Privacy Policy

Kora SA is the controller of the personal data described in this policy. Our registered address is Avenue Cardinal-Mermillod 36, 1227 Carouge, Geneva, Switzerland.

For any question or request about your personal data, write to info@koragroup.ch. This policy is written to meet the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

This website collects personal data in two places. The first is the contact form. When you use it, we receive:

• your name
• your company
• your email address
• your telephone number, if you provide one
• the nature of your enquiry, meaning the role you select
• the message you write
• the date and time of submission

The site also has a private, access code protected page where a business owner can submit their own company to us. If you use that form, we receive:

• the company name and website
• the canton and the sector
• the year founded and the number of employees
• revenue, EBITDA and EBITDA margin
• the percentage of the company you own
• your reason for exploring a sale
• your timeline
• whether management stays after a sale
• whether a sale process is already running
• your name, role, email address and telephone number
• any documents you choose to upload
• the date and time of submission

We do not ask for anything else, and we do not build profiles on visitors.

We use this information to respond to enquiries about a possible sale, an acquisition or an advisory introduction, and to keep a record of that correspondence.

We rely on our legitimate interest in responding to a business enquiry that you initiated. Where consent is required, we rely on the consent you give by choosing to send us the form.

We use two service providers, and no others receive your data. Supabase hosts our database. Our database instance is hosted in the United Kingdom (London region). Resend delivers our notification emails. Resend is based in the United States, so using it involves a transfer of your data outside Switzerland and the European Economic Area. That transfer is made on the basis of standard contractual clauses, together with the additional safeguards those clauses require.

Any documents uploaded through the company submission form are stored in a private Supabase storage bucket that is not publicly reachable. Only Kora can open them, and the download links we use are time limited and expire shortly after they are issued.

We never sell personal data, and we never share it with anyone beyond the two processors named above, unless the law obliges us to.

We keep enquiry data for 24 months from our last contact with you, then delete it. If a transaction discussion is live, we keep it for the duration of that discussion and for any legal retention period that follows.

We keep company submissions, and any documents uploaded with them, for 24 months from our last contact with you, then delete them, unless a transaction discussion is live. In that case we keep them for the duration of that discussion and for any legal retention period that follows.

You can ask us for access to your data, for correction of anything inaccurate, for deletion, for portability of what you gave us, and you can object to our use of it. Write to info@koragroup.ch and we will respond promptly.

You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to your local supervisory authority in the European Economic Area.

This site sets no tracking cookies and no advertising cookies. We run no analytics or advertising scripts. If that ever changes, this section will be updated before any such cookie is set.

If we change how we handle personal data, we will update this page and the date shown at the top.

The French version of this document is authoritative. In case of any discrepancy between language versions, the French version prevails.