Privacy Policy Helvetia

As part of the care we provide for your child or children, we process the categories of data described below; please note that the examples listed are not exhaustive. 

In the event of changes to data over time (e.g. due to a change of address or a change in civil status), we may continue to store the previous status of such data in addition to the current status within the framework of the statutory storage periods. 

Master data includes, in particular, contact information (e.g. name, address, telephone number, email address, photographs, care and customer history) as well as information about third parties (e.g. contact persons, details of family members). We receive master data from you directly or from third parties (e.g. from public authorities such as municipalities). 

This includes data generated in connection with the conclusion or performance of a contract, such as contractual benefits, data relating to the provision of benefits, data from the period prior to the conclusion of the contract, details regarding the performance of the contract and financial data (e.g. information on financial circumstances for the purposes of tariff classification), as well as declarations of consent. We generally collect contractual data directly from you or receive it from third parties involved in the processing of the contract (e.g. employers), but also from third-party sources (e.g. providers of creditworthiness data) and from people closely associated with you (e.g. family members). 

This refers to data relating to the care relationship that is generated during the course of care provision, such as health information (e.g. allergies) or preferences (e.g. dietary requirements). This usually involves information about the person in care, but may also relate to information about their parents or other third parties (e.g. other key persons). We receive the care details either from you directly or from third parties.  

When you contact us by email, telephone, post or via other means of communication (e.g. the nursery app), we collect the data exchanged between you and us, including your contact details and metadata relating to the communication. 

We will specifically point out to you if we record telephone conversations, such as for evidence or training purposes. If you do not wish to be recorded, please let us know or end your call. 

When communicating with you, for example when you submit a request for information, we sometimes also collect data to establish your identity (e.g. information from official identification documents, answers to security questions) in order to prevent us releasing information to unauthorised third parties.​​​​​​​

This is data that we collect as part of the registration process (e.g. login areas) or that you provide to us (e.g. email address). 

In order to provide you with the best possible service, we would like to find out about your preferences and assess your needs. To this end, we collect and use data about your behaviour when interacting with us and about the preferences you share with us (e.g. responses to electronic communications, participation in events), supplemented where necessary with information from third parties. 

Behavioural data is comprised of details of certain actions, such as the use of electronic means of communication (e.g. whether and when you opened an email) or the way in which you obtain services, as well as your participation in prize draws, competitions and events. Preference data tells us about your requirements and which services might be of interest to you. We obtain this information from analysis of existing data, such as behavioural data, so that we can tailor our offers more precisely to you. In order to improve the quality of our analyses, we may link this data with other data that we obtain from third parties such as address brokers, public offices and publicly accessible sources. 

We may also collect data from you in other situations. In connection with official or judicial proceedings, for instance, data accumulates (e.g. files, evidence) that may relate to you. We may also collect data for health protection reasons (e.g. within the framework of protection concepts). 

We may receive or produce photographs, video or audio recordings in which you may be recognisable, which we produce or receive from third parties and in which you are recognisable (e.g. at events, via security cameras, etc.) or in relation to participation in events. 

We obtain the data mentioned here primarily from you, but also from third parties (e.g. authorities).

For the purposes mentioned in clause 4, we may also process and evaluate your data automatically, i.e. electronically, in order to assess certain personal characteristics or behaviour (so-called profiling). This includes automated data processing, for example for combating money laundering and terrorist financing, for combating insurance fraud, for credit checks or individual risk evaluation and assessment as a necessary calculation basis for the insurance policy, as well as for identifying different interests and personal requirements for marketing purposes, product and service offers and services. 

In the event that we base our decisions when concluding a contract or handling a claim exclusively on automated data processing (so-called automated individual decisions) and if such decisions cause legal effects or significant disadvantages for you (e.g. termination, risk exclusions, premium amount, denial of benefits) or if they affect you significantly in a similar way, we will inform you of this in an appropriate manner and separately inform you that you can have the relevant decision reviewed by a member of our staff if necessary. Such fully automated decisions are always based on rules we have established in advance for weighting the information.  

When your personal data is processed by recipients in accordance with clause 7.6 above, your data may also be transmitted abroad, for example when personal data is forwarded to other Group companies or to service providers. Under certain circumstances, we may also transmit data to third parties abroad who are involved in the processing of the contract (e.g. co-insurers and reinsurers, authorities and courts), as well as to other bodies such as foreign tax authorities. 

Your data may therefore be processed worldwide, including outside Switzerland or the European Union or the European Economic Area (i.e. also in so-called third countries such as the USA). Many third countries currently do not have laws that ensure a level of data protection equivalent to the applicable FADP. 

Therefore, following a risk assessment, we take contractual precautions to contractually compensate for the weaker legal protection, as well as further measures (e.g. pseudonymisation) to reduce the risk of state/government access abroad authorised by foreign legislation.  

