Depending on which V⁠i⁠s⁠a⁠n⁠a firm (hereinafter referred to as ‘V⁠i⁠s⁠a⁠n⁠a’) you take out or hold insurance with, maintain or enter into a business relationship with, or otherwise come into contact with, any of the following may be considered data controllers (usually indicated in separate documents):

V⁠i⁠s⁠a⁠n⁠a Services AG, Weltpoststrasse 19, 3000 Bern 16
V⁠i⁠s⁠a⁠n⁠a Versicherungen AG, Weltpoststrasse 19, 3000 Bern 16
V⁠i⁠s⁠a⁠n⁠a Allgemeine Versicherungen AG, Weltpoststrasse 19, 3000 Bern 16
V⁠i⁠s⁠a⁠n⁠a AG, Weltpoststrasse 19, 3000 Bern 16
sana24 AG, Weltpoststrasse 19, 3000 Bern 16
Galenos AG, Weltpoststrasse 19, 3000 Bern 16
Personalvorsorgestiftung V⁠i⁠s⁠a⁠n⁠a, Weltpoststrasse 19, 3000 Bern 16

V⁠i⁠s⁠a⁠n⁠a Services AG is responsible for our websites.

If you have any questions about how your personal data is handled, you are welcome to contact our joint data protection officer:

V⁠i⁠s⁠a⁠n⁠a Services AG
Data protection officer
Weltpoststrasse 19
3000 Bern 16
datenschutz@visana.ch

V⁠i⁠s⁠a⁠n⁠a mainly processes the personal data of individuals in the following categories:

• Persons insured with a V⁠i⁠s⁠a⁠n⁠a firm
• Authorised persons or legal representatives of insured persons
• Tenants of our properties and premises
• Service providers and/or their respective contact persons
• Service providers, suppliers, other business partners and/or their respective contact persons
• V⁠i⁠s⁠a⁠n⁠a staff and retired V⁠i⁠s⁠a⁠n⁠a staff
• Job applicants
• Persons interested in our products and services
• Visitors to our websites
• Visitors to our premises
• Contact persons from co-insurers, pre-insurers, post-insurers and reinsurers
• Contact persons from media companies
• Contact persons from authorities and courts

We process personal data that you provide us with, that we collect through you, or that we receive from third parties. Alongside the personal data specified in the privacy notice regarding websites, insurance contracts, rental agreements, our employee benefits foundation and the job application process, the most important personal data is as follows:

• Contact information and identification-related data (including, for example, first name, surname, postal address, phone numbers, email address or user account information)
• Financial data (including, for example, information on the posting of remuneration for purchased/provided services, or on bank or postal accounts)
• Contract data (including, for example, information on a purchased/provided service, information on remuneration, or health data)
• Communication data (including, for example, physical or electronic correspondence with V⁠i⁠s⁠a⁠n⁠a, any recorded phone or video calls, information on the preferred communication channel, and records on customer satisfaction)
• Marketing data (including, for example, information on subscription to our newsletter or participation in a competition, and personal preferences)
• Data relating to applications for job vacancies or rental properties (including, for example, letters of recommendation, letters of application, letters of motivation, employment reference letters, other references or extracts from the debt enforcement register)
• Data relating to legal disputes

From many of the aforementioned persons, we also collect contact details and the data generated in the course of the respective communications. In particular, from interested parties, service providers, suppliers, other business partners and/or their respective contact persons, we also collect information on their roles, our history with these persons, creditworthiness, marketing activities (e.g. receipt of newsletters), communications, business transactions, queries, quotes, offers, terms and conditions, contracts etc.

V⁠i⁠s⁠a⁠n⁠a processes personal data for various purposes. The most important are:

• Insurance business:
  You will find information on the purposes of processing in connection with our insurance business here.
   
• Renting out premises (including co-working spaces) and properties:
  You will find information on the purposes of processing in connection with renting out premises and properties here.
   
• Websites and the myVisana app:
  You will find information on the purposes of processing in connection with our websites and the myVisana app here.
   
• The employee benefits scheme PVS V⁠i⁠s⁠a⁠n⁠a:
  You will find information on the purposes of processing in connection with our employee benefits scheme here.
   
• Marketing and advertising:
  V⁠i⁠s⁠a⁠n⁠a conducts advertising and marketing, geared towards customers and interested parties, to the extent permissible and insofar as you have consented to the use of your data or have not objected to it. If you receive unwanted advertising, you can object to this at any time. We will then place you on a corresponding list, so that you will no longer receive any further advertising dispatches. Personal data is used for the provision of general advice, or of information about our range of services, and for market research. This includes, for example, electronic or postal marketing information on individual insurance offers, information on events for customers or interested parties, sponsorship information, and surveys for determining customer satisfaction or customer needs, or for assessing customer, market or product potential.
   
• Acquisition of products and services:
  We also need to process personal data when purchasing products and services from our suppliers or subcontractors.
   
• Jobs at V⁠i⁠s⁠a⁠n⁠a:
  If you apply for a job with us, we need your details, so as to process your application. You will find details on data processing relating to job applications in our staff recruitment privacy notice. In particular, via employment-oriented social networks such as LinkedIn, we actively contact individuals who, based on their professional background and qualifications, could be potential applicants or employees (so-called ‘active sourcing’). The purpose of this measure is the targeted recruitment of qualified personnel.
  
  Your application data will only be stored, evaluated, processed or internally forwarded exclusively in the context of your job application. Processing is mainly carried out by electronic means.
   
• Video surveillance:
  In order to uphold our domiciliary rights, and to ensure protection of our staff and other persons, as well as valuables, data and secrets belonging to us or entrusted to us, we use video surveillance systems and other measures for the security of IT, buildings and facilities (e.g. access control, visitor lists, network scanners, email scanners and phone recordings).

The following constitute the legal basis for our processing of your personal data:

• Your consent, or that of an authorised person, which you can revoke at any time (e.g. for subscribing to our blog and customer newsletter, using the myVisana customer portal or arranging a consultation appointment)
• Entry into, or fulfilment of, a contract with you, or a prior query from you in this regard (for example, if you submit an application for one of our top-up insurance products or if you have questions about your invoice)
• Any weighing of interests (for example, to ensure information security or to perform tasks in the public interest), which you can object to under certain circumstances
• Any legal obligation (e.g. from social insurance legislation or regarding retention of accounting-related documents on our part), which can also arise during any weighing of interests

Within the scope of our business activities, and for all purposes specified in the privacy notice regarding insurance contracts, rental agreements and our employee benefits foundation, we also disclose personal data to third parties, insofar as it is permitted and appropriate. This is either because these parties process the data for us (outsourced data processing), because they use the data for legitimate purposes, or because it is required by law (data disclosure). Such third parties comprise the following in particular:

• Service providers, including processors, IT providers, suppliers, brokers and other business partners
• Authorities
• Insurers within V⁠i⁠s⁠a⁠n⁠a
• Banking institutions, payment service providers and collection agencies
• Officials and courts

V⁠i⁠s⁠a⁠n⁠a ensures that the disclosed personal data is up to date, reliable and complete.

