We process different data from different sources. Information regarding this data can be found here in sub-paragraph 3, and information regarding the purpose of the processing in sub-paragraph 4. We collect this data primarily directly from the pension account holder or customer, such as when submitting an application, during communication and when processing the retirement provision or other contractual relationship, as well as from other sources such as sales partners or advisers. You will find further details in this sub-paragraph 3.
We primarily process the categories of data described below, although this list is not exhaustive. If data changes over time, we may retain earlier versions of information in addition to the current one.
Master data: We use the term "master data" to refer to the basic data that we require, in addition to the contractual data (see below), to process our contractual and other business relationships or for marketing and advertising purposes. We process master data, for example from pension account holders, relatives or beneficiaries of a pension account holder, from our customers, from contact persons (e.g. of banks, retirement provision or vested benefits institutions, suppliers and authorities) and from addressees of messages (e.g. messages sent in the context of marketing and advertising, invitations to events, vouchers, newsletters, etc.).
Master data primarily includes name, address and contact details, date and place of birth, age, gender, nationality and home town, marital status, details from identification data (e.g. from your passport, ID or other identification documents), with the scope of the statutory provisions the AHV number, your contract and insured number, language details, further details from application documents etc. and, where applicable, data in connection with risk assessments.
Details regarding relationships to third persons who are also affected by the data processing also fall under this data, e.g. authorized representatives or, in the case of a retirement provision or vested benefits account, e.g. about dependents and beneficiaries.
We generally receive master data from the pension account holder or customer (directly or via sales partners), but may also consult third-party data. These may include other Zurich Group companies and credit reporting agencies, media monitoring companies, participating financial service suppliers and banks, address dealers, internet analysis services, private insurers, social insurers, public authorities, parties to proceedings and publicly available sources such as the commercial register, media and sources on the Internet, public registers, media, etc.
Contract and benefits data: This is information that accrues in connection with the preparation, conclusion, processing and dissolution of a contractual relationship, e.g. details in connection with a payment of retirement provision or vested benefit assets, other payments and court orders. This may include health information and information about third parties. We may also collect data from other bodies in this relation. When you send us an application for a retirement provision or investment product, you release these bodies from any professional secrecy obligations.
This data includes information related to the initiation and conclusion of the contractual relationship and to its processing and administration (e.g. information in connection with advice and customer service). Contract data also includes information relating to complaints about and adjustments to a contract, as well as information about customer satisfaction which we may collect, for example, by means of surveys.
In connection with the retirement provision relationship we may also process data on claim entitlement, e.g. its amount, on payments into the retirement provision or vested benefits account and on our investment activities). We receive this information primarily from the pension account holder. When processing a retirement provision or vested benefits statement or corresponding applications, we also process data in connection with the regulatory grounds for an ordinary or early payment, including information about retirement provision and vested benefits institutions, other insurance companies and insurers, information about third parties such as involved individuals and beneficiaries, and particularly sensitive personal data such as health data. We receive this information primarily from the pension account holder, but may also receive it from third parties, e.g. other insurers, such as disability insurers, from whom we may also receive data – including health data, for example an annuity decision – possibly with a separate release declaration, or from spouses and registered partners. In other benefit cases, such as in the event of a divorce or the dissolution of a registered partnership, we process the associated data (information relating to the matrimonial property dispute, such as the date of divorce or dissolution of registered partnership and judicial order in this context). We obtain this information from pension account holders, asset management customers, their spouses or registered partners and from public authorities and courts.
In connection with asset management, custody accounts and investments we may, in particular, process information relating to the acquisition and management of assets.
In addition to the sources mentioned above and in addition to the pension account holder, asset management customer or investor, we also receive data from other third parties, such as sales partners, public authorities and offices, courts and lawyers, employers, other insurers, the settlement bank or custodian bank and from external bodies from which we obtain financial information.
Financial data: This is data relating to financial circumstances, payments and the securing of claims.
Financial data is information relating to the financial circumstances of the customer and, where applicable, third parties. We receive this data from the policy account holder or customer, such as in the course of processing the application, but also from government offices (such as tax offices), banks and credit agencies, and from publicly accessible sources.
