Privacy Notice

Last updated: October 12, 2026

Symbiotics Group SA, together with its affiliates, (collectively, “Symbiotics”) is the leading market access platform for impact investing, dedicated to private markets in emerging and frontier economies. Symbiotics offers investment, asset management and capacity building services (collectively, the “Services”). Symbiotics manages the website located at www.symbioticsgroup.com and www.syminvest.com (the “Websites”).

In this Privacy Notice, we use these defined terms to refer to various third parties:

  • Our “Clients” are third parties who use the Symbiotics platform to invest in Symbiotics’ initiatives.
  • Our “Beneficiaries” are third parties who benefit from impact investing through the Symbiotics platform.
  • Our “Visitors” are individuals who visit the Websites.
  • “Personal Data” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual.

We at Symbiotics know you care about how your Personal Data is used and shared, and we take your privacy seriously. Symbiotics complies with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), among others.

Symbiotics, like all financial companies, needs to share Personal Data to run our everyday business. Symbiotics gathers information about our Visitors, Clients and Beneficiaries to provide a better, more focused experience for these individuals and to improve our Services. This Privacy Notice will help you understand what Personal Data we collect at Symbiotics, how Symbiotics uses this data, and what choices you have about this.

The affiliates of Symbiotics Group SA include any entity that controls Symbiotics Group SA, that is controlled by Symbiotics Group SA, or that is under common control with Symbiotics Group SA. The words “our,” “us,” “we,” refer to Symbiotics. This Privacy Notice does not cover the practices of companies we don’t own or control.

This Privacy Notice is separated into four sections:

  1. Collecting: A description of the Personal Data we collect and why we collect
  2. Sharing: A description of who we share Personal Data with and
  3. Cookies: A description of how Symbiotics uses cookies, beacons and other online tracking technologies in greater detail.
  4. General: An outline of the concepts that apply to all the types of Personal Data we collect. Section 4 also explains the data protection or consumer rights you may have, how we communicate changes to this Privacy Policy, and how you can contact us regarding any questions, issues and/or to exercise your rights with respect to your Personal Data or anything contained within this Privacy Notice.

1. Collecting: The Personal Data Symbiotics collects and why we collect it

The types of Personal Data we collect depends on the Services we provide to you. The Personal Data that we may collect about you broadly falls into the following categories:

A. Personal Data that you provide voluntarily

If you are a Client who invests in our investment solutions , or a potential Client, we may ask you to provide Personal Data voluntarily. This may include:

  • Identification data, such as names, addresses, telephone numbers, email addresses, or business contact information;
  • Personal characteristics, such as date of birth or nationality;
  • Data necessary to create a profile, such as a username and password;
  • Professional information, such as employment and job history, title, or representation authorities;
  • Identifiers issued by public bodies, such as passport, identification card, or tax identification number;
  • Financial information, such as financial and credit history information or bank details;
  • Transaction/investment data, such as current and past investments, investment profile, investment preferences and invested amount, number and value of shares held, role in a transaction (seller/acquirer of shares), or transaction details, tax details.

If you are a Visitor then you may provide Personal Data voluntarily, such as:

  • Job application information; and
  • Personal Data you choose to share with Symbiotics over social media, when you connect with us on our social media accounts.

If you are a Beneficiary then you may provide Personal Data voluntarily, such as:.

  • Identification data, such as names, addresses, telephone numbers, email addresses, or business contact information;
  • KYC-related personal information for those individuals (identity/background details collected for KYC) CVs / résumés (including career and education history and other information contained in the CVs).

Why we collect this Personal Data

We collect this Client Personal Data for the following commercial purposes:

  • Account registration: We collect information that is necessary for you to register for an account to use our Services;
  • Client communications: We collect information that is necessary to respond to enquiries and support requests you submit to Symbiotics;
  • Direct marketing: We may collect information to send you direct marketing about our Services, newsletters, and other company updates to Clients; and
  • When you request to be contacted: We use your Personal Data to contact you and provide information about our Services.

We collect this Visitor Personal Data for the following commercial purposes:

  • To respond to your job application; and
  • To promote our Services to you over social media.