Some of the recipients are located in Switzerland and others are abroad. We store our tenants’ and insured persons’ data mainly in Switzerland or in an EU/EEA country that has adequate data protection. However, with regard to certain types of processing of personal data, it is particularly likely that your data will be transferred to other countries, both within and outside Europe, where some of the IT service providers we use are located. If we transfer data to a country where the law does not provide for an adequate level of data protection, we oblige the recipient to take appropriate measures for the protection of personal data – e.g. via agreement to the EU’s so-called ‘standard contractual clauses’ (the current version of which can be found here), via other arrangements or based on justifications.

In general, we process your personal data for as long as it is needed for the respective purpose.

Where statutory retention obligations apply, the personal data in question is stored for the prescribed period. Once the retention obligation has expired, we check whether the data is still required for processing. If no longer needed, your data is either deleted or anonymised.

If we store data on the basis of a contractual relationship with you, this data will remain stored for at least the duration of the contractual relationship, and for no longer than the limitation periods for possible claims on our part, or the duration of statutory or contractual retention obligations.

In order to ensure the efficiency and consistency of our decision-making processes, we may automate certain decisions, i.e. make decisions in a computer-assisted manner, according to specific rules and without review by an employee. This can include, for example, risk-assessment decisions regarding top-up insurance. In such cases, you have the right to state your position and to request that we get somebody to review a decision, insofar as this is provided for by applicable law.

We take appropriate technical and organisational security measures to protect your personal data from unauthorised access and misuse. In particular, this includes issuing instructions and providing training, as well as IT and network security solutions, access controls, access restrictions and data encryption.

In order to ensure the best possible protection for your data when it is transmitted online, we use SSL encryption. You can recognise such encrypted connections via the prefix ‘https://’ in the page address in your browser’s address bar. Thanks to SSL encryption, the data you transmit via online forms cannot be read by unauthorised third parties. However, please note that data transfer over the Internet can never be completely protected against access by third parties. In particular, data transmission via email is not encrypted and is therefore unsuitable for sending confidential information.

Within the scope of the data protection law applicable to you, and insofar as provided for therein, you have the right of access to information, the right of rectification and erasure of personal data, the right of restriction of data processing, and the right to otherwise object to our data processing, as well as the right to the disclosure of certain personal data for the purpose of transfer to another organisation (so-called ‘data portability’).

However, please note that we, in turn, reserve the right to apply the restrictions provided for by law, e.g. if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or require it for the assertion of claims. We have already informed you, in section 4, about the possibility of revoking your consent. Please note that exercising these rights may conflict with contractual agreements and have consequences such as premature contract cancellation or resulting costs. We will inform you in advance if such cases arise, unless this is already stipulated in the contract.

Exercising such rights generally requires that you provide clear proof of your identity (e.g. via a copy of an identity document, if your identity is otherwise unclear or unverifiable). To assert your rights, you can contact us at the address given in section 1.

Furthermore, every data subject has the right to enforce their claims in court or to lodge a complaint with the relevant data protection authority. In Switzerland, the relevant data protection authority is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).
V⁠i⁠s⁠a⁠n⁠a can amend this privacy notice at any time without prior notification or formal notice. The latest version published on the website shall apply in each case.

V⁠i⁠s⁠a⁠n⁠a offers insurance solutions for private and business customers, in the contexts of compulsory health insurance as per the Health Insurance Act (HIA/KVG), compulsory accident insurance as per the Accident Insurance Act (AIA/UVG) and insurance as per the Insurance Policies Act (IPA/VVG).

If you are insured with us or wish to take out insurance with us, we process personal data that you provide us with, that we collect through you, or that we receive from third parties. Alongside the personal data mentioned in section 2, this mainly comprises:

• Contact information and identification-related data (including, for example, date of birth, gender, marital status, OASI/AHV number, insurance number and nationality)
• Financial data (including, for example, information on debt enforcement and collection proceedings)
• Medical evaluations as a basis for risk-assessment decisions
• Contract data (including, for example, data on the insurance model, on determination and collection of premiums, on benefit processing or on prevention of multiple insurance)

In the context of our insurance business, the main purposes for which we use the personal data that we collect are as follows:

• To ensure fulfilment of applicants’ obligation to take out insurance
• To set and collect premiums
• To assess, calculate and grant entitlements to benefits, and to coordinate them with benefits from other social insurance providers
• To provide customers with medical advice, depending on the insurance model
• To facilitate support and reintegration into the workplace, or to offer assistance in affected customers’ everyday lives, in the context of care management services
• To carry out risk assessment for insurance as per IPA/VVG
• To carry out creditworthiness assessment for insurance as per IPA/VVG in certain cases
• To calculate risk compensation, or to assess and grant entitlement to premium reductions, in the context of basic insurance
• To assert our right of recourse against a liable third party
• To allocate and verify insurance numbers for old-age and survivors’ insurance
• To compile statistics
• To develop new products and to further the development of existing products, which may involve determining key figures on the use of services or capacity utilisation rates, developing ideas for new insurance models, or assessing existing insurance models, services, procedures, technologies and returns
• To comply with legal or regulatory disclosure, notification or reporting obligations in relation to courts and authorities, and to follow authorities’ orders
• To carry out necessary investigations into insurance fraud
• To maintain secure, efficient and profitable operations
• To ensure lead management in the context of framework agreements

For various such purposes, the personal data of service providers and/or their respective contact persons is also regularly processed.

Within the scope of our business activities, and for the aforementioned purposes, we also disclose personal data to third parties, insofar as this is permitted and appropriate. In addition to recipients in the categories mentioned in section 5, this comprises the following in particular:

• Service providers
• Medical examiners and company physicians
• Policyholders
• Heads of families, payers or authorised persons
• Collective partners, for checking entitlement to collective discount
• Intermediaries, for sending admission decisions
• Insurers outside V⁠i⁠s⁠a⁠n⁠a, including co-insurers, pre-insurers, post-insurers and reinsurers

V⁠i⁠s⁠a⁠n⁠a owns various real estate properties in Switzerland, most of which it rents out. The rental properties mainly constitute flats, office space and commercial space.

If you are an existing tenant or are interested in one of our rental properties and wish to apply for it, we process the personal data that you provide us with, that we collect through you, or that we receive from third parties. Alongside the personal data mentioned in section 2, this mainly comprises:

• Contact information and identification-related data (including, for example, date of birth, gender, marital status, OASI/AHV number and nationality)
• Financial data (including, for example, information on income and employment status, debt enforcement or collection, bank details, and information on household and personal liability insurance, including policy numbers)
• Rental agreement data (including, for example, information on security deposits, the rental property, rent statements, ancillary costs statements, number of persons in households, and the handover and takeover reports)

In the context of our real estate business, the main purposes for which we use the personal data that we collect are as follows:

• To receive and assess contact queries and applications from prospective tenants
• To compile the handover and takeover reports
• To manage tenancies, including invoicing for rent and ancillary costs
• To fulfil obligations regarding the repair and maintenance of rental properties
• To provide reference information on tenant behaviour
• Legal disputes
• Statistical purposes (e.g. reporting)

Within the scope of our business activities, and for the aforementioned purposes, we also disclose personal data to third parties, insofar as this is permitted and appropriate. In addition to recipients in the categories mentioned in section 5, this comprises the following in particular:

• Craftspeople, experts, and providers of home/building insurance or liability insurance for the respective property
• Energy supply companies
• Prospective tenants upon change of tenant

FlexOffice (Schweiz) Ltd is responsible for operating the V⁠i⁠s⁠a⁠n⁠a co-working space and accepts booking requests on our behalf.

