1.  What is this declaration on data protection about?

Vonlanthen Consulting SA is a private company offering the following services::

• Management of pension funds,
• Expertise within meaning of LOB and actuarial service,
• Responsible actuary,
• Legal advice and
• Advice on Data Protection.

We attach foremost importance to transparency in the processing of personal data. Among other things, this declaration on data protection indicates what personal data we collect, for which purpose and with whom we may share it. We regularly check and update this declaration to ensure maximum transparency.

The provisions of this data protection declaration are deemed to have been accepted by visitors when they access the website of Vonlanthen Consulting SA.

If you reject them, you must leave the aforementioned website immediately.

2.  Who is responsible for processing the data?

The pension funds for which Vonlanthen Consulting SA oversees management have the status of data controller. Vonlanthen Consulting SA acts as a data processor within the meaning of data protection legislation and is therefore subject to the same legal obligations as these funds.

For all its other activities, Vonlanthen Consulting SA is acting as data controller personal data in accordance with data protection legislation.

If you have any questions related to this declaration on data protection or the processing of your personal data, you can contact us by:

3.  What data do we process?

Personal data is data that can be associated with a specific person. In order to conduct our activities, data may concern insured persons, pension beneficiaries, third parties (family members, for example) or visitors to our website.

The personal data that we may be required to process are, for example:

• Identification data: last name, first name, date of birth, date of death, marital status, common law status, family, language, nationality, place of origin, profession, gender, OASI number, employer;
• financial data: assets, capital, salary, employer’s identity, land registry entry, welfare measures, debt collection, income, financial situation, maintenance obligation, recourse against liable third parties, insurance benefits;
• contact details: postal address, e-mail address, IP address, phone number, bank details, place of work.

When necessary for the implementation of your occupational benefits, we process personal data relating to health, privacy, possible legal proceedings and social welfare measures, which constitute sensitive data within the meaning of the data protection law.

Personal data is primarily provided by the concerned person. However, personal data may also be provided by third parties, such as our external service providers, employer, occupational benefit schemes, authorities or courts. When we receive personal data about third parties, we assume that the person who provides it is authorized to do so and that this data is correct.

4.  For what purposes do we process the data?

Only the personal data of data subjects that is necessary for operational activities and commercial exchanges in connection with the services provided to pension funds is processed.

Personal data is collected and processed to the extent strictly necessary for the operational activities of Vonlanthen Consulting SA and the services it provides to its clients.

5.  How are applications processed?

Vonlanthen Consulting SA collects and processes personal data from applicants for the purposes of the job application process.

If you apply for a job vacancy published by us, this data protection declaration applies.

If you apply for a vacancy via an external service provider, the latter processes your personal data in accordance with its own data protection policy.

In principle, the documents in the application file are deleted twelve months after notification of the decision to reject, without notification to the applicant.

6.  With whom do we share the data?

Personal data will not be transferred to third parties, unless this is necessary for the fulfilment of our legal or contractual obligations, or unless you have expressly consented to this.

In particular, personal data may be transferred to the following categories of recipients: professional associations and trade unions, insurance companies, authorities, lawyers, banks, beneficiaries, compensation funds, brokers, employers, pension fund experts, LOB Substitute Occupational Benefit Institution, LOB Guarantee Fund, occupational benefit schemes, doctors, family members, DI offices, auditors, reinsurers, real estate agencies, legal representatives, courts, notaries, heirs, real estate advisors.

By concluding specific contracts, we may also transfer personal data to external service providers. These subcontractors are obliged to process the personal data exclusively in accordance with our instructions and to take appropriate measures to ensure data security. By entering into such agreements, we ensure that the protection of personal data is guaranteed for the entire duration of the processing.

7.  Will the personal data be disclosed abroad?

Personal data will not be disclosed abroad.

8.  How long do we process the data?

We process the data for as long as required by the purposes of processing, legal retention periods and our legitimate interests in documenting and preserving evidence, or if retention is a technical requirement.

9.  Cookies and other tracking and analysis technologies

Cookies are text files that are sent to your computer or mobile device when you visit our web/intranet site or access the web portal.

We may use such cookies to recognize the user and to guarantee and optimize site functionality. In this context, we may use web analysis services, which count the number of visitors and provide us with information on their overall behavior

To do this, we ask for your express permission when you first visit the site.

If you do not wish to receive cookies, you can change your browser settings so that it informs you of the use of cookies, or you can refuse them altogether.

10.  How do we protect the data?

We take appropriate technical and organizational measures to effectively protect data against unauthorized or unlawful access, and to minimize the risk of loss, destruction or accidental damage. In particular, access to personal data is restricted to those persons who need the information for their professional activity for Vonlanthen Consulting SA.

11.  What are the rights of the concerned persons?

The concerned persons have the following rights in relation to their personal data:

• access their personal data processed by us;
• request the deletion of personal data that is no longer required for the purpose of processing;
• request the prohibition of specific processing or the disclosure of personal data to third parties;
• have inaccurate or incomplete personal data rectified;
• receive personal data in a commonly used electronic format;
• withdraw the consent, as far as the processing is based on consent.

Please note that the exercise of these rights is not unlimited and may be subject to conditions, exceptions and restrictions in certain circumstances in accordance with applicable data protection legislation (e.g. to safeguard interests worthy of protection or to comply with legal obligations).

If case of any doubts about the lawfulness of processing, it is possible to contact the Swiss Federal Data Protection and Information Commissioner.

12.  Entry into force and final provisions

This declaration on data protection enters into force on 01.09.2023.

Vonlanthen Consulting SA may amend its provisions at any time.

Any dispute relating to the processing of personal data by Vonlanthen Consulting SA shall be governed exclusively by Swiss law.

The exclusive place of jurisdiction is Carrouge VD.