We collect this Beneficiary Personal Data for the following commercial purposes:

  • To conduct know-your-customer due diligence on such individuals;
  • To evaluate the company for inclusion in our Investment Report and to assess whether the financial institution is a suitable investment, which requires review of the submitted curricula vitae; and
  • To maintain and use professional contact details for ongoing discussions related to the        contemplated investment.

B. Personal Data that we collect automatically

If you are a Visitor, then when you visit our Website we may collect certain information automatically from your device. Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and Similar Tracking Technology” below. This may include:

  • Identifiers such as IP address, device type, and unique device identification numbers;
  • Country- or city-level geolocation information;
  • Internet activity information about how your device has interacted with our Website, including the pages accessed and links clicked, as well as how you interact with marketing emails and other communications we may send you; and
  • Other technical data, such as Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, and other technology on the devices you use to access this website.

We collect this Visitor Personal Data for the following commercial purposes:

  • Analytics and fraud prevention: We collect information for our internal reporting and business analytics, to prevent or detect illegal activities on our Website or Services (or other activities that do not comply with our Terms of Service), and to improve the quality and relevance of our Website to visitors;
  • Auditing related to current interactions with you and concurrent interactions with our Website: to verify accurate delivery of our Services;
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for those activities: for example: to identify invalid clicks and protect us from fraudulent behavior; and
  • Verifying or maintaining the quality of our Services and improving, upgrading or enhancing them: for example: (i) for audit, research, and analysis of the information in order to maintain, improve, upgrade or enhance our services, and to ensure that our technologies function properly, (ii) other internal operations, such as debugging, support, and security.

Data collection will be done regarding applicable data protection laws, taking care of your consent in due time.

C. Personal Data that we obtain from third party sources

We may obtain Personal Data about Clients and potential Clients from third parties. The categories of Personal Data we obtain are basic contact information such as name, email, company, title, phone, and address. We may collect this information from a number of sources, including through our business partners, service providers and legal professional advisors. We also work with third parties and publicly available sources to perform due diligence background checks upon Clients when this is legally required. For example, we may confirm the country of citizenship of a Client.

If you are a Client or Beneficiary and not located in the EEA, we may obtain sensitive Personal Data about you from third parties and publicly available sources regarding your gender. In each case we ensure that the information we collect is proportionate to our stated purposes. We collect this Personal Data for the commercial purpose of providing Services to our Clients. We also collect this Personal Data for the business purposes of:

  • To supplement our records: We collect information that is necessary supplement the records we hold about you, so that we can improve the quality and relevance of any advertising or business communications we send you.
  • For compliance with legal obligations: to comply with legal obligations that apply to us, such as anti-money laundering regulations.

Symbiotics’ use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Legal Basis:

Our legal basis under the GDPR for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data from you only where we have your consent to do so, where we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

In general, we will use the Personal Data we collect from you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your Personal Data. However, we may also use your Personal Data for other purposes that are not incompatible with the purposes we have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.

If you have questions or need further information concerning the legal basis on which we collect and use your Personal Data, please contact us using the contact details provided under the “How to contact us” section below.

2. Sharing: Who does Symbiotics share Personal Data with?

We may disclose Personal Data to third parties for a variety of business or commercial purposes. This includes disclosure:

  • Regarding Visitors, Clients and Beneficiaries, to our affiliates for our operational business We currently have affiliates in Armenia, Colombia, India, Mexico, Netherlands, South Africa, Singapore, and United Kingdom.
  • Regarding Clients and Beneficiaries, to third-party investment funds we manage or advise.
  • Regarding Visitors, Clients and Beneficiaries, to our third-party service providers, including service providers appointed by the third-party investment funds that we either manage or advise who provide data processing for our operational business purposes. For example, we may disclose this Personal Data to support the delivery of, provide functionality on, or help to enhance the security of our Website or Services, or for other operational and commercial purposes that are described in this Privacy Notice or notified to you when we collect your Personal Data;
  • Regarding Visitors, to our technical partners that provide technical infrastructure to operate our Website, for our operational business purposes;
  • Regarding Clients, to our technical partners that provide technical infrastructure to operate the Symbiotics platform, for our operational business purposes;
  • Regarding Beneficiaries, to our Clients, for the commercial purpose of providing our Services;
  • Regarding Visitors, Clients and Beneficiaries, to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • Regarding Visitors, Clients and Beneficiaries, to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer that it must use your Personal Data only for the purposes disclosed in this Privacy Notice;
  • Regarding Visitors, Clients and Beneficiaries, to any other person with your consent to the disclosure; and
  • Regarding Visitors, Clients and Beneficiaries, as otherwise allowed by applicable data protection