If you are interested in one of our co-working spaces and wish to rent a workspace and/or a meeting room, you can make a booking by phone or email. We process the data that you provide us with in the context of your query and use it to enable you to register, as well as for payment processing.

Alternatively, you have the option of creating an account. This allows you to make bookings yourself. In order to enable us to confirm your registration and to give you password-protected access to your account, you need to provide various details, such as your email address, first name and surname, and to choose a password. Other details, such as your mobile phone number, are voluntary and make it easier for us to communicate with you, among other things.

You can pay for your booking on account, by credit card or by using a cashless method on site.

Payment on account
In order to enable us to invoice you for your booking, we require certain essential information, such as your first name, surname, and invoicing address. To find out exactly what information is required, please refer to the relevant form. If you do not wish to provide us with all the necessary information, it is not possible to make a booking on account.

Payment by credit card
For the processing of payments, we use the services of the payment provider Stripe Inc., based in the USA – or, if you normally reside in Switzerland or the EEA: Stripe Payments Europe Limited, based in Ireland (hereinafter referred to as ‘Stripe’). The data processed by Stripe includes, for example, your name, credit card number and verification code, as well as the contractual amounts and recipient-related information. This information is necessary for carrying out transactions. However, the provided data is only processed and stored by Stripe. We do not receive any credit card information at all, and only receive information regarding confirmation (acceptance) or refusal of payment. Under certain circumstances, Stripe may transfer data to credit reference agencies for the purpose of verifying identity and creditworthiness. For more information, please refer to Stripe’s privacy policy.

Payment on site
You can also pay for your booking directly on site. Please note that this is only possible using cashless payment methods. To find out which data is collected and processed by FlexOffice in such cases, please refer to the relevant information provided by FlexOffice, especially its privacy policy.

The employee benefits foundation PVS V⁠i⁠s⁠a⁠n⁠a runs a comprehensive pension plan, financed by employees and employers alike.

PVS V⁠i⁠s⁠a⁠n⁠a accepts V⁠i⁠s⁠a⁠n⁠a Group staff, members of the V⁠i⁠s⁠a⁠n⁠a Group’s board of directors and trustees, and the staff and board members of any other affiliated employers, provided that the conditions for membership are met.

In the context of our employee benefits foundation, we process personal data that you provide us with, that we collect through you, or that we receive from third parties. Alongside the personal data mentioned in section 2, this mainly comprises:

• Contact information and identification-related data (including, for example, date of birth, gender, marital status, information on family circumstances including children in particular, OASI/AHV number, staff number, insurance number, nationality, place of origin, and date of marriage or divorce)
• Financial data (including, for example, annual salary, creditable income, termination benefits from previous employers’ pension schemes, assets in the form of vested benefits accounts or policies, insured salary, and retirement savings capital with age-based conversion rate)
• Health data (including, for example, medical evaluations, files from the Invalidity Insurance Office, changes in degree of invalidity, previous pension schemes’ health provisos that have not yet expired and, if applicable, information on state of health)
• Contract data (including, for example, data on the pension plan, data on determination and collection of contributions, data on benefit processing upon retirement, invalidity or death, information on previous pension or vested benefits institutions if applicable, and date of joining/leaving employer if applicable)
• Communication data (including, for example, physical or electronic applications that you send to PVS, and notifications such as those regarding changes to the beneficiaries’ priority order or the distribution of death benefits among multiple beneficiaries)

In the context of our employee benefits scheme, the main purpose for which we use the personal data that we collect is to ensure that occupational pensions are provided as per OPA/BVG and its implementing provisions – for the employees of V⁠i⁠s⁠a⁠n⁠a and of companies with which it has close economic and financial ties, as well as for their relatives and survivors, so as to counter the financial consequences of old age, death and invalidity.

In particular, the specific purposes for which we use the personal data that we collect include the following:

• To determine the relevant annual salary (contractual annual basic salary as per OASI/AHV, any variable compensation, commissions and holiday pay), and to calculate and collect contributions
• To clarify whether the conditions for an additional pension fund buy-in are met
• To issue and update insurance certificates (e.g. upon early withdrawal) or to add remarks (e.g. upon pledging of pension benefits)
• To issue certificates for the tax administration in the event of pension fund buy-ins
• To process or assess applications (e.g. regarding withdrawal of all or part of the retirement savings capital as a lump sum instead of a retirement pension, early withdrawal of capital for owner-occupied residential property, or pledges)
• To evaluate, calculate, grant and check entitlements to benefits such as death benefits, pension benefits or retirement credit, and to coordinate these with benefits from other social insurance providers
• To calculate regulatory pension benefits (retirement, spouse’s, partner’s, invalidity, child’s or bridging pensions)
• To pay out regulatory lump-sum benefits upon retirement, death and invalidity
• To manage individual retirement savings accounts (e.g. comprising savings contributions in accordance with the pension plan, vested benefits transferred in, repayments relating to encouragement of home ownership, compensation payments received as a result of divorce, and interest)
• To make decisions regarding the existence, extent and commencement of invalidity and, in the event of invalidity, to periodically review the degree of invalidity, including assessment of medical and case-related documents
• To assert rights of recourse against liable third parties
• To compile statistics

Within the scope of our business activities, and for the aforementioned purposes, we also disclose personal data to third parties, insofar as this is permitted and appropriate. In addition to recipients in the categories mentioned in section 5, this comprises the following in particular:

• Medical advisors
• Re-insurers
• Notaries
• Insured persons’ creditors (sellers, entrepreneurs, lenders, cooperative residential association beneficiaries, notaries etc.)
• Newly relevant pension funds, vested benefits foundations, suppletory institutions or pledgees upon insured persons’ withdrawal
• Relatives such as (former) spouses/partners, children and heirs
• Liable third parties and their liability insurance providers

Some of the recipients are located in Switzerland and others are abroad. However, we store core system data on persons covered by our employee benefits scheme entirely in Switzerland, or in a country that is in the EU/EEA and thus has adequate data protection.

In order to display and optimise our website content while ensuring data security, it is possible that we collect personal data from you. We may also do this in order to analyse website usage, and to comply with regulatory or legal requirements. If you use the relevant functions, we also process personal data for the following purposes:

• To make contact with you
• To regularly inform you about our offers (e.g. newsletter)
• To enable interaction in the context of our offers and website content (e.g. social media)
• To use it in other specified ways

If you access one of our websites, the browser used on your device automatically sends data to the respective website’s server. This data is temporarily stored in so-called ‘server log files’. In particular, such access-related data includes:

• The IP address, name and version of the internet service provider used
• The date and duration of your visit to our websites
• The website from which you visited us

This information does not allow any conclusions to be drawn about you personally.

