Privacy policy
This page describes how BB-Services Geneva processes personal data collected via the NEXUS BBS platform, SANCTUM forms and exchanges with our teams.
Last updated: 8 July 2026 � UID CHE-472.377.227
1 � Data controller
BB-Services Geneva
Rue de Chantepoulet 10, 1201 Geneva, Switzerland
Email: contact@bbs-geneve.com
2 � Data collected
- Identity and contact details (name, email, phone, country)
- Professional profile and information declared in SANCTUM or �Introduce yourself�
- Messages exchanged with SIMOH or our teams
- Technical data (IP address, browser, secure logs)
- Billing data via Stripe where applicable
We do not request identity documents or bank statements via the public SANCTUM form.
3 � Purposes
4 � Legal basis (GDPR / nFADP)
- Consent � acceptance of this policy (SANCTUM, forms)
- Legitimate interest � platform security
- Contract performance � services, mandates, memberships
- Legal obligation � accounting and tax retention
5 � Hosting & processors
Data hosted by Google Ireland Limited (Google Cloud Platform), resources located in the European Union.
Processing subprocessors: Google Cloud Platform (hosting, database), Stripe (payments), professional transactional email provider — standard contractual clauses and applicable security measures.
6 � Security
In transit: HTTPS (TLS 1.2 / 1.3).
At rest: Google Cloud encryption.
Admin access: strengthened authentication (MFA).
Headers: CSP, HSTS, clickjacking protection.
7 � Retention
- SANCTUM: up to 24 months after last contact
- Active clients: contract duration + legal periods
- NCNDA / mandates: per agreements (often 5 years minimum)
8 � Your rights
Under GDPR and Swiss nFADP: access, rectification, erasure, restriction, objection, portability.
To exercise your rights: dpo@bbs-geneve.com (see section 11). Complaint possible with the FDPIC (Switzerland).
9 � Sharing
We do not sell your data. Sharing limited to authorised teams, processors and introduction partners with explicit agreement (NCNDA / mandate).
10 � Cookies
Technical cookies only (authentication session, language). No third-party advertising cookies for resale purposes.
11 � Data protection contact (DPO)
BB-Services Geneva has voluntarily designated a data protection contact point (DPO-equivalent function, without legal obligation to appoint at this scale).
For any request relating to your data (access, rectification, erasure, objection, portability) or any question about this policy.
Timelines: acknowledgement within 48 business hours � full response within 30 days (GDPR / nFADP deadline).
General contact: contact@bbs-geneve.com
12 � SIMOH & artificial intelligence
SIMOH is NEXUS BBS's orientation assistant (public welcome, qualification, general network information). It does not replace human review of your file � especially for SANCTUM and sensitive mandates.
- What you enter: your messages in the SIMOH chat (and, where applicable, exchanges linked to your journey on the platform).
- How it is processed: your messages are transmitted securely (HTTPS) to our servers, then to an AI API (provider located in the European Union) solely to generate an orientation response.
- What we do not do: no resale of conversations � no targeted advertising � no automatic membership or network access decision � no personalised financial advice (BBS is not regulated by FINMA).
- Retention: limited technical logs and histories (security, service quality, follow-up of your request), per section 7 durations.
You may request access to or deletion of your exchanges by writing to dpo@bbs-geneve.com.
13 � Commercial discretion & mandates
BB-Services Geneva applies a discretion doctrine across all facilitation activities: corridors, introductions, off-market deals and partnerships.
Introduction mandates, success fee schedules, partner agreements and corridor terms are never published on the public site or in non-qualified spaces. They are communicated only on qualified dossier, under NCNDA or signed mandate.
Any party admitted to the network commits to mutual confidentiality of exchanged information � during the relationship and, unless otherwise agreed, for a minimum of five years after it ends, in accordance with applicable contractual agreements.
The public site does not constitute a commercial offer or investment solicitation. For any mandate request: contact@bbs-geneve.com.
Questions about your data?