3. Cookies and Similar Tracking Technologies 

When you visit the Symbiotics Website or use our Services, we and our third-party providers automatically collect data using cookies, web beacons, and similar technologies.

A cookie is a small piece of data sent from a website to your browser and stored on your device. We use cookies to analyze user behavior, improve our Symbiotics Website and Services, and measure effectiveness. We also use third-party cookies to collect aggregated website usage data. You can control cookie settings in your browser’s ‘Options’ or ‘Preferences,’ or on mobile devices by going to Settings, selecting your browser, and then accessing the Cookies section. Disabling cookies may affect certain website features. For more information on managing cookies, visit www.allaboutcookies.org.

Symbiotics uses web beacons with cookies or separately to compile information about your engagement with us. Web beacons are clear electronic images that can recognize certain types of information on your computer, such as cookies, when you view a particular website tied to the web beacon, and a description of a website tied to the web beacon.

Here is a basic description and overview of the type of cookies Symbiotics uses:

A. Required Cookies

Required cookies make it possible for you to access the Services, navigate within the Services, and access information related to your account.

Each time you log into the Services, a cookie containing an encrypted, unique identifier that is tied to your account is placed on your browser. These cookies allow Symbiotics to uniquely identify you when you are logged into the Services and to process your requests.

Required cookies are necessary to operate the account portal, and users cannot opt out.

B. Functionality Cookies

Functionality cookies allow the Website and Services to remember information you have entered or preferences you select, and provide enhanced, more personal features. These cookies allow you to optimize your use of the Services after logging in. These cookies can also be used to remember changes you have made to the portions of your account that you can customize.

You can use your browser settings to opt out of functionality cookies. For more information on how to do that, click here. Note that opting out may affect the functionality of our Website or Services for you.

C. Performance Cookies

These cookies collect data about how visitors use the Website or Services. This includes data like which pages visitors go to the most. These cookies don’t collect information that individually identifies visitors. The data these cookies collect is aggregated and intended to be de-identified and used to improve how the site functions and performs.

You can use your browser settings to opt out of performance cookies. For more information on how to opt out, click here.

4. General

A. How we secure your Personal Data

Symbiotics uses appropriate security measures to protect the security of your Personal Data both online and offline. These measures vary based on the sensitivity of the information that we collect, process and store. Please note, though, that while we strive to protect your Personal Data, we cannot guarantee that unauthorized access will never occur.

B. Reliance on AI-recording tool

Symbiotics utilizes an AI-recording tool to record and transcribe meetings. This tool may capture meeting content, generate transcripts, produce summaries or action points, and perform analytics. Automated processing may include speech-to-text conversion, language translation, topic extraction, and the generation of draft notes. Meeting content will be processed based on legitimate interests and contractual necessity for record-keeping, compliance, and operational efficiency. Participants who do not wish to be recorded or processed by the AI tool should inform the organizer before the meeting starts. Participants are discouraged from sharing special categories of data as prescribed by Article 9(1) of the GDPR and the equivalent article in the Swiss New Federal Act on Data Protection (nFADP).