This data is processed for the purpose of enabling use of our websites (establishing a connection), for ensuring durable system security and stability, for optimising what we offer, and for internal statistical purposes. This data is neither passed on to third parties nor evaluated. No personal user profile is created.

Our websites offer you the option of contacting us via various contact forms and/or by email. The contact form shows you which data is collected. In such cases, we use the information provided by you in order to process and handle your query.

The respective mandatory information is necessary for processing your query. Voluntary provision of additional information makes it easier for us to process your query and enables us to give you precise information.

For some of our insurance products, you can send us your application online and take out a policy by completing the relevant form. The respective mandatory information is necessary for processing your query, providing you with your insurance policy and ensuring correct payment.

If we offer the respective insurance in cooperation with one of our insurance partners, we pass on your personal data to them, so that you can take out the insurance. In the course of order processing, the payment service providers we use (Visa, Mastercard) receive the data necessary for processing your insurance application. Your chosen payment service provider is responsible for your payment data. You will find more information about such providers’ data protection on their websites.

BBTClaims enables you to quickly and easily file accident, illness and maternity reports, and send them to us. For this purpose, we use the claim report form provided by BBT Software AG, a company based in Switzerland (hereinafter referred to as ‘BBT’).

If you submit a claim report to us, you are required to provide various personal details, so that we can record the claim and provide you with any benefits to which you may be entitled. The form tells you which specific details these are. BBT receives the claim reports and forwards them to us. BBT does not store any sensitive personal data (and in particular: no health data).

You will find more information about BBTClaims and BBT’s data protection on the BBT website and in BBT’s legal notice.

If you wish to participate in our bonus programme myPoints and to earn points by exercising, you must register for it in the V⁠i⁠s⁠a⁠n⁠a-App.  To track your activity data, connect the app (after giving explicit consent) to compatible data sources, such as:

• Google Health Connect
• Apple Health Kit
• Fitbit
• Garmin
• Google Fit

In the context of myPoints, we only have access to the following fitness data:

• Number of steps
• Calories burned

This data is used for:

• display within myPoints
• calculating your points total
• determining any entitlement to bonuses

The data is processed exclusively for the purposes of the bonus programme. The fitness data is:

• not used for marketing or advertising purposes
• not sold
• not passed on to unauthorised third parties
• only processed to the extent necessary for technical implementation and the calculation of bonuses

Anonymised analysis is carried out, solely to aid technical improvement and further development of the bonus programme, and not for advertising or marketing purposes. 

You can revoke your consent to the accessing of health data at any time, via the settings in Google Health Connect, Apple Health or the relevant fitness platform. With regard to the collection and processing of data within each platform, the respective platform’s data protection provisions also apply.

You will find more information on myPoints in the terms of participation.

We would be happy to send you our newsletters on topics related to nutrition, exercise and health, as well as events and our job vacancies. If you wish to subscribe to one of our offered newsletters, we require various details from you, including your first name, surname and email address in particular.

The newsletters and marketing emails sent can contain small ‘invisible’ files (web beacons) that enable various analyses to be carried out, so as to improve what we offer. The web beacons are used to record your IP address, the browser you are using, the time when you access and open the newsletter or marketing email, and your click behaviour in relation to links contained in the emails. The data is stored and evaluated, so that the newsletter and advertising emails can be adapted to individual interests more effectively in future. We do not pass this information on to third parties.

It is possible to unsubscribe from our customer newsletters via an opt-out link. Subscription to our blog newsletter occurs by means of a so-called ‘double opt-in’ procedure. This means that after requesting a subscription, you receive an email, in which you must click on a link to confirm your subscription.

Our job newsletter is sent by the Swiss third-party provider prospective media services pms Inc. (hereinafter referred to as ‘pms’) and SAP SuccessFactors Recruiting, a service provided by SAP America Inc., based in the USA – or, if you normally reside in the EEA or Switzerland: by SAP SE, based in Germany (hereinafter referred to as ‘SAP’).

Our other newsletters (such as our blog or workplace health management newsletters) are sent using the email marketing solution BSI CX, a service provided by BSI Business Systems Integration AG, based in Switzerland (hereinafter referred to as ‘BSI’). Please note that BSI may use Mailjet email services provided by Mailjet GmbH, based in Germany (hereinafter referred to as ‘Mailjet’).

We pass on the personal data that you provide when subscribing to the newsletter, including your email address in particular, to the aforementioned third-party providers, so that they can provide us with their services. Pms stores your data on servers located in Ireland or Switzerland, whereas in the case of SAP, the arranged data location is in the Netherlands. If BSI uses its subcontractor Mailjet to send newsletters, your data is stored in Germany and/or Belgium. The protection of your personal data when transferred to SAP or Mailjet is guaranteed by the signing of agreements on outsourced data processing and, insofar as necessary, by standard contractual clauses.

More information on data protection at pms, SAP, BSI and Mailjet can be found in the respective privacy notices:

• Pms privacy notice
• SAP privacy statement
• BSI privacy policy
• Mailjet privacy policy

You can revoke your consent to the storage of your data and its use for newsletter dispatch at any time, for instance via the ‘unsubscribe’ link in the newsletter. If you wish to prevent the use of web beacons, please configure your email client so that HTML is not displayed in messages. Via the following links, you will find explanations on how to configure this setting in the most common email clients: Microsoft Outlook and Mail on Mac.

If you take part in competitions, we collect the personal data necessary for running the competition. This usually includes at least your name and contact details. We also use the information provided by you for marketing purposes. In some cases, we might pass on your personal data to our competition partners, e.g. in order to have a prize sent to you. Participation in competitions and the associated data collection is, of course, voluntary. You will find detailed information in our terms of participation for the respective competition.

If you register for events, the information that you provide on the registration form is stored for the purpose of processing your registration and running the event. The respective registration form tells you which data is collected.

You will find detailed information on data processing for job applications in our staff recruitment privacy notice.

With our online customer portal myVisana, you can take care of your insurance matters digitally (e.g. view insurance coverage and benefit statements, upload invoices, change master data or communicate with the V⁠i⁠s⁠a⁠n⁠a Group). The portal can be accessed from your computer or, more conveniently, via the V⁠i⁠s⁠a⁠n⁠a app on your mobile phone. With the V⁠i⁠s⁠a⁠n⁠a app, you also benefit from additional functions, such as submission of medical invoices via smartphone photo, virtual insurance cards, and access to the digital bonus programme myPoints.

In order for you to register for myVisana or to activate your account, we need your insurance number (user ID) and email address. This information is required, so that we can set up your access to myVisana or to the V⁠i⁠s⁠a⁠n⁠a app.

If you no longer wish to use myVisana, you can request deletion of your account in the customer portal at any time. You will find more information about the online customer portal in the corresponding GTCs.

