Geneva · Independent advisory

ENFR

Privacy Policy

Last updated: 20 August 2026

Tokens For Real Life, T4RL SA ("T4RL", "we", "us" or "our") is committed to protecting personal data and respecting the privacy of visitors to our website.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit t4rl.ch, use our contact form, communicate with us or otherwise interact with our website.

We process personal data in accordance with applicable data protection legislation, in particular the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European Union General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Tokens For Real Life, T4RL SA
Cours des Bastions 13
1205 Geneva
Switzerland

Swiss Company Identification Number (UID): CHE-191.121.247

Email: contact@t4rl.com

2. Personal Data We Collect

The personal data we process depends on how you interact with our website and with T4RL.

2.1 Information You Provide to Us

When you use our contact form, contact us by email or otherwise communicate with us, we may collect information including:

  • your first and last name;

  • company or organisation;

  • professional title or function, where provided;

  • email address;

  • telephone number;

  • the content of your enquiry or message;

  • information relating to your company, project or proposed assignment; and

  • any other information you voluntarily provide to us.

Please avoid transmitting sensitive personal data or highly confidential information through the general website contact form unless it is necessary and appropriate to do so.

2.2 Technical and Website Usage Information

When you access our website, certain technical information may be processed automatically by our website, hosting provider and other technical service providers.

This may include:

  • IP address;

  • date and time of access;

  • pages viewed;

  • referring website or source;

  • browser type and version;

  • operating system;

  • device type;

  • language and browser settings;

  • approximate geographic location;

  • technical log information; and

  • information relating to website performance, errors and security.

2.3 Analytics Information

Subject to your cookie and consent preferences, we use Google Analytics to obtain information about the use of our website.

This may include information such as:

  • pages viewed;

  • navigation between pages;

  • approximate duration of visits;

  • interactions with website content;

  • traffic source;

  • referring website;

  • device category;

  • browser and operating system information;

  • approximate geographic location; and

  • other technical and usage information.

We use this information primarily in aggregated form to understand how our website is used and to improve its content, usability and performance.

3. Purposes for Which We Process Personal Data

We may process personal data for the following purposes:

  • operating, maintaining and securing our website;

  • responding to enquiries and requests;

  • assessing potential assignments, projects and business opportunities;

  • communicating with prospective and existing clients, partners, suppliers and professional advisers;

  • preparing, establishing and managing contractual or business relationships;

  • delivering our professional services;

  • maintaining appropriate business and correspondence records;

  • measuring and understanding website usage;

  • improving our website, communications and services;

  • diagnosing technical problems;

  • preventing misuse, fraud and security incidents;

  • protecting our legal rights and interests;

  • establishing, exercising or defending legal claims; and

  • complying with legal, regulatory, accounting or other applicable obligations.

We do not sell personal data.

4. Legal Basis for Processing

Under Swiss data protection law, we process personal data in accordance with the principles and requirements of the FADP.

Where the GDPR applies to a particular processing activity, we may rely on one or more of the following legal bases:

  • Consent — where you have given us permission to process your data for a specific purpose, including where required for analytics cookies;

  • Pre-contractual measures — where processing is necessary to respond to a request or take steps at your request before entering into a contract;

  • Performance of a contract — where processing is necessary to perform an agreement with you;

  • Legal obligation — where processing is necessary for compliance with an applicable legal requirement; and

  • Legitimate interests — where processing is necessary for our legitimate business interests, provided such interests are not overridden by your rights and interests.

Our legitimate interests may include operating and protecting our business, communicating with business contacts, responding to enquiries, maintaining appropriate records and improving our services.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Contact Form and Business Enquiries

Our website provides a contact form through which visitors can contact T4RL.

When you submit the form, we process the information you provide for the purpose of:

  • reviewing your enquiry;

  • responding to you;

  • assessing whether T4RL may be able to assist you;

  • arranging further discussions where appropriate; and

  • maintaining a record of relevant business communications.

Submitting a contact form or contacting T4RL does not, by itself, create an advisory, contractual, fiduciary or client relationship.

We may retain correspondence where reasonably necessary for our business records, to manage a prospective or existing relationship, to comply with legal requirements or to protect our legitimate interests.

6. Cookies

Our website uses cookies and similar technologies.

Cookies are small data files stored on or accessed from your device when you visit a website.

Depending on their purpose, cookies may be used to:

  • enable essential website functionality;

  • maintain website security;

  • remember preferences;

  • measure website usage; and

  • generate aggregated analytics about visitors and website performance.

Essential Cookies

Certain cookies or similar technologies may be necessary for the website to operate correctly and securely.

These technologies do not require consent where they are strictly necessary to provide the website or a service requested by the user, subject to applicable law.

Analytics Cookies

We use analytics technologies only in accordance with the consent requirements applicable to the relevant user.

Where consent is required, analytics cookies are activated only after you have provided your consent through our cookie management interface.

You can refuse analytics cookies without losing access to the core functionality of the website.

7. Google Analytics and MonsterInsights

We use Google Analytics, a website analytics service provided by Google, to understand how visitors interact with our website and to improve its performance, structure and content.

Google Analytics is integrated into our WordPress website using MonsterInsights.

MonsterInsights facilitates the technical integration of Google Analytics with our website. Website usage information collected for analytics purposes is processed through Google Analytics in accordance with the applicable configuration and your cookie preferences.

Google Analytics may process information including:

  • the URL of pages visited;

  • IP address and related network information;

  • approximate geographic location;

  • browser and device information;

  • operating system;

  • referring source;

  • website interactions;

  • session information; and

  • identifiers generated using cookies or similar technologies.

