Privacy Policy

1
What is this privacy policy about?
2
Who is responsible for processing your data?
3
For which purposes do we collect and process which of your data?
4
What applies to profiling and automated decisions?
5
Where does the data come from?
6
To whom do we disclose your data?
7
Is your personal data also transferred abroad?
8
What rights do you have?
9
How are cookies, similar technologies and social media plug-ins used?
10
How do we process personal data on our pages in social networks?
11
What else should you note?
12
Can this privacy policy be amended?

1. What is this privacy policy about?

The protection of your personal data is important to us. We process personal data carefully, responsibly and in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the General Data Protection Regulation of the European Union (GDPR).

This privacy policy applies to the website compando.ch and the services offered through it. It explains which personal data we process, for which purposes and what rights you have. Linked third-party offers are subject to their own privacy terms.

If you provide us with personal data about other persons (e.g. family members), we assume that you are authorised to do so and that you have informed those persons about the processing, where a duty to inform applies.

This privacy policy is also available in German and French. In case of discrepancies, the German version prevails.

2. Who is responsible for processing your data?

The party responsible for the data processing on this website is:

Compando.ch GmbH
Lorrainestrasse 12, 3013 Bern, Switzerland
Email: [email protected]
Website: www.compando.ch

3. For which purposes do we collect and process which of your data?

We process various categories of personal data. Which data we collect and how much weight a purpose carries depends on your specific relationship with us.

Master and contact data

First name, last name, address, date of birth, language, nationality (where required), telephone number, email address and correspondence address.

Enquiry and advisory data

Details of insurance, retirement provision or financial needs, existing solutions or contracts, household or family situation, professional details, wishes, goals, preferences and consultation notes. In the context of insurance and retirement provision advice, data may be collected that is considered particularly sensitive (e.g. health-related details for health or disability insurance). Such data is processed exclusively on the basis of your explicit consent or a legal basis.

Communication and recording data

Content and metadata of your communication with us via email, telephone or forms. Video or telephone consultations may be recorded for quality and documentation purposes. In such cases we inform you in advance. You are free to object to a recording or to end the conversation.

Brokerage and contract data

Offers, policy information, contract status and correspondence with product providers.

Technical data

IP address, browser type, device data, operating system, date and time of access, as well as usage data of the website, cookies and similar technologies.

Purposes of the processing

We process this data in particular for the following purposes:

Operation, security and optimisation of our website
Provision of comparison and information services
Contact and handling of enquiries
Advice to customers and analysis of needs
Obtaining and preparing offers as well as brokering insurance and financial solutions
Forwarding enquiries to suitable partner companies or registered intermediaries
Quality control, marketing and communication, where permitted
Compliance with legal or regulatory obligations
Assertion, enforcement or defence of legal claims

Contact forms and enquiries

When you send an enquiry via our website, we process the data you enter to review your request and for contact, advice, preparing offers, brokering suitable solutions and general customer service. By submitting an enquiry and agreeing to the privacy policy, you consent to the Compando.ch GmbH processing your enquiry, contacting you and, where required for the requested service, forwarding data to suitable insurance companies, cooperation partners or intermediaries registered with FINMA.

4. What applies to profiling and automated decisions?

Where algorithms are used on our platform for needs analysis, product recommendation or comparison display, we inform you about this in accordance with applicable law. No fully automated decisions with legal effect are made without a human being involved.

5. Where does the data come from?

From you

We receive most of the data directly from you, for example when you use our website, submit an enquiry or communicate with us.

From third parties

In addition, we may receive personal data from third parties or obtain it from publicly accessible sources, insofar as this is necessary for the purposes mentioned. This includes, for example, details from product providers and cooperation partners in the context of a brokerage or an offer.

6. To whom do we disclose your data?

Personal data may, where necessary and permitted, be disclosed to the following recipients: insurance companies, health insurers, pension institutions, banks or financial service providers, qualified intermediaries, brokers or cooperation partners registered with FINMA, IT, hosting and cloud service providers, CRM, communication and marketing service providers, fiduciaries, legal advisors or auditors, as well as authorities or courts where legally required.

Disclosure takes place exclusively in connection with your enquiry, requested advice, preparation of an offer, brokerage, contract support or legally required processes. Recipients process data either in their own responsibility or as processors following our instructions. Newsletters and promotional communication only take place upon corresponding voluntary registration or where legally permitted. We do not sell your personal data.

7. Is your personal data also transferred abroad?

Recipients of personal data may also be located outside Switzerland. In the event of a transfer to countries without an adequate level of data protection, we ensure appropriate protection through suitable safeguards (e.g. EU Standard Contractual Clauses) in accordance with the revFADP.

8. What rights do you have?

Within the scope of applicable law you have the following rights: information about processed personal data, correction of inaccurate data, deletion of data where permitted, restriction of processing, objection to certain processing, disclosure or portability of your data where provided for, as well as withdrawal of consent given, with effect for the future.

To exercise your rights, contact us by email at [email protected]. We will process your request as quickly as possible, at the latest within 30 days.

You may object at any time to the processing of your data for the purpose of direct marketing.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

FDPIC
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch

We operate our own presences on social networks, for example on Facebook, Instagram and LinkedIn. When you interact with these pages, for example through comments or messages, we process the resulting data for communication and public presentation.

The respective platform operators also process your usage data in their own responsibility and for their own purposes, for example for statistics and advertising. Details can be found in the privacy policies of the respective platform.

11. What else should you note?

Legal bases

Where necessary, we base the processing on the following grounds: consent (obtained separately and voluntarily, revocable at any time), initiation or performance of a contract, legal obligations and legitimate interests (efficient management, security, customer service, permitted direct marketing). You can withdraw consent given at any time with effect for the future at [email protected].

Mandatory information

If you do not provide certain personal data that we have marked as required, this may mean that the corresponding service or a conclusion of contract is not possible.

Retention period

We store personal data only for as long as is necessary for the purposes mentioned. We keep contact and enquiry data for up to 2 years after the last contact. Contract and policy data are stored for up to 10 years after the end of the contract. Technical log data is deleted after 90 days at the latest. After the respective period expires, personal data is deleted or anonymised, unless there is a legal obligation to retain it for longer.

Data security

We take appropriate technical and organisational security measures to protect personal data against loss, misuse, manipulation and unauthorised access. These include, among others, TLS encryption for data transmission, access controls and authorisation management, and regular security updates and system checks.

We do not assume that the General Data Protection Regulation of the European Union (GDPR) applies to our processing. Should it exceptionally apply, we base the processing of your personal data in particular on the performance of a contract (Art. 6(1)(b) GDPR), on legitimate interests (Art. 6(1)(f) GDPR), on a legal obligation or on your consent (Art. 6(1)(a) GDPR). Persons resident in the European Economic Area additionally have the right in this case to lodge a complaint with the competent data protection supervisory authority.

12. Can this privacy policy be amended?

We may amend this privacy policy at any time. The version published on our website at the relevant time applies.

As of July 2026