Behavioral and preference data: Despite our large number of customers, we strive to get to know you better and to tailor our advice and offers to you in the best possible way. We therefore process certain data about you and your behavior. By ‘behavioral data’, we mean data about your behavior in the context of your interactions with us. We may combine this information with other information – also from third parties – and derive from it, for example, the statistical probability that you have an affinity for certain products and services or will behave in a certain way (preference data).
Behavioral data is information about certain actions, for example, payments, your use of electronic communications (such as whether and when you opened an email), your location (such as when you use a website of ours; please see the relevant separate privacy policies for our processing of data in connection with our website), your purchases of products and services from us, your interaction with our social media profiles, contacts with contractual partners and your participation in events, competitions contests and similar events.
Preference data tells us, for example, what your needs are, what products or services might be of interest to you, or when and how you respond to messages from us. We obtain this information from analyzing existing data, such as behavioral data, so that we can get to know you better, tailor our advice and offers more precisely to you and generally improve our offers. In order to improve the quality of our analyses, we may combine this data with other data that we also obtain from third parties such as address dealers, websites and government offices; this may include information on your household size, income class and purchasing power, shopping behavior, contact details of relatives and anonymous information from statistical offices.
Communication Data: This is data relating to our communication with you and information regarding your use of our website. If you contact us via the contact form, email, telephone, by letter or by any other means of communication, we record the data that is exchanged between you and us, including your contact details and other marginal data. We may also record phone conversations. If we want or need to establish your identity, for example, in the context of a request for information, application for media access, etc., we collect data to identify you (such as a copy of an identity document).
Communication data includes your name and contact details, the manner, place and time of the communication and normally its content, such as details in emails or letters from you or to you or from third parties or to third parties, if the latter also relate to you. This also includes direct and indirect contacts with us, e.g. customer service and your customer consultant (e.g. via a website or an app, in a chatbot on the internet or an app).
Other data: We also collect data from you in other situations, which we cannot exhaustively list in this Privacy Policy. For example, data (such as files or evidence) accrues in connection with official or judicial proceedings, and some of this may also relate to you. We may also collect data for health protection reasons (for example, in the context of protection concepts). We may obtain or produce photographs, videos and audio recordings in which you may be identifiable (for example, at events, via security cameras etc.). We may also collect data about who enters certain buildings and when (including in the case of access controls, on the basis of registration data or visitor lists, etc.), who participates in events or campaigns (such as competitions) and when or who uses our infrastructure and systems.
The data we process in accordance with this Privacy Policy relates not only to our pension account holders and customers, but often also to third parties (you will find information on this in sub-paragraph 1 and in this sub-paragraph 3). We receive information about third parties primarily from the pension account holder. If you provide us with information about third parties, we shall assume that you are authorized to do so and that the information is accurate. By transmitting data about third parties, you confirm this fact. Therefore, please inform these third parties about our processing of their data and provide them with a copy of this Privacy Policy. If we refer you to a new version of these documents, please also hand over these new versions in each case.
With the exception of certain individual cases, such as in the context of binding protection concepts (legal obligations), you are not obliged to disclose data to us. However, in the case of voluntary processes, such as contributions or early drawing of retirement provision or vested benefits, we must process data for legal and operational reasons. If you do not wish to made this data available to us, we would therefore be unable to complete the applicable processes. When using our website, it is not possible to avoid technical data processing. If you wish to gain access to certain systems or buildings, you will need to provide us with registration details.
There are certain services which we can only make available to you if you provide us with certain registration data because we or our contractual partners wish to know who, for example, has responded to an invitation to an event, because it is either technically necessary or because we wish to communicate with you. If you or someone you represent (such as your employer) wish to enter into or perform a contract with us, we need to collect relevant master, contract and communication data from you, and we process technical data when you wish to use our website or other electronic offers. Likewise, we can only send you a response to a request you have made if we process the relevant communication data and – if you communicate with us online – any applicable technical data. It is not possible to use our website without us receiving technical data.