We are part of the Helvetia Baloise Group. Find out more.
In accordance with Article 19 FADP and Article 13 and Article 14 GDPR as well as “UK GDPR”, the list of recipients and countries provides information on recipients or categories of recipients to whom personal data is disclosed and on the disclosure of personal data abroad.
The following companies are responsible for data processing as part of their services:
Additional data controllers include the following foundations of Helvetia Swiss Insurance Company Ltd, of which it is the managing director:
Data subjects who are domiciled in the Principality of Liechtenstein can also contact our Data Protection Officer in accordance with Article 27 GDPR if they have any questions:
(collectively referred to as “Helvetia” or “we”)
Specific privacy policies may contain information about third parties with whom Helvetia works and who may themselves be controllers for data processing. Data subjects may contact these third parties directly if they have any questions regarding the exercise of rights. A list of recipients to whom data is transferred for the purposes of order processing, or who may themselves be data controllers responsible for processing personal data, can be found in the section “Special Privacy Policy”.
In connection with the purposes set out in Helvetia’s privacy policy, we may also disclose your personal data to third parties, in particular to the recipients listed below, who are bound by us to treat your data confidentially:
When your personal data is processed by the recipients, it may also be transferred abroad, for example when personal data is passed on to other companies within the group or to service providers. Under certain circumstances, we may also transmit data to third parties abroad who are involved in the processing of the contract (e.g. co-insurers and reinsurers, authorities and courts), as well as to other bodies such as foreign tax authorities.
Your data may therefore be processed worldwide, including outside Switzerland or the European Union or the European Economic Area (i.e. also in so-called third countries such as the US). Many third countries currently do not have laws that ensure a level of data protection equivalent to the applicable FADP.
Therefore, following a risk assessment, we take contractual precautions to contractually compensate for the weaker legal protection, as well as further measures (e.g. pseudonymisation) to reduce the risk of state/government access abroad authorised by foreign legislation.
In doing so, we rely on the legally required guarantees, insofar as the recipient is not already subject to a legally recognised set of rules to ensure data protection and we cannot rely on an exception clause. An exception may apply, in particular, in the case of legal proceedings abroad, but also in cases of overriding public interests, if contract processing requires such disclosure, if you have consented to it or if the data concerned has been made generally accessible by you and you have not objected to its processing.
In connection with Helvetia’s business activities, personal data may be disclosed to the listed recipients in Switzerland, Europe and, under certain conditions, worldwide.
Disclosure in countries without adequate legal protection:
Many third countries do not currently have laws that guarantee a level of data protection equivalent to the applicable data protection law. Therefore, following a risk assessment, we take contractual precautions to contractually compensate for the weaker legal protection, as well as further measures (e.g. pseudonymisation) to reduce the risk of state/government access abroad authorised by foreign legislation.
To this end, Helvetia uses the European Commission’s standard contractual clauses, which are available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj.
Exceptions: A disclosure may be made without these guarantees in the following specific cases:
If you have any questions regarding data protection or the rights of data subjects, please contact us using the keyword “data protection”. This will put you in touch with our relevant Data Protection Unit.
Data subjects who are domiciled in the Principality of Liechtenstein can also contact our Data Protection Officer in accordance with Article 27 GDPR if they have any questions: