you provide us with your personal data;
- in order to carry out anti-money laundering checks and related actions which Pangaia considers appropriate to meet any legal obligations imposed on Pangaia relating to, or the processing in the public interest or to pursue Pangaia’s legitimate interests in relation to, the prevention of fraud, money laundering, terrorist financing, bribery, corruption, tax evasion and to prevent the provision of financial and other services to persons who may be subject to economic or trade sanctions, on an on-going basis, in accordance with Pangaia’s anti-money laundering procedures;
- to monitor communications for (i) processing and verification of instructions, (ii) investigation and fraud prevention purposes, (iii) crime detection, prevention, investigation and prosecution, (iv) to enforce or defend Pangaia’s rights in order to comply with any legal obligation imposed on Pangaia, (v) to pursue Pangaia’s legitimate interests in relation to such matters, (vi) where the processing is in the public interest or (vii) for quality, business analysis, training and related purposes in order to pursue the legitimate interests Pangaia to improve its/their service delivery;
- to disclose information to other third parties such as service providers of Pangaia, including but not being limited to auditors, lawyers, tax advisors, banks, regulatory authorities, investment advisors, administrative service providers, registered agents, corporate services providers, payment processors, data storage providers and technology providers in order to assist with the management of your accounts/investments with Pangaia, comply with any legal obligation imposed on Pangaia in order to pursue the legitimate interests of Pangaia;
- to update and maintain records and for fee calculations;
- to retain AML and other records of individuals to assist with the subsequent screening of them by Pangaia;
- ensuring the security of our organisation, preventing or detecting fraud or abuses of our website;
and where we have a valid legal basis for such processing including: (i) it is necessary to comply with Pangaia’s legal obligations; (ii) it is in Pangaia’s legitimate interests as a business (except where your interests or fundamental rights override these); (iii) the processing is in the public interest; (iv) if you are a party to a contract, because processing your personal data is necessary for the performance of a contract; or (v) you have given your consent to particular processing activities (where applicable).
Disclosure of Your Personal Data
There are circumstances where we may wish to disclose or are compelled to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. Pangaia may disclose your personal data to:
- third party1 service providers in order to process the data for the above-mentioned purposes and to facilitate the provision of our services;
- competent authorities (including tax authorities), banks, courts and bodies as required by law;
- another legal entity, on a temporary or permanent basis, for the purposes of a joint venture, collaboration, financing, sale, merger, re-organisation, change of legal form, dissolution or similar event. In the case of a merger or sale, your personal data will be permanently transferred to a successor entity;
- legal advisors who may need to advise us or to manage or litigate a claim;
- our subsidiaries or other group companies for internal investigations, reporting and services; and
- to any other third party where you have provided your consent.
 For an up to date list of these third-party service providers please contact us
International Transfers of Personal Data
The disclosure of personal data to Pangaia and/or to the third parties2 set out above may involve the transfer of data to jurisdictions outside the European Economic Area (EEA). Such countries may not have the same data protection laws as your jurisdiction.
In these circumstances we will, as may be required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, contractual or other lawful means.
How long Pangaia Stores Your Personal Data
Pangaia will retain your personal data for as long as required to perform the Services and/or perform investigations in relation to the same and/or as may be required by law (how long the information will be retained will depend on whether additional legal/regulatory obligations mandate that Pangaia retains your personal data and/or mandates the period of retention).
Data Subject Rights
You have the following rights, in certain circumstances, in relation to your personal data. You have the right to:
- access your personal data – you have the right to obtain a copy of the personal data we hold about you. If you like would to obtain a copy of this information, please contact us at the details set out above. You may be required to submit proof of your identity;
- rectify your personal data – you may request that we rectify any inaccurate and/or complete any incomplete personal data. We will respond to your request to correct or supplement your personal data within a reasonable time period and, in any event, within any time period specified in relevant laws;
- withdraw consent – where consent is the lawful ground for processing particular personal data, you may (as permitted by applicable law) withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent;
- request that your personal data is erased – you may (in certain specific circumstances and where lawful) request that we erase your personal data;
- object to processing of your personal data – you may (in certain specific circumstances), request that we stop processing your personal data;
- data portability – you may (in certain specific circumstances) request that your personal data be transmitted to a different service provider; and
- lodge a complaint with the supervisory authority – please contact us first about any questions or if you have a complaint in relation to how we process your personal data. However, you do have the right to contact the relevant supervisory authority directly in the EU Member State of your habitual residence, place of work or in the place of the alleged infringement if you consider that the processing of personal data relating to you carried out by Pangaia or its service providers infringes the General Data Protection Regulation.
Where Pangaia requires your personal data in order to comply with AML or other legal requirements, failure to provide this information means that Pangaia may be required to take a number of actions, including refusing to accept you as a client and/or an investor, refusing to make payment to you or to complete a transaction or fulfil some other obligation with, or for you, advising the specified authorities that your account is undocumented (which could prompt further investigation by them), closing your account, refusing to conduct further business with you and other such measures.
Changes to this Privacy Notice
We may amend this Privacy Notice at any time (reflect any changes in the law or in the way that we process your personal data) and to notify you of those changes by posting an updated version of this policy on our website. It is your responsibility to check our policy each time before you access our website for any changes. This Privacy Notice supersedes any previous version of this notice provided before the date stated above (including anything to the contrary provided in any agreement with us). We reserve the right to change this policy at any time.