For myVisana, we use certain Google Firebase services, provided by Google LLC, based in the USA – or, if you normally reside in the European Economic Area (EEA) or Switzerland: by Google Ireland Limited, based in Ireland (hereinafter referred to as ‘Google’). Firebase helps us to ensure the secure and stable operation of the app, to analyse errors, and – if enabled or with your consent – to optimise performance, to perform usage analysis and to send push notifications. 

Before any data is collected, we first obtain users’ consent in the V⁠i⁠s⁠a⁠n⁠a app. To the extent that Firebase services require consent, they will not be activated until you have given your explicit consent. You can change your preferences at any time in the settings of the V⁠i⁠s⁠a⁠n⁠a app. Services that are technically necessary may be active without consent, provided they are required for the security, stability or basic features of the app. 

We use technically necessary services to ensure that the V⁠i⁠s⁠a⁠n⁠a app is secure, stable and error-free. 

Firebase Crashlytics
We use Crashlytics to detect, analyse and resolve app crashes and technical issues. This may involve the processing of pseudonymous or anonymous technical diagnostic data, e.g. device and operating system information, app version, time of the error, crash logs, technical identifiers and information about the status of the V⁠i⁠s⁠a⁠n⁠a app at the time of the crash. 

We will only activate the following optional services with your consent. You may revoke this consent at any time, effective immediately. 

Firebase Performance Monitoring
We use Performance Monitoring to measure technical performance metrics for the V⁠i⁠s⁠a⁠n⁠a app, e.g. launch times, load times or the duration of specific network requests. This helps us identify technical issues and improve the V⁠i⁠s⁠a⁠n⁠a app. In doing so, pseudonymous or anonymous technical usage and performance data may be processed. 

Firebase Analytics
We use Firebase Analytics to analyse pseudonymous or anonymous usage data and better understand how the V⁠i⁠s⁠a⁠n⁠a app is used. This helps us to improve the features and the user experience. This allows for the tracking of events such as app launches, clicks, screens viewed and interactions within the V⁠i⁠s⁠a⁠n⁠a app. Technical identifiers, such as an app instance ID or Firebase installation ID, can be used to map these events. 

Firebase Cloud Messaging
We use Firebase Cloud Messaging to send push notifications to your smartphone. To do so, a pseudonymous or anonymous token is generated to ensure that the messages are delivered correctly. You will only receive push notifications if you have enabled them in your smartphone’s operating system settings.  

Firebase App Distribution
We may use Firebase App Distribution to distribute pre-release versions of the V⁠i⁠s⁠a⁠n⁠a app to registered testers. This service is intended exclusively for individuals who have specifically registered as test subjects. In particular, this may involve the processing of your name, email address, device information, device IDs, test status and technical information regarding the beta version provided. 

Since Firebase is a Google service, the terms specified in Google’s General Terms and Conditions apply to the storage and transmission of data to servers in the United States or other countries (see below). 

We configure Firebase to ensure that only the data necessary for the specific purpose is processed. Whenever possible, we use pseudonymous, anonymised or aggregated data and refrain from using personally identifiable information. 

We use so-called ‘cookies’ on our websites. Cookies are small text files that are set and stored on your device (laptop, tablet, smartphone etc.) with the aid of your browser. They serve to make our websites generally more user-friendly and effective, and to make your visit to our websites as pleasant as possible. Cookies do not cause any damage to your device and cannot execute programs or contain viruses.

You can prevent cookies from being set by configuring your browser software accordingly. You can also object to the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative’s opt-out page, as well as on the US website YourAdChoices or the European website Your Online Choices. However, please note that if you do so, you might not be able to use the full functionality of our websites.

You will find detailed information about the cookies we use, and on how to revoke any consent given in this regard, in our cookie policy.

Our websites use CookieFirst cookie consent technology, so as to obtain your consent to the storage of certain cookies on your device, and to document this in compliance with data protection requirements. The provider of this technology is Digital Data Solutions, based in the Netherlands.

If you visit our websites, the following personal data is transferred to CookieFirst:

• Your consent or revocation of consent
• Your IP address
• Information about your browser
• Information about your device
• The time of your visit to the website

CookieFirst also stores a cookie in your browser, so that the given or revoked consent can be attributed to you. The data thus collected is stored until either you ask us to delete it, you delete the CookieFirst cookie yourself, or the purpose of this data storage no longer applies. Mandatory legal retention obligations remain unaffected.

On our websites, we use various services provided by Google LLC, based in the USA – or, if you normally reside in the European Economic Area (EEA) or Switzerland: by Google Ireland Limited, based in Ireland (hereinafter referred to as ‘Google’). Google LLC is always responsible for the processing of personal data during use of YouTube and Google Maps. We use the following Google services on our websites:

• Google Tag Manager
• Google Analytics
• Google Ads
• Google Marketing Platform
• Google Maps
• Google reCAPTCHA
• YouTube

More detailed information on the individual services can be found below.

Google uses technologies such as cookies, browser web storage and pixel tags, which enable analysis of your use of our website. The information thus generated about your use of our website can be transferred to a Google server in the USA or other countries and stored there. You will find information about the locations of Google’s data centres here.

Google states that it may process personal data in any county in which Google or its subprocessors maintain facilities. In its ‘Data Processing Addendum for Products where Google is a Data Processor’, Google promises to ensure an adequate level of data protection by using the EU’s standard contractual clauses.

In addition, Google is still certified under the EU-US and Swiss-US Privacy Shield agreements.

You will find more information about Google’s processing and privacy settings in Google’s privacy policy and on its privacy settings page.

Google Tag Manager
Our websites use Google Tag Manager, which allows website tags to be managed efficiently. Website tags are place-holders that are embedded in the source code of the respective website, e.g. in order to manage the integration of frequently used website elements, such as code for web analytics services. Google Tag Manager uses no cookies, but does trigger different tags, which in turn collect data under certain circumstances. Google Tag Manager does not access this data. If deactivation is carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. You will find more information in the Google Tag Manager terms of service.

Google Analytics
We use the web analytics service Google Analytics 4 to analyse our websites and their visitors, as well as for marketing and advertising purposes.

Google Analytics uses cookies that are stored on your device (laptop, tablet, smartphone etc.) and enable analysis of how you use our website. This allows us to evaluate usage behaviour on our website and to make what we offer more interesting, based on the resulting statistics/reports.

We use Google signals. With these, Google Analytics collects additional information (including interests and demographic data) about users who have enabled personalised ads, such that ads can be delivered to these users in cross-device remarketing campaigns.

With Google Analytics 4, anonymisation of IP addresses is activated by default. This means that your IP address is truncated by Google within Switzerland, the EU or the EEA before transfer. In exceptional cases only, the full IP address is transferred to a Google server and truncated there.

