DATA PROTECTION TOWARDS CUSTOMERS

You can request information about the personal data we process about you at any time. We ask you to send us your request for information along with proof of identity.

We may restrict or refuse to provide information if this information conflicts with our legal obligations, legitimate own or public interests or the interests of a third party. The same applies if the request for information is abusive. If the effort is disproportionate, we can demand a share of the costs, which we will inform you about in advance.

The processing of your application is subject to the statutory processing period of 30 days. However, we may extend this deadline due to a high volume of inquiries, for legal or technical reasons or because we need further information from you. You will be informed about the extension of the deadline in a timely manner, at least in text form.

You have the option to request the deletion or correction of your personal data at any time. We ask you to send us deletion notices along with proof of identity.

We can reject the request if legal regulations require us to retain the data for a longer period of time or without changes or if there is a permission requirement that conflicts with your request.

Please note that exercising your rights may conflict with contractual agreements and have corresponding effects on the performance of the contract (e.g. early termination of the contract or cost consequences).

If you are affected by the processing of personal data, you have the option of asserting your rights in court or submitting a report to the responsible supervisory authority. The responsible supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch.

Personal data includes all information that relates to a specific or identifiable natural person. This includes, for example, name, address, date of birth, email address or telephone number. Data about personal preferences such as leisure activities or memberships also count as personal data.

Personal data that is particularly worthy of protection is data about religious, ideological, political or trade union views or activities; Data on health and, if applicable, information on administrative or criminal prosecutions and sanctions as well as data on social assistance measures. If necessary