We rely on the guarantees required by law, insofar as the recipient is not already subject to a legally recognised set of rules to ensure data protection and we cannot rely on an exceptional provision. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests, if the performance of a contract requires such disclosure, if you have given your consent or if it is a matter of data that you have made generally accessible and you have not objected to its processing. 

A detailed list of the countries to which we may transfer data can be found in the separate list of recipients and countries, which you can access at www.helvetia.ch/privacy or request from our Data Protection Unit.

In accordance with the applicable data protection law and under certain conditions, you have the following rights:

Right of access

You may request information as to whether we process your data and, if so, what data is being processed, and receive a copy of this personal data.

Right to rectification

You can request that we correct incorrect data or complete incomplete data.

Right to erasure

You can request the erasure of your data unless we are obliged or authorised to retain your data under applicable laws and regulations.

Right to restriction of processing

You have the right to object to the processing of your personal data at any time with future effect, provided that the processing is not strictly necessary for the performance of a contract and/or that we are not obliged or authorised to process the data under applicable laws and regulations.

Right to object to data processing and withdraw consent

Where applicable, you have the right to object to the processing of your data, in particular for the purposes of direct marketing, profiling conducted for direct marketing and other legitimate interests in the processing.

In cases where data processing is based on your consent, you have the right to withdraw this consent at any time. If you withdraw your consent this does not affect the lawfulness of the data processing undertaken on the basis of your consent up until the revocation.

Right to data portability

You may request that the data provided by you be released or transmitted in a commonly used electronic form to another controller, provided that the processing is carried out by means of automated processing or you have consented to the processing.

Rights in the case of automated individual decision-making

You have the right to express your point of view in the case of exclusively automated individual decisions and to request that the decision be reviewed by a natural person.

Right to complain

You also have the right to lodge a complaint with our Data Protection Unit or the competent data protection supervisory authority if you do not agree with our handling of your rights.

Contact details of regulatory authority

• You can contact the Swiss Supervisory authority here.
• The contact details for the Liechtenstein Data Protection Office can be found here.
• A list of authorities in the EEA can be found here.
• The UK supervisory authority can be contacted here.
  

Please note that these rights are subject to legal requirements and that exceptions and restrictions apply. In particular, we may need to further process and store your data in order to safeguard our own legitimate interests, such as the establishment, exercise or defence of legal claims, or to comply with legal obligations. To the extent legally permissible, in particular to protect the rights and freedoms of other data subjects and to safeguard legitimate interests, we must therefore also partially or wholly reject a data subject’s request (e.g. by redacting certain content that concerns third parties or our trade secrets). In order for us to be able to rule out fraudulent use, we must verify your identity (e.g. with a copy of your identity card, if identification is not possible in any other way). We generally retain information in connection with the processing of data subject requests for three years.

For queries and to exercise your rights, you can contact any of the companies listed below in writing or by email:

Helvetia Insurance
Datenschutz
St. Alban-Anlage 26
4002 Basel
E-Mail: datenschutz@helvetia.ch

Your data will only be stored by us for as long as is required for reaching the aforementioned purposes and for as long as we are legally or contractually obligated to store it. 

In individual cases, it is possible to retain personal data for longer, for example if claims are asserted against us (during the statutory limitation period) or if we are otherwise contractually, legally or officially obliged to do so, if you consent to this or if legitimate (business) interests, documentation and evidence purposes require this. As soon as your data is no longer required for the above purposes, it will be erased as part of our standard erasure processes. 

When processing personal data, we take appropriate technical and organisational measures to prevent unauthorised access and other instances of unauthorised processing. These measures are based on international standards and are regularly reviewed and adjusted if necessary. 

We would like to remind you that the Internet is an open, global network that is accessible to everyone. Communication via email is not usually encrypted and takes place only during regular office hours. It is possible that data may be lost or intercepted and/or manipulated by third parties, for example, to make it appear authentic. We take technical and organisational security measures to prevent the risk within our systems. Nevertheless, the confidentiality of data transmitted by email cannot be guaranteed. This applies, in particular, to the transmission of sensitive personal data (such as health data). Emails may be delayed, deleted, misrouted or shortened during transmission due to transmission errors, technical defects or other malfunctions. External access devices (PC, smartphone, etc. of end users) and parts of the infrastructure involved in the transmission between the sender and us are located outside the security area under our control. It is the responsibility of each Internet user to find out about the necessary security precautions and to take appropriate measures (e.g. up-to-date anti-virus software, etc.). We are not liable for any damage or consequences arising from the electronic exchange of information, particularly from the misuse of the email system, for which we were not at fault. We reserve the right to claim compensation from you for any intentional damage we may suffer as a result of our business dealings with you via the electronic exchange of information. We reserve the right in individual cases not to reply by email or to additionally require a different form (e.g. a form with a signature) for the order or information received by email.