1. Purpose of the policy
This privacy policy explains how VYDA SA collects, uses, stores and protects personal data processed in connection with its website and its activities in the fields of consultancy, insurance brokerage, pension provision, taxation and wealth planning.
VYDA SA processes personal data in accordance with the Federal Act on Data Protection (FADP) of 1 September 2023.
Where the European Union's General Data Protection Regulation (GDPR) applies — in particular where the data subject resides in an EU Member State, which includes cross-border workers residing in France — VYDA SA also undertakes to comply with the obligations arising therefrom.
2. Data controller
The data controller is:
Company name : VYDA SA
Address : Route de Meyrin 267, 1217 Meyrin, Switzerland
Email : contact@vyda.ch
Telephone : +41 79 480 99 10
Company registration number : CHE-436.423.133
3. Personal data collected
VYDA SA may collect the following personal data:
- Identification details: surname, first name, date of birth, nationality
- Contact details: postal address, email address, telephone number
- Data relating to family circumstances: marital status, children, dependants
- Employment details: employment status, employer, self-employment, job title, income
- Financial and asset data: income, wealth, tax, pension provision, existing insurance policies
- Data relating to insurance or pension contracts
- Documents provided by the client: supporting documents, forms, certificates, contracts, pension certificates
- Data exchanged via the contact form, by email, telephone or during appointments
- Technical data relating to website browsing: IP address, browser, device used, pages viewed, date and time of visit
Sensitive data
Certain data collected in the course of providing advice (health data, financial data) is considered sensitive data within the meaning of the FADP and special categories of data within the meaning of the GDPR. It is subject to enhanced protection and is processed only with your express consent or on another legal basis authorising such processing.
VYDA SA collects only the data necessary for the intended purpose.
4. Purposes of processing
Personal data may be processed for the following purposes:
- To respond to enquiries submitted via the website
- To arrange an initial discussion or an appointment
- To analyse the client's personal, family, professional, financial or asset situation
- To provide advice on insurance, pension provision, taxation or wealth planning
- To compare insurance or pension solutions
- To prepare, finalise, manage or monitor contracts
- To communicate with insurers, partners or experts required to fulfil the mandate
- To comply with applicable legal, regulatory and contractual obligations
- To carry out the administrative, accounting and commercial management of VYDA SA
- To improve the functioning of the website and measure its audience when the relevant tools are activated
5. Legal basis for processing
Depending on the circumstances, data processing is based on:
- The performance of pre-contractual or contractual measures
- The consent of the customer or user
- Compliance with a legal or regulatory obligation
- VYDA SA's legitimate interest in monitoring its customers, ensuring the security of its systems, managing its activities and improving its services
6. Recipients of the data
Personal data may be disclosed, where necessary, to the following recipients:
- Authorised staff of VYDA SA
- Insurance companies
- Pension schemes
- Professional partners involved in the analysis or monitoring of the case
- External experts, including doctors, engineers, tax specialists, lawyers or other specialists
- Technical and IT service providers, hosting providers, and appointment-booking or management tools
- Administrative, judicial or regulatory authorities where required by law
Data is never sold to third parties.
7. Transfer abroad
Personal data is processed primarily in Switzerland or within the European Economic Area where possible.
However, certain technical service providers or partners may process data from other countries. In such cases, VYDA SA ensures that appropriate safeguards are put in place in accordance with the FADP and, where applicable, the GDPR.
8. Retention period
Personal data is retained only for as long as is necessary for the purposes for which it was collected.
As a guide:
- Prospects (unfulfilled contact request): 24 months after the last communication
- Clients (active contractual relationship): for the duration of the mandate
- Former clients: 10 years after the end of the mandate, in accordance with statutory retention obligations (Swiss Code of Obligations, Insurance Supervision Act and applicable tax legislation)
- Browsing data: up to 13 months
Certain data may be retained for longer in order to comply with legal, regulatory, accounting, tax or evidential obligations.
Once the applicable retention periods have expired, the data is deleted, anonymised or securely archived.
9. Data security
VYDA SA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or misuse.
These measures include, in particular: hosting in Switzerland, encryption of communications (HTTPS), access controls, regular backups and ongoing staff awareness training.
Access to personal data is restricted to authorised persons who are subject to confidentiality obligations.
In the event of a data breach likely to pose a risk to the rights and freedoms of data subjects, VYDA SA shall notify the competent authorities without delay and, where appropriate, the data subjects, in accordance with the FADP and the GDPR.
10. Rights of data subjects
In accordance with applicable legislation, any data subject may request:
- Access to their personal data
- Rectification of inaccurate or incomplete data
- The erasure of their data, where the legal conditions are met
- Restriction of processing
- To object to certain processing activities
- Data portability where the GDPR applies
- Withdrawal of consent where processing is based on consent
Any requests may be sent to: contact@vyda.ch
VYDA SA may request proof of identity before responding to a request relating to personal data. VYDA SA will respond within one month, which may be extended by two months if the request is complex.
11. Cookies and audience measurement tools
The website may use cookies or similar technologies to ensure it functions properly, improve the user experience, measure audience figures or analyse browsing behaviour.
Strictly necessary cookies
Essential for the website to function (session, security, preferences). They do not require consent.
Audience measurement cookies
These enable us to assess website traffic and improve the site. They are only placed with your consent.
Functional cookies
Linked to integrated services (for example, an appointment booking tool). These are only set with your consent.
On your first visit, a banner will allow you to accept, refuse or configure these cookies. You can change your choice at any time via the dedicated link at the bottom of the page.
You can also configure your browser to refuse or delete all or some cookies. This setting may affect the functioning of certain features on the website.
12. Contact form and appointment booking
When a user completes a contact form, requests an appointment or submits information via the website, the data provided is used to respond to their enquiry and, where applicable, to arrange a meeting with VYDA SA.
Users are advised not to submit sensitive data (health information, detailed financial details, confidential documents) via an unsecured form, unless otherwise stated.
13. Complaints to a supervisory authority
Any data subject who believes that the processing of their data does not comply with the applicable regulations may lodge a complaint with the relevant supervisory authority.
In Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch
In France (for French residents, including cross-border workers):
National Commission for Information Technology and Civil Liberties (CNIL)
3 place de Fontenoy — TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
14. Changes to the policy
VYDA SA may amend this privacy policy at any time to reflect legal, regulatory, technical or organisational changes.
The applicable version is the one published on the VYDA SA website at the time of consultation.