General data protection policy & cookies

1. Preamble

As an insurance broker for businesses and individuals, VESTA is committed to protecting and processing your personal data in accordance with the Swiss Federal Insurance Supervision Act (ISA) and the Swiss Federal Data Protection Act (DPA), both revised and in force from September 1, 2023.

2. Responsibility for Processing

VESTA is responsible for processing your personal data. If you have any questions about your data or wish to exercise your rights, please contact our Data Protection Officer at the following address: dpo@vesta.swiss  

3. Data Collection and Processing

We collect your personal data in order to carry out the insurance consulting and management mandates you entrust to us. This includes data required to assess your insurance needs and may involve sensitive data such as that relating to your health or to legal proceedings.

4. Navigation data

The computer systems and software procedures of the VESTA website collect certain personal data in the normal course of their use. This data includes IP addresses and domain names of user computers, URIs of requested resources, time of requests, and other parameters of the user's operating system. This information, which could identify users, is mainly used to obtain anonymous statistics on the use of the site and to check its correct operation, and is deleted immediately after processing. It may also be used to determine liability in the event of cyber-crimes.

5. Cookies

VESTA uses technical cookies necessary for navigation and analytical cookies to collect information on website use in an anonymous way. The information collected by Google Analytics is used to improve the site. Users can control and manage cookies through their browser settings.

6. Recipients of Data

We share your data with third parties such as insurers and pension funds to manage your insurance contracts. These partners are not our subcontractors and act as independent data processors.

7. Transfer of Data Abroad

If necessary, your personal data may be transferred to entities located outside Switzerland, always in jurisdictions offering an adequate level of protection.

8. Data retention

We retain your personal data for as long as is necessary to fulfill the purposes for which it was collected, or in accordance with legal retention periods. This period is generally ten years after the end of our management mandate, except in the case of legal exceptions extending this period.

9. Data security

Appropriate technical and organizational measures are in place to protect your data against unauthorized access, loss or accidental destruction. Our systems are secured by state-of-the-art technology and are regularly reviewed to ensure their integrity. The www.vesta.swiss website is secured by SSL encryption.

10. Rights of Persons Concerned

You have the right to access your data, to request its correction or deletion, and to object to certain forms of processing. To exercise these rights, please contact our Data Protection Officer at the above address.

11. Changes to the Data Protection Policy

This policy may be updated to reflect changes in our privacy practices. Changes will be effective upon posting on our website.

12. Contact and complaints

If you have any concerns or complaints about the protection of your data, you can contact our delegate or the competent data protection authority in Switzerland, the Swiss Federal Data Protection and Information Commissioner.