Google uses this information for the purpose of evaluating your pseudonymous use of our websites, compiling reports on website activity, and providing other services relating to website and internet usage. According to Google, the IP address sent from your browser in the context of Google Analytics is not combined with any other data by Google. If you visit our websites, your user behaviour is recorded in the form of events (e.g. page views, purchasing activities (including revenue), website interaction or ‘click path’) and other data, such as your approximate location (country and town/city), technical information about your browser and the devices you use, or the referrer URL, i.e. the website or advertising medium via which you accessed our websites.

You can prevent the cookie-generated data relating to your use of our websites (including your IP address) from being collected, transmitted to Google and processed by Google, if you download and install the Google Analytics opt-out browser add-on. If you wish to object to Google’s interest-based advertising, you can use the settings and opt-out options provided by Google.

An overview of data usage in Google Analytics and the measures taken by Google to protect your data can be found at the Google Analytics help centre.

You will find more information about the Google Analytics terms of service and Google’s protection of data in the respective documents.

Google Ads
With Google Ads, a ‘conversion cookie’ is set on your computer if you access our websites via a Google ad. These cookies have a limited validity, and Google states that they contain no personal data and thus do not facilitate identification of individuals. If you visit certain websites of ours and such a cookie has not yet expired, we and Google can recognise that you clicked on the ad and were thus directed to our websites. Each Google Ads customer gets a different cookie. This means that it is not possible to track cookies across Google Ads customers’ websites. The information gained with the aid of the conversion cookie is used by Google to generate conversion statistics for Google Ads customers who have opted for conversion tracking. These statistics tell us the total number of users who click on our ads and which of our websites are subsequently visited by the respective users. We do not receive any information that allows you to be personally identified.

Based on the information collected, categories relating to your interests are assigned to your browser. These categories are used for displaying interest-based advertising.

We use the data pertaining to you and collected via the aforementioned cookie (conversion tracking) for the following purposes:

• Remarketing
• Compiling target groups with common interests
• Compiling user-defined target groups with common interests
• Compiling target groups with a willingness to purchase
• Compiling similar target groups
• Demographic and geographical orientation
• Dynamic remarketing
• Compiling user lists

By using Google Ads, we reach users who have already visited our websites. This allows us to present our advertising to target groups who are already interested in our products or services.

You will find more information about Google’s advertising technology and Google’s use of cookies on Google’s website.

Google Marketing Platform
The online marketing tool Google Marketing Platform (GMP) uses cookies to display relevant ads to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to determine which ads are displayed in which browser, and can thus prevent them from being displayed many times over.

In addition, GMP can use cookie IDs to track so-called ‘conversions’, i.e. whether a user sees a GMP ad, visits the advertiser’s website later and makes a purchase there. According to Google, GMP cookies do not contain any personal information.

Your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope or subsequent use of the data collected by Google via the use of this service. According to Google, as a result of the integration of GMP, Google is informed that you have accessed the relevant part of our websites or clicked on one of our ads. If you are registered with a Google service, Google can attribute the visit to your user account. Even if you are not registered with Google or have not logged in to Google, it is possible that the provider obtains and stores your IP address.

You will find more information about GMP on the Google Marketing Platform website.

Google Maps
With Google Maps, we can show you interactive maps directly on the website and enable you to conveniently use a map function.

Usage of Google Maps enables information about your use of our websites (including your IP address) to be transmitted and stored. Under certain circumstances, Google stores such data in the form of usage profiles, for the purposes of producing demand-oriented services, advertising and market research. If you are logged in to Google, your data is directly attributed to your account. If you do not want this to happen, you must log out beforehand.

If you do not agree to this processing of your information, you have the option of deactivating the Google Maps service. To do this, you must disable the JavaScript function in your browser. However, please note that this may also impair other functions on our websites.

You will find more information in the Google Maps terms of service.

Google reCAPTCHA
The reCAPTCHA function helps us to distinguish between entries made by humans (e.g. in a contact form) and those made automatically by computer programs (so-called ’bots’). We use it in an effort to ensure the security of our websites and, in particular, to protect them from automated entries (or attacks) and spam.

To this end, reCAPTCHA analyses the behaviour of website visitors, based on various criteria. This analysis runs entirely in the background and starts automatically, as soon as you visit our websites. To distinguish between humans and bots, Google analyses various pieces of information, such as the IP address of the device used, the length of time spent on the website, the browser and operating system used, and the website visitor’s mouse movements.

You will find more information on how Google uses the data collected this way in privacy policy and Google’s terms of service.

YouTube
To embed videos, we use services provided by YouTube LLC, based in the USA (hereinafter referred to as ‘YouTube’), a subsidiary of Google LLC (hereinafter referred to as ‘Google’).

If you start a YouTube video on one of our websites, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. Such information (including your IP address) can be transmitted to a Google server in the USA and stored there. If you are logged in to your YouTube account at the same time, you thus enable YouTube to attribute your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our websites.

We use YouTube’s so-called ‘privacy enhanced mode’. According to YouTube, this mode means that YouTube does not store any data about you as a visitor to our websites before your viewing or playing of a video. However, the privacy enhanced mode does not necessarily prevent data from being passed on to YouTube partners.

You will find more information in YouTube’s terms of service and Google’s privacy policy.

In order to help our website visitors to enter and obtain information, the Getback script from adfocus Ltd. liab. Co, based in Switzerland, monitors their movements on pages, and offers them additional information in pop-ups when appropriate. According to the corresponding privacy policy, Getback uses services provided by third parties, including those located abroad, e.g. in the United States of America (USA).

You will find more information on data protection and the rights of data subjects in connection with Getback, including the possibility of opting out, in the https://www.getback.app/en/privacy-policy/.

Our websites use Microsoft Advertising, an online marketing service provided by Microsoft Online Inc., based in the USA – or, if you normally reside in the European Economic Area (EEA) or Switzerland: by Microsoft Ireland Operations Limited, based in Ireland (hereinafter referred to as ‘Microsoft’).

We have integrated Microsoft’s universal event tracking (UET) tag into our websites. This tag enables us to analyse your use of our websites if you access them via a Microsoft ad (so-called ‘conversion measurement’). To make this possible, Microsoft stores cookies on your device after you click on a Microsoft ad. This allows Microsoft and us to recognise that someone has clicked on an ad, been directed to one of our websites and reached a predetermined destination page (a so-called ‘conversion page’). In this context, we only learn the total number of users who click on a displayed Microsoft ad and are then directed to the conversion page. We do not receive any information that allows you to be personally identified by us.

If you do not wish to participate in the Microsoft Advertising tracking process, you can opt out via Microsoft’s ‘personalised ads and offers’ page.

You will find more information on data protection and Microsoft Advertising in the Microsoft privacy statement and on the Microsoft Advertising website.

On our websites, we use Microsoft Clarity (hereinafter referred to as ‘Clarity’), an analytics service provided by Microsoft (see above).

Clarity enables us to gain a better understanding of our website visitors’ requirements. This allows us to optimise our websites for marketing purposes and to design it in line with visitors’ interests. Clarity makes it possible to track movements on our websites (with so-called ‘heatmaps’), user interaction and individual sessions (with so-called ‘session recordings’).

