Privacy Policy Helvetia

The pension fund is integrated into Helvetia Insurance’s IT environment, with the exception of the pension fund software. The IT systems used for data processing are governed by internal regulations. Care is taken to ensure that IT systems comply with current technical standards and that adequate security measures are in place to safeguard personal data. Helvetia uses data centres and IT services outside Switzerland, including maintenance and support services. For further information on countries where Helvetia’s data centres are located, refer to the “List of recipients and countries” of Helvetia.

The PK/S.live app can be used, amongst other things, to view the pension certificate. To ensure the registration and login process, as well as the operation of the PK/S.live application, the pension fund processes, for example, the personnel number, login password and IP address.
 

Die Pensionskasse bearbeitet Personendaten, solange dies für die Erfüllung der Bearbeitungszwecke, die gesetzlichen Aufbewahrungsfristen, berechtigte Interessen, wie zu Dokumentations- und Beweiszwecken, oder so lange Ansprüche gegen die Pensionskasse geltend gemacht werden können, notwendig oder eine Speicherung technisch bedingt ist, wie dies z. B. bei Sicherheitskopien der Fall ist.

When processing personal data, the pension fund takes adequate technical and organisational measures to prevent unauthorised access and other unauthorised processing. These measures are based on the international standards in this area and are checked regularly and adjusted if necessary.

The applicable data protection law as amended from time to time grants certain rights to data subjects provided certain conditions are met:

Right of access

The right to request information as to whether and which data the pension fund processes and to receive a copy of this personal data.

Right to rectification

The right to correct, complete and rectify inaccurate data.

Right to erasure

The right to request the erasure of personal data if the personal fund is no longer obliged or entitled to retain such personal data under the applicable laws and regulations.

The right to object to data processing and withdraw consent

The right to object to the processing of your personal data, in particular insofar as processing is based on legitimate interests or where data is processed for purposes of direct marketing, as well as the right to withdraw consent insofar as data processing is based on consent.

Right to data portability

The right to request that the pension fund hand over certain personal data in a standard electronic format or transfer it to another controller.

Rights in the case of automated individual decision-making

The right of the data subjects to express their point of view in the case of exclusively automated decisions and to request that the decision be reviewed by a natural person.

If you wish to exercise the above rights, you may do so by contacting the relevant data controller.

The applicable law grants you the right to obtain, upon request, further information necessary to exercise these rights.

These rights are subject to conditions, exceptions or restrictions (e.g. for the protection of third parties or trade secrets) under the applicable data protection law.

If your rights have been infringed, you can submit a report to the Federal Data Protection and Information Commissioner FDPIC (www.edoeb.admin.ch) using the Data Protection Contact Form.
 

The pension fund would like to remind data subjects that the Internet is an open, global network that is accessible to everyone. Communication via email is not usually encrypted and takes place only during regular office hours. It is possible that data may be lost or intercepted and/or manipulated by third parties, for example, to make it appear authentic. The pension fund takes appropriate technical and organisational security measures to prevent this from happening. Nevertheless, the confidentiality of data transmitted by email cannot be guaranteed. This applies, in particular, to the transmission of sensitive personal data (such as health data). Emails may be delayed, deleted, misrouted or shortened during transmission due to transmission errors, technical defects or other malfunctions. External access devices (PC, smartphone, etc. of end users) and parts of the infrastructure involved in the transmission between the sender and the pension fund are located outside the security area under the control of the pension fund. It is the responsibility of each Internet user to find out about the necessary security precautions and to take appropriate measures (e.g. up-to-date anti-virus software, etc.). The pension fund is not liable for any damage or consequences arising from the electronic exchange of information, particularly from the misuse of the email system, which it did not cause itself. The pension fund reserves the right to seek redress from the data subject for any intentional damage it suffers as a result of business transactions with the data subject via the electronic exchange of information. The pension fund reserves the right in individual cases not to reply by email or to additionally require a different form (e.g. a form with a signature) for the order or information received by email.

The pension fund is a tenant of Helvetia, and the latter is solely responsible for implementing security measures and processing data in relation to building security.

The categories of personal data processed by Helvetia in connection with ensuring security are:

• Video recordings from CCTV cameras
• Technical information, e.g. location of the camera, time of recording
• Recordings from access control systems
• Movement data relating to individuals in connection with access controls
• Personal data of visitors and guests 
•  
• Helvetia processes the above-mentioned personal data for the following purposes:
• Ensuring the protection of individuals and data,secrets, assets, systems and buildings
• Clarification of theft and security-related processes
• Use of evidence in judicial and extra-judicialproceedings
• Exercising domiciliary and ownership rights
• Access control
• Compliance with laws, directives and recommendations of authorities in Switzerland and abroad and internal rules

The following are monitored by CCTV cameras:

• Waste disposal sites
• Underground parking garages and driveways
• Certain high-security areas such as server rooms, storage rooms with valuable goods or sensitive work areas
• Parking spaces
• Stairwells
• Inner courtyards
• Lifts
• Entrances and access routes (doors, gates)
• Other signposted areas

Data may be passed on to recipients in Switzerland and abroad. Details can be found in Helvetia’s “List of recipients and countries” at www.helvetia.ch/privacy. Helvetia processes personal data for as long as needed for the described purposes and usually deletes such data after 30 days.