Privacy policy

1. Controller

Protecting your privacy is an important concern of the Swiss Pension Fund Association ASIP. This privacy policy informs you about which data is processed when you use the information and service portal www.renteundkapital.ch and for what purposes.

The party responsible for the processing of personal data is:

For questions about data protection, you can contact ASIP at any time.

2. In brief

The calculation and simulation services on www.renteundkapital.ch can generally be used without registration.

The data you enter or transmit is used exclusively to carry out the calculation or simulation you request. The data provided for the calculation is deleted at the end of the usage session.

ASIP does not create personal user profiles and does not sell user data to third parties.

3. Which data is processed?

Depending on the information, calculation or simulation service used, the following details in particular may be processed:

• Marital status
• Income
• Expenses
• Assets
• Pension assets and pension benefits
• Details on AHV and occupational pension provision
• Tax domicile
• Other information voluntarily entered by the user, insofar as it is required for the requested calculation

Users enter this data voluntarily.

4. Origin of the data

The data required for the calculation can be provided in different ways:

Direct entry

Users enter the required details themselves in the respective service.

Import via QR code

Where offered, data from an insurance certificate can be imported automatically via QR code.

Transmission by pension funds

Individual pension funds may enable their insured members to transmit data directly from their administration systems to the services provided on www.renteundkapital.ch.

Information about such data transmission is provided by the respective pension fund. The transmission only takes place at the instigation or with the consent of the person concerned.

5. Purpose of data processing

The processed data is used exclusively for the following purposes:

• Performing calculations and simulations
• Presenting results and possible courses of action
• Providing the information requested by the user
• Ensuring technical operation and system security
• Quality assurance and further development of the services offered

The data is not used for advertising purposes.

6. Storage and deletion

The data provided for calculations and simulations is processed exclusively for the duration of the respective usage session.

After the usage session ends, this data is deleted. The entered pension, asset and income data is not stored permanently on ASIP’s systems.

To improve usability, your entries may remain stored locally in your browser. This data stays exclusively on your device, is not transmitted to ASIP and can be deleted by you at any time.

ASIP does not maintain personal user accounts and does not create personal user profiles.

This is subject to technically necessary log data, which may be stored temporarily to ensure system security, for error analysis or to fulfil legal obligations.

7. Statistical analyses

Statistical analyses may be produced to measure the use of the portal and for quality assurance and further development of the services offered.

Such analyses are carried out exclusively in anonymised form that does not allow any conclusions to be drawn about individual persons.

8. Operation and commissioned processing

The technical operation of the portal, the development of the applications, hosting as well as support and maintenance services are provided on behalf of ASIP by p-alm Software AG.

p-alm Software AG processes data exclusively within the scope of its activity as a technical service provider and in accordance with the instructions of ASIP.

9. Data security

ASIP and its service providers take appropriate technical and organisational measures to protect the processed data against loss, misuse, unauthorised access or impermissible disclosure.

Data is transmitted between your device and the portal in encrypted form.

10. Hosting and technical infrastructure

The platform is hosted on servers located exclusively in Switzerland. DNS resolution and CDN services are handled through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare acts as a reverse proxy that secures and accelerates the website.

Data is transmitted to Cloudflare on the basis of a Data Processing Agreement (DPA) and the EU standard contractual clauses. As a rule, Cloudflare processes only metadata (IP address, requested domain) without access to user content.

11. Web analytics and cookies

The portal may use cookies or comparable technologies to ensure the usability, security and stability of the website.

Where web analytics tools are used, this is done exclusively to improve the offering and to produce aggregated usage statistics.

Web analytics is carried out on systems operated by ASIP or its commissioned service providers. The collected data is not passed on to advertising networks or marketing platforms.

For the analysis and ongoing improvement of our offering, we use Matomo, a web analytics software.

12. Links to third-party offerings

The portal may contain references to websites or offerings of third parties. ASIP assumes no responsibility for their content and data protection practices.

The privacy policies of the respective providers apply.

13. Embedded videos

Videos from the Vimeo or YouTube platforms may be embedded on individual pages.

The providers are:

and

When a page with an embedded video is opened, a connection to the respective provider’s servers may be established. Technical information such as your IP address, device information and information about the visit to the page concerned may be transmitted to the respective provider.

If you are logged in to the respective provider, it may associate the visit to our website with your user account.

The processing of personal data takes place under the respective provider’s own responsibility. Further information can be found in the privacy policies of Vimeo and Google (YouTube) respectively.

Where technically available, we strive for privacy-friendly forms of video embedding. The connection to the respective provider is generally only established when a user actively starts a video.

14. Rights of data subjects

Under applicable data protection law, data subjects have in particular the right to:

• Information about processed personal data
• Correction of inaccurate data
• Deletion of personal data, where provided for by law
• Restriction of or objection to data processing, where provided for by law
• Assertion of further rights under applicable data protection law

Requests can be addressed to ASIP.

15. Terms of use and privacy policy for the chatbot

The chatbot «Vera» is based on OpenAI technology (ChatGPT) and serves exclusively to answer questions related to pension and lump-sum withdrawal. It is important not to disclose any personal data such as home address, names, telephone numbers or AHV numbers, as Vera neither requests nor stores them.

The chatbot is embedded in the website as an external widget and has no access to the data submitted in the Calculators and Guide sections.

15.1 Processing of the data

When the chatbot is used, server log data (usually in anonymised or shortened form) is recorded automatically. This data is collected automatically on access for technical reasons (provision, security, protection against misuse). It is deleted automatically after a short time and is not used for analysis or marketing purposes.

We store:

• the questions you ask (inputs)
• the answers generated by the chatbot
• feedback submitted voluntarily

No personal data is therefore processed.

This data serves:

• technical provision
• safeguarding operation and IT security
• quality control and further development of the chatbot

No profiling measures or automated decisions in the legal sense are carried out.

15.2 Disclosure and transfer abroad

We use the following processors to operate Vera:

• Vercel (provision/hosting of the frontend)
• Pinecone (vector database for the knowledge base)
• OpenAI (language model processing)

These service providers may transfer data to the following countries:

• Canada: a country recognised by Switzerland as providing an adequate level of data protection
• USA: the standard contractual clauses (SCC) recognised by Switzerland are applied at the providers in order to ensure an adequate level of protection.

No data whatsoever is passed on to third parties without a legal basis.

15.3 Retention period

Technical log data and chat logs are kept only for as long as is necessary for the purposes stated and are deleted afterwards. By default the retention period is:

• chat and feedback data: max. 90 days
• technical server logs: in line with usual technical requirements (typically 7 to 30 days)

15.4 Disclaimer

ASIP accepts no liability for the accuracy of the information provided by the chatbot or for the data protection practices of users. We continuously strive to optimise Vera’s performance. To that end, chat logs may be analysed in anonymised form in order to improve the chatbot’s answers. Any manipulation of the chatbot, as well as deliberately provoking and publishing misbehaviour, is prohibited.

15.5 Consent

These provisions are intended to promote the safe and responsible use of Vera while ensuring data protection and the user experience. By using Vera you accept the terms of use and the privacy policy.

16. Changes to this privacy policy

ASIP may amend this privacy policy at any time. The version published on www.renteundkapital.ch applies.