The information collected includes interaction data (e.g. clicks, scrolling and mouse-overs) and diagnostics data (e.g. script and image errors). The specific information processed by Clarity is explained here.

You will find more information about how Clarity works on the Clarity website, in the Clarity documentation and in the Clarity FAQ. For information on data protection at Microsoft, please refer to the ‘Microsoft Advertising’ section on this page.

On our websites, we use LinkedIn Marketing Solutions (hereinafter referred to as ‘LMS’), a service provided by the LinkedIn Corporation, based in the USA – or, if you normally reside in the European Economic Area (EEA) or Switzerland: by the LinkedIn Ireland Unlimited Company, based in Ireland (hereinafter referred to as ‘LinkedIn’).

LMS stores and processes information about your user behaviour on our websites. Among other things, LMS uses cookies for this purpose, which are stored locally in your web browser’s cache on the respective device you are operating and enable analysis of how you use our websites.

We use LMS for marketing and optimisation purposes, particularly in order to analyse the use of our websites, to continually improve individual functions, features and the user experience, and to display advertisements that are relevant and interesting to you.

If you are logged in to LinkedIn as a LinkedIn member, LinkedIn can attribute your use of our websites to your profile. If you do not wish this to happen, you must log out of LinkedIn before visiting our websites.

You can obtain more information about the nature, purpose and scope of LinkedIn’s data processing from the LinkedIn privacy policy, cookie policy and privacy portal. You can also opt out of personalised (LinkedIn) advertising by installing an opt-out cookie, regardless of whether or not you are a LinkedIn member.

On our websites, we have embedded the Meta pixel, a piece of code from Meta Platforms Inc., based in the USA – or, if you normally reside in the European Economic Area (EEA) or Switzerland: from Meta Platforms Ireland Ltd, based in Ireland (hereinafter referred to as ‘Meta’).

The Meta pixel enables Meta to place our websites’ visitors in a target group for the display of advertisements (so-called ‘Facebook ads’ or ‘Instagram ads’). Accordingly, we use the Meta pixel to ensure that we only display our placed Facebook and Instagram ads to those Facebook and/or Instagram users who have shown interest in what we offer online or who have certain characteristics (e.g. interest in certain topics or products, as determined on the basis of the websites visited), which we convey to Meta (so-called ‘custom audiences’). With the aid of the Meta pixel, we aim to make sure that our Facebook and Instagram ads match the potential interests of users and do not cause annoyance.

Furthermore, the Meta pixel enables us to monitor the effectiveness of Facebook and Instagram ads for statistical and market research purposes, by seeing whether users are directed to our websites after clicking on a Facebook or Instagram ad (so-called ‘conversions’).

By using cookies, Meta can then recognise you afterwards within Facebook or Instagram, and optimise the efficiency of displayed ads, e.g. by offering ads aimed at specific target groups. This requires you to be logged in to your Facebook or Instagram account. If you have no Facebook or Instagram account, you are not affected by this data processing.

General information on Meta’s use of data, your rights in this regard and options for protecting your privacy can be found in Meta’s privacy policy, available on the Facebook and Instagram websites. You will find specific information and details about the Meta pixel, and how it works, at the Meta help centre. If you wish to generally object to tracking via the Meta pixel, and to the use of your data for displaying Facebook or Instagram ads, you can do so in the Facebook ad preferences and the Instagram privacy settings. To do this, you must be logged in to Facebook or Instagram.

We have also embedded the TikTok Pixel from Chinese company ByteDance on our websites. The party responsible for this pixel is TikTok Pte Ltd, based in Singapore, but if you normally reside in the USA, it is TikTok Inc., based in the USA – or, if you normally reside in the European Economic Area (EEA), the United Kingdom or Switzerland: TikTok Technology Ltd, based in Ireland, and TikTok Information Technologies UK Ltd (hereinafter referred to as ‘TikTok’).

With the aid of the TikTok Pixel, TikTok is able to place our websites’ visitors in a target group for the display of advertisements (so-called ‘TikTok ads’). Accordingly, we use the TikTok Pixel to ensure that we only display our placed TikTok ads to those TikTok users who have shown interest in what we offer online or who have certain characteristics (e.g. interest in certain topics or products, as determined on the basis of the websites visited). Alongside such information, other data, e.g. your IP address or details about the device you are using, is also sent to TikTok. With the aid of the TikTok Pixel, we aim to make sure that our TikTok ads match the potential interests of users and do not cause annoyance. Once this data is sent, TikTok processes it autonomously, and thus in a manner that we have no influence over.

By using cookies, TikTok can recognise you when you are logged in to TikTok, and optimise the efficiency of displayed ads, e.g. by offering ads aimed at specific target groups. This requires you to be logged in to your TikTok account. If you have no TikTok account, you are not affected by this data processing.

You will find general information on TikTok’s use of data, your rights in this regard and options for protecting your privacy in TikTok’s privacy policy. You will find specific information and details about the TikTok Pixel, and how it works, at the TikTok help centre. If you wish to generally object to tracking via the TikTok Pixel, and to the use of your data for displaying TikTok ads, you can do so in your TikTok account settings. You can find out how to do this on TikTok’s ‘change your personalised ads settings’ help page.

In order to display our online magazines on our websites, we use the digital publishing service Yumpu, provided by i-magazine AG, which is based in Switzerland (hereinafter referred to as ‘Yumpu’). Yumpu enables us to display the content of PDF files directly on our websites, as so-called ‘flipbooks’, without you having to download the PDF files themselves.

Yumpu uses cookies which, according to Yumpu, are necessary for guaranteeing the basic functionality of the service. If you visit one of our websites that includes a flipbook, such as our magazine VisanaForum, your browser automatically connects to the Yumpu servers. Your browser then automatically sends various pieces of information to Yumpu, which it stores in so-called ‘server log files’. Among other things, this includes information about the operating system used, the browser type and version, your IP address, and the time of the server request.

According to Yumpu, this data is not combined with any other data sources.

You will find more information about Yumpu’s protection of data, as well as your rights and privacy settings, in the Yumpu privacy policy and cookie policy.

For consistent font display on our websites, we use ‘Fast Fonts’ web fonts from Monotype Imaging Holdings Inc., based in the USA.

If you visit one of our pages on which we use Fast Fonts, your browser loads the required web fonts into your browser cache, so as to display text and fonts correctly. For this purpose, your browser connects to the Fast Fonts servers, which thus receive information, including the fact that the respective website was accessed via your IP address, and possibly other information such as browser version, screen resolution or language settings.

As Monotype operates worldwide, your personal data can be stored and/or processed in any country where it has a branch, or where it engages service providers – including the USA. According to Monotype’s privacy policy, third parties with whom Monotype works and who process your personal data outside the EEA are contractually obliged to comply with standards that ensure a level of data protection equivalent to that of the European Union.

V⁠i⁠s⁠a⁠n⁠a does not collect any personal data via the embedding of Fast Fonts. We also have no influence over the scope or subsequent use of the data collected and processed via the use of Fast Fonts.

If your browser does not support web fonts, your device uses a standard font. You will find more information on these web fonts in the legal notices on myfonts.com and the Fast Fonts privacy policy.