Personal data will be processed in accordance with the GDPR. Symbiotics acts as the data controller, determining the purpose and means of processing personal data. AI recording tools act as the data processor, processing personal data solely on behalf of and as agreed with Symbiotics. Data subjects have rights of access, rectification, erasure, restriction, objection, and data portability, subject to legal exemptions. Human review shall be applied to validate outputs, particularly where transcription informs material decisions. The AI-recording tool is used as an assistive tool and does not replace human judgment. Users should critically assess AI outputs before relying on them. AI-generated transcripts, translations, summaries, and analytics may contain errors, omissions, or misattributions. Background noise, accents, technical issues, and overlapping speech can affect accuracy. Draft outputs are provided “as-is” for convenience and should be verified against the original recording or independent notes before reliance. No assurance is given that AI outputs are complete, current, or free from error.

To the fullest extent permitted by law, Symbiotics excludes all implied warranties relating to the AI- recording tool and AI outputs. Symbiotics is not liable for indirect or consequential loss arising from the use of or reliance on AI outputs. Nothing in this disclaimer limits liability that cannot be excluded under applicable law. Users remain responsible for decisions taken based on AI outputs and for compliance with their own contractual and legal obligations.

Recordings, transcripts, and derived artefacts (for example, summaries and action logs) will be retained for three months unless a longer period is required by law or to establish, exercise, or defend legal claims. At the end of the retention period, data will be securely deleted or anonymized. For information about your rights, international data transfers and how to contact us, please refer to this policy.

C. International Operations and Transfers Out of the EEA

Symbiotics’ own data centers are located in Switzerland, and by using our Services, interacting with our Website, or otherwise providing your Personal Data to us, your Personal Data will be transferred to and processed in Switzerland.

Symbiotics may transfer Personal Data to third-party processors/controllers located outside the EEA and Switzerland. In such cases, Symbiotics relies on standard contractual clauses (SCCs) as the legal mechanism to ensure that your personal data is protected in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

D. Information about Children 

We do not knowingly collect any Personal Data directly from children under the age of 16.

If we discover we have received any Personal Data from a child under the age of 16, we will take reasonable steps to delete that information as quickly as possible. If you believe we have any information from or about anyone under the age of 16, please contact us at info@symbioticsgroup.com

E. Data Protection Rights

Symbiotics supports the exercise of your data protection rights in accordance with applicable data protection laws. Specifically, if you are located in the EEA or are a California resident (or otherwise have these rights under applicable data protection law):

  • You can request to know, access, correct, update or delete your Personal Data by contacting us using the contact details provided under the “How to contact us” heading below, and we will fulfill your request in accordance with applicable data protection We may need to verify your identity in order to action your request, including by asking for you to provide a government issued Identification Document. Once we have verified you, we will respond and comply with your specific requests.
  • You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under “How to contact us”.

If you are located in the EEA, you may also have the following rights:

  • You can object to the processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your PI. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” below.
  • If we have collected and processed your Personal Data on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.

If you would like to exercise any of your rights or have questions about our privacy practices, you can contact us using the details provided under the “How to contact us” in Section H of this Notice. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

F. Data Retention and Deletion

Symbiotics will retain your information as long as we have a legitimate interest or business purpose to retain the information, or as otherwise allowed by applicable law. We reserve the right to retain your Personal Data for as long as we reasonably believe it to be necessary in order to facilitate our legitimate interests, in order for us to comply with our legal or regulatory obligations, where based upon reasons of substantial public interest, or where your Personal Data remains public information by your own actions. Your Personal Data will not be retained for longer than necessary with regard to the purposes and compliance obligations contemplated in this notice, subject always to applicable legal minimum retention periods. For further information, please contact the relevant data controller listed in Section H.

G. Changes to this Notice

We are committed to improving our Website and Services, and as a result, this Privacy Notice may be subject to change. Any updates will be notified at the top of the page.

H. How to contact us

If you have questions about this Privacy Notice, our privacy practices or if you want to submit a request to exercise any data subject rights, then please address this to:

If your request relates specifically to the EU, please contact our EU representatives.

Symbiotics Netherlands B.V.

Symbiotics France SA

If you are located in the EEA and contacting us does not resolve your complaint, you may file a complaint, free of charge, with the relevant EU data protection authority (DPA). Symbiotics will cooperate with any DPAs in the investigation and resolution of complaints that cannot be resolved between Symbiotics and the complainant that are brought to a relevant DPA.

If you are unable to access this notice, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.