1.  General and scope of application

This information explains how we handle your personal data. In order to provide our services, we process your personal data in accordance with the European Data Protection Regulation (GDPR) and the Swiss Data Protection Act (SDPA).

This privacy policy applies to all Protaminex AG websites, applications, services, contracts, tools, unless they have their own privacy policy, and regardless of how you access or use them (including access via mobile devices). If necessary, we can draw up a separate data protection information for further activities.

 

2. Responsible data protection officer

Responsible for data processing is:

Protaminex AG

Bahnhofstrasse 24

CH-8001 Zurich  

If you have any questions regarding the processing of your personal data, please contact us at info@protaminex.ch or by post at Protaminex AG, Data Protection Officer, Bahnhofstrasse 24, CH-8001 Zurich.

 

3. What personal data do we process?

We process the personal data that you yourself provide to us. If necessary for the provision of our services, we also process personal data that we have lawfully obtained from publicly accessible sources (e.g. public databases, Internet, press) or from third parties (e.g. brokers, cooperation partners, lawyers, experts).

We may process the following personal data, among others:

• Personal data (for example, name, address and other contact details, birthday, language preferences, application and usage data);

• Data on customer activities (for example contract data, claims, customer contacts);

• Other data that we are required or authorised by law to collect and process and that we require for your authentication, identification or to verify the data we collect (for example, origin of assets).

Please note that without your personal data we will not be able to provide our services or enter into or perform a contract with you.

 

4. For what purposes and on what legal basis do we process your personal data?

We use your personal data in accordance with the legal requirements for the purposes described below:

 

5. To which other persons do we disclose your personal data?

We do not disclose your personal data to unauthorised third parties. Our employees only have access to the data they need to fulfil their contractual and legal obligations. In order to provide our services, we also rely on the transfer of your data within and outside the group. Depending on the purpose, this includes, for example, the parent company, brokers, cooperation partners and other companies in the categories of claims processing, IT services, debt collection, marketing. All third parties integrated into our business processes process your personal data on our behalf and only as we are permitted to do ourselves. They are carefully checked by us with regard to data protection and data security and are obliged to maintain confidentiality and to comply with the data protection provisions, taking into account the applicable statutory data protection provisions. Furthermore, we must disclose your personal data to government agencies (for example, authorities, social insurers, courts) insofar as we are legally obliged to do so.

 

6. How do we use automated individual case decisions and profiling?

Your data may be partially processed by automated means with the aim of assessing certain personal aspects, for example in the following cases:

• We are obliged to take certain measures due to legal and regulatory requirements (for example, combating money laundering);

• Data evaluations are carried out (e.g. when the contract is concluded, during the term of the contract and in the case of disbursements);

• We carry out evaluations in order to be able to inform and advise you about products in a targeted manner. This enables us to provide needs-based communication and advertising (including market and opinion research).

We can make automated individual decisions for the establishment and implementation of the contractual relationship, for example, decisions are made automatically on the basis of your information about the conclusion of the contract, possible risk exclusions, the amount of the insurance premium or the obligation to pay benefits. The fully automated decisions are based on previously defined rules for weighting the information (for example, when an application is made, the calculation and assessment is based on actuarial criteria and calculations). Insofar as we make such automated individual decisions, you have the right to intervene on the part of the person responsible, to express your own point of view and to contest the decision. This right does not exist if your request has been fully granted.

 

7. Where is your personal data processed?

If necessary for the provision of our services and taking into account the intended purpose, your personal data will be transferred to the recipients within and outside Switzerland and the EU specified in section 5. Data will only be transferred to countries outside the EU if an appropriate level of data protection comparable to that in Switzerland and the EU exists or if the recipient provides us with a contractual assurance of equivalent data protection.

 

8. Do we use cookies and similar technologies?

When you visit a website, it may retrieve or store information from your browser, usually in the form of cookies. This may be information about you, your settings or your device. Mostly it is used to ensure that the website functions as expected. Usually, this information does not directly identify you. However, it can provide you with a more personalised web experience. You can also choose not to allow certain types of cookies.

If we also offer you a chat function as a contact option, you will be connected to a person from Customer Service and can communicate in writing in real time in a separate browser window. No contact details will be requested from you and the chat content will be deleted after the chat has ended.

 

9. How is your personal data protected?

When you send us information via the internet or other electronic means, there is always a risk that it may be lost, damaged or tampered with. You therefore do so at your own risk. Data traffic via the internet platforms provided is always transmitted in encrypted form. We ensure that the personal data received is protected by technical and organisational measures against unauthorised processing, loss and destruction.

 

10. How long will your personal data be kept?

We process and store your personal data for as long as we are obliged to do so in accordance with legal or contractual provisions.

 

11. What rights do you have in connection with your personal data?

You have a right to information, correction, objection, restriction and deletion of your personal data and - where applicable - a right to data portability as well as a right of appeal to the competent data protection supervisory authority. Furthermore, you have the right to object to the processing of your personal data for the purpose of direct advertising. If we process your personal data within the scope of legitimate interests, you can also object to the processing if there are grounds against the data processing based on your particular situation. If you wish to exercise these rights, please contact our Data Protection Officer. Please note that exercising these rights may result in us no longer being able to enter into or perform the contract or provide further services. We may also, in certain circumstances and in accordance with applicable law, refuse or only partially comply with such disclosure or refuse to correct or delete your personal data.

 

Informed consent:

I have read and understood the above information on data protection. I consent to the processing of personal data requiring special protection (e.g. health data in connection with the conclusion of the contract, its implementation and/or the processing of claims). This information was last updated in January 2021.