We maintain social media profiles on Facebook, Instagram, TikTok, YouTube, LinkedIn and Pinterest.

Data that you provide via our social media profiles is published by the respective social media platform and not used or processed by us for any other purpose at any time. However, we reserve the right to delete content if necessary. In some cases, we will communicate with you via the social media platform.

Please note that the operator of the social media platform uses web tracking methods. Such web tracking, over which we have no influence, can also take place regardless of whether or not you are logged in to the social media platform, or even registered with it.

You will find more detailed information about the social media platform provider’s processing of data in the respective provider’s privacy notice: 

Facebook
Meta Platforms Inc. (USA) / Meta Platforms Ireland Ltd (Ireland)
Privacy policy

Instagram
Meta Platforms Inc. (USA) / Meta Platforms Ireland Ltd (Ireland)
Privacy policy
 

TikTok
TikTok Inc. (USA) or TikTok Pte Ltd (Singapore) / TikTok Technology Limited & TikTok Information Technologies UK Limited (Ireland / United Kingdom)
Privacy policy

YouTube
YouTube LLC (USA)
Privacy policy

LinkedIn
LinkedIn Corporation (USA) / LinkedIn Ireland Unlimited Company (Ireland)
Privacy policy

Pinterest
Pinterest Inc. (USA) / Pinterest Europe Ltd (Ireland)
Privacy policy

If you would like to obtain sponsorship from V⁠i⁠s⁠a⁠n⁠a, you can submit a query via our websites by creating a V⁠i⁠s⁠a⁠n⁠a user account, and entering an email address and password. We need this information in order to provide you with password-protected access to your stored queries and to process them. We may also use your information for marketing purposes and for sending prizes, or we may pass on your contact details to our partners, so that they can send you prizes.

In order for us to get back to you with any questions, familiarise ourselves with your project and determine whether it is suitable for sponsorship, you must provide us with all information relevant to the respective query, such as contact details, project description and target groups.

Your query will be forwarded to Optimy SA, a company based in Belgium, which operates the relevant form and the tool for managing our sponsorship activities. For more information about how the form/tool that we use works, please refer to the Optimy SA website.

You can edit your queries and personal data directly, within your V⁠i⁠s⁠a⁠n⁠a user account. To delete your V⁠i⁠s⁠a⁠n⁠a user account and/or queries, click on the corresponding button in your account. Please note that once you have deleted your user account, it cannot be restored.

Our websites can contain links to other websites that are not operated by us and to which this privacy notice does not apply. Once you click on such a link, we no longer have any influence over the processing of any data transferred to third parties (e.g. IP address or URL), as we cannot monitor the behaviour of third parties. Therefore, we do not accept any liability for such third-party content. The respective providers or operators of the linked sites are always responsible for the content of those sites.

No illegal content was discernible at the time when each link was created. However, we cannot be reasonably expected to continually monitor and check the content of linked sites without specific indications of an infringement. Such links will be removed as soon as we become aware of any infringements.

a) Your application for a job with us

When you register on our job applicant portal, you provide us with personal data that we need, in order to identify you, to give you password-protected access to your applicant profile and to enable you to apply for a position with us.

We process the data that you send us in connection with your application, primarily to assess your suitability for the position (or possibly for other unfilled positions in our companies) and to implement the job application process. In particular, this allows us to clarify any conflicts of interest that may make it difficult or impossible to employ you. Data can also be processed for statistical purposes (e.g. reporting). However, we take care to make sure this is done in a way that does not enable any conclusions to be drawn about individual persons.

In order for you to send us your application via the job applicant portal, we require the data marked with an asterisk (*) on the application form. We store all the data that you send us.

We process the following categories of personal data:

• Contact information and identification-related data (e.g. first name, surname, address, phone number, email address and date of birth)
• Data relating to your personal situation (e.g. notice period, secondary employment)
• Data that can be extracted from the documents you provide (primarily your CV, letter of motivation, educational qualifications, references and, where applicable, video applications)
• Extract from the register of convictions and/or from the debt enforcement register (for certain positions)
• Our remarks on your job application

We process the data in our applicant management system. The Human Resources department, the line managers potentially in charge of the job application and their deputies have access to the data. Upon any outsourcing of data processing, the data can also be viewed by our IT service provider / IT provider, if and when necessary.

When we receive your application via the job applicant portal, you are sent an automatic confirmation email. If you do not receive this email, please contact recruiting@visana.ch, or resend your application to us.

Before you provide us with any information about references in your job application, you are obliged to obtain the necessary consent, so that we may process this data.

If the job application process leads to employment, your data is transferred to the staff master data and to the staff file, in connection with the employment relationship.

If the job application process does not lead to employment, we delete your data after four months at the latest, unless we have to continue processing your data in order to fulfil legal obligations, or in order to assert, or defend against, any legal claims.

b) Talent pool

After submitting a speculative application or if the job application process does not lead to employment, you can voluntarily consent to being included in our talent pool. We will use your data to offer you any relevant unfilled positions that match your professional qualifications. We regularly check that our talent pool is up to date and we will delete your data no later than twelve months after inclusion in the talent pool. You will not be separately notified when your data is deleted.

You can view the status of your job application via your applicant profile. You also have the option of editing or deleting this profile at any time. If you require assistance with viewing, changing or deleting your data, please indicate this in an email to recruiting@visana.ch.

Yes, automatic encryption ensures that your data is transferred securely.

This privacy notice is subject to change, in that it may be adapted to the latest statutory provisions and to specifics regarding the processing of personal data. Please always refer to the most recent privacy notice.

Caution is always advised when communicating with V⁠i⁠s⁠a⁠n⁠a via email. You can find helpful information about this topic on the Phishing and other fraud attempts page of our website. V⁠i⁠s⁠a⁠n⁠a declines all responsibility for any loss or damage which may result from use of email.

Would you like to communicate with V⁠i⁠s⁠a⁠n⁠a online without compromising security? In our myVisana app or in our portal on myvisana.ch, you can access a secure way to communicate with us.

It is generally possible that V⁠i⁠s⁠a⁠n⁠a records phone conversations for quality assurance purposes, which can result in data processing. If you do not wish your call to be recorded, you can contact us by email or visit your agency in person.

By recording and storing these conversations, we process personal data that is discussed during the calls.

After the envisaged period has expired, the recorded or transcribed data is irretrievably deleted.

V⁠i⁠s⁠a⁠n⁠a uses a voicebot to optimise call management by means of intent recognition. The conversation with the voicebot is transcribed and stored. The transcribed information is made available to your V⁠i⁠s⁠a⁠n⁠a customer advisor, so that your query can be processed as quickly as possible. If the voicebot cannot identify your intent, the transcribed information is used to improve the voicebot. You will find more information here.

V⁠i⁠s⁠a⁠n⁠a uses live chats to optimise service quality. Chat content is stored. The information is made available to your V⁠i⁠s⁠a⁠n⁠a customer advisor, so that your query can be processed as efficiently as possible.