Google Analytics uses cookies and similar technologies to distinguish website visitors and generate website usage statistics.

These may include cookies such as _ga and related Google Analytics cookies. Their exact use and retention period may depend on our Google Analytics configuration. Google states that the _ga cookie may generally remain active for up to two years.

We use Google Analytics to analyse website performance and visitor behaviour at an aggregated level. We do not use Google Analytics with the intention of directly identifying individual website visitors.

Where required by applicable law, Google Analytics is activated only after you consent to analytics cookies.

You can refuse or withdraw consent to analytics cookies through the cookie preferences available on our website.

Where the GDPR applies, processing through non-essential Google Analytics cookies is based on your consent.

Google may process information received through Google Analytics in accordance with its own applicable terms and privacy documentation.

8. Cookie Preferences and Withdrawal of Consent

Where our website displays a cookie management tool, you can use it to:

  • accept optional cookies;

  • reject optional cookies;

  • select categories of cookies you wish to permit; and

  • change or withdraw your preferences.

Withdrawal of consent does not affect processing that lawfully took place before consent was withdrawn.

You may also configure your web browser to restrict, block or delete cookies.

Please note that blocking strictly necessary cookies may affect certain website functions.

9. Service Providers and Recipients

We may disclose or make personal data accessible to third parties where reasonably necessary for the operation of our website and business.

Such recipients may include providers of:

  • website hosting and infrastructure;

  • WordPress website functionality;

  • website development and maintenance;

  • website analytics, including Google Analytics;

  • email and communications services;

  • cloud hosting and data storage;

  • cybersecurity and IT support;

  • accounting and administration; and

  • legal, tax, compliance or other professional advisory services.

We may also disclose personal data:

  • where required by law or a competent authority;

  • in connection with legal proceedings;

  • where necessary to protect our rights or those of third parties; or

  • in connection with a corporate transaction, restructuring or similar event, subject to applicable confidentiality and data protection requirements.

Service providers acting on our behalf are expected to process personal data only to the extent necessary to provide the relevant services and subject to appropriate safeguards.

10. International Data Transfers

T4RL is based in Switzerland, but some of our service providers, including technology and analytics providers, may process personal data in other countries.

As a result, personal data may be transferred to or accessed from jurisdictions outside Switzerland and, where relevant, outside the European Economic Area.

This may include the United States in connection with certain technology services, including services provided by Google.

Where personal data is transferred to a jurisdiction that is not recognised as providing an adequate level of data protection, we take appropriate measures where required by applicable law.

Depending on the circumstances, these may include:

  • recognised adequacy mechanisms;

  • appropriate contractual safeguards;

  • standard contractual clauses;

  • specific statutory exceptions; or

  • other legally recognised transfer mechanisms.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Relevant retention periods depend on the nature of the information and the context in which it is processed.

We may retain personal data for purposes including:

  • responding to and following up on enquiries;

  • maintaining relationships with prospective and existing clients;

  • performing contractual obligations;

  • maintaining business and accounting records;

  • complying with statutory retention requirements;

  • demonstrating compliance;

  • resolving disputes; and

  • establishing, exercising or defending legal claims.

When personal data is no longer reasonably required, it may be deleted, anonymised or archived in accordance with applicable legal requirements and our internal practices.

12. Data Security

We take reasonable technical and organisational measures designed to protect personal data from:

  • unauthorised access;

  • unauthorised disclosure;

  • accidental or unlawful loss;

  • alteration;

  • misuse; and

  • destruction.

Measures may include appropriate access controls, secure hosting, software updates, authentication measures, backups and other technical or organisational protections.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.

13. Your Data Protection Rights

Depending on the law applicable to your circumstances, you may have rights relating to your personal data.

These may include the right to:

  • request information about whether we process personal data concerning you;

  • obtain access to personal data concerning you;

  • request correction of inaccurate or incomplete data;

  • request deletion or destruction of personal data where applicable;

  • object to certain processing;

  • request restriction of processing where applicable;

  • withdraw consent where processing is based on consent;

  • receive certain personal data in a portable format where applicable; and

  • exercise other rights provided by applicable data protection legislation.

These rights may be subject to legal conditions, restrictions or exceptions.

To exercise a data protection right, please contact:

contact@t4rl.com

We may request reasonable information to verify your identity before responding to a request.

14. Complaints

If you believe that your personal data has been processed in violation of applicable data protection law, you may contact us so that we can review the matter.

In Switzerland, you may also contact the:

Federal Data Protection and Information Commissioner (FDPIC)

Where the GDPR applies, you may also have the right to lodge a complaint with the competent data protection supervisory authority in the relevant European jurisdiction.

15. Third-Party Websites

Our website may contain links to websites operated by third parties.

We do not control these websites and are not responsible for their content, data processing practices or privacy policies.

When following a link to a third-party website, you should review the privacy information provided by that third party.

16. Children's Data

Our website and services are intended primarily for businesses and professional users and are not directed at children.

We do not knowingly seek to collect personal data relating to children through this website.

If we become aware that personal data relating to a child has been submitted to us inappropriately, we may take reasonable steps to delete it.

17. Automated Decision-Making

We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on website visitors.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • our website;

  • our services;

  • the technologies we use;

  • our data processing activities; or

  • applicable legal requirements.

The version published on this website is the current version.

The date of the most recent update appears at the top of this Privacy Policy.

19. Contact

For questions regarding this Privacy Policy or the processing of your personal data, please contact:

Tokens For Real Life, T4RL SA
Cours des Bastions 13
1205 Geneva
Switzerland

Email: contact@t4rl.com

UID: CHE-191.121.247