Data Protection Notice

1. Preliminary remarks

The Vontobel 3a Pension Foundation (hereinafter “the Foundation”, “we”) very much appreciates your interest in our services. The protection of your data in general and of your personal data in particular, is important to us, and we want you to feel comfortable using our services and visiting our website. It is a major concern for the Foundation that your personal data is treated in a responsible manner and in compliance with legal requirements.

This notice (together with our Terms and Conditions of Use for our website and other documents referred to herein, the “Data Protection Notice”) explains how we process your personal data and does not constitute a document that contractually binds the Foundation or any other party.

Other notices may apply to other types of data processing, such as our presence on social media or our app. The corresponding notices are available on the relevant services.

2. Processing of personal data

2.1 Categories of personal data

The Foundation processes different categories of personal data depending on which services you receive.

These categories may be:

  • Master data (e.g. name, address, email address, telephone number, date of birth, account number, other account information, completed transactions, or third parties, such as family members, authorized representatives, and consultants who may also be affected by the data processing).
  • Risk management, transaction, and/or order data (e.g., data with respect to beneficiaries of a transfer, fraud cases).
  • Technical data (e.g., IP addresses, browser plug-in types and versions, cookies, internal and external identifiers, logging data, record of access and changes, and content accessed by the website user, including time and date of access).
  • Marketing data (e.g., preferences, wishes).
  • Telephone records (e.g., between you and your relationship manager).
  • Especially sensitive personal data (e.g., disability).

2.2 Purpose of the processing

The personal data described in 2.1 may be processed by the Foundation for the following purposes:

  • Auditing, providing, and managing Foundation business relationships and services, as well as products requested by clients (e.g., identity verification, pension planning, and client service).
  • Compliance with legal obligations (e.g., disclosures, notification, and reporting obligations to authorities and courts, and retention obligations).
  • Marketing (e.g., organization of events, raffles, and advertising).
  • Product development and market research (e.g., development of new products, further development of existing services, research of client needs, usage statistics, and transaction analyses).
  • Protection of interests (e.g., receivable claims and processing of legal claims).
  • Risk assessment (e.g., monitoring and managing risks, combating fraud, training, and business audits).
  • Individual services (preparation and provision of customized services).
  • Other purposes about which you will be informed at a later date.


2.3 Origin of the personal data

For the purposes described in section 2.2, the Foundation may process personal data if they:

  • have been communicated directly to the Foundation (e.g. in the context of an inquiry, a visit to our website, or the use of certain products and services).
  • are based on a contractual relationship (e.g., by using a product or service of the Foundation or its partners).
  • originate from third-party sources (e.g., authorities, international companies, rating agencies, credit agencies, or companies in the Vontobel Group).
  • originate from public sources (e.g., entries in public registers).

2.4 Legal basis for the processing

Your personal data may be processed on the following legal bases:

  • Consent (e.g., processing of contact requests)
  • Contract (e.g., provision of the contractually agreed-upon services)
  • Legal obligation (e.g., retention periods)
  • Performance of duties in the public interest
  • Legitimate interests (e.g., processing of legal claims)

2.5 Duration of storage

We store personal data only to the extent and for as long as this is necessary to fulfill the purposes stated in 2.3, there is a legal obligation to store it, or the Foundation has a legitimate interest in storing it.

2.6 Dissemination of personal data

Your personal data may be disclosed for processing in accordance with the purposes set out in 2.3 to the following categories of recipients for the initiation or performance of a contract, on the basis of legal obligations, for the performance of duties in the public interest or for legitimate interests of the Foundation:

  • Companies in the Vontobel Group
  • Parties involved in a transaction (e.g., payees, intermediaries, payment institutions, stock exchanges, clearing houses, credit card providers, and their platforms)
  • Securities issuers
  • Credit agencies
  • Fund managers and asset managers
  • Authorities and supervisory bodies
  • Service providers (e.g., marketing service providers, hosting companies, printers, and anti-fraud agencies)
  • Brokers

The aforementioned recipients may also process your personal data outside of Switzerland. If and to the extent that this is required by the applicable legal provisions, we require the guarantee of appropriate technical and organizational measures for the lawful processing of personal data.

3. Rights of the data subject

You have rights in relation to your personal data that we process, depending on applicable data protection laws. Thus, you might have the right to:

  • access and, if applicable, to a copy
  • rectification of your personal data
  • restriction of processing
  • erasure
  • object to processing.

If we process your personal data based on your consent, you have the right to revoke this consent at any time.

If the Foundation processes your personal data using automated decision-making, including profiling, you will be informed about the logic used and its possible consequences. You may be able to request that you not be subject to automated decision making, including profiling.

4. Secure communication with the Foundation

Please be advised that data can be transferred across national borders over the Internet without being subject to any control while in transit even if the sender and recipient are both located in the same country.

We cannot guarantee the security of data transferred over the Internet and accept no liability in respect thereof. Any notices emailed to us by you may not be secure. If you email any confidential information to us, you do so at your own risk. When contacting us, please send data via a secure mechanism, where appropriate, instead of over the Internet.

Third parties could inadvertently draw the conclusion that there is a commercial relationship between you and the Foundation. Therefore, we recommend avoiding the transmission of any strictly confidential information via open networks.

5. Contact

Please let us know if we do not meet your expectations with respect to the processing of personal data or if you wish to exercise your rights. This will offer us the opportunity to examine your concern and to carry out improvements where necessary. In any of these cases, please send us a clear request in writing to the following office:

Vontobel 3a Vorsorgestiftung
Legal Data Privacy
Gotthardstrasse 43
CH-8022 Zurich
Switzerland

Email: dpo.group@vontobel.com

6. Changes to the Data Protection Notice

We reserve the right to amend this Data Protection Notice without giving prior notification. We, therefore, advise you to check our Data Protection Notice on our website on a regular basis. This Data Protection Notice was last updated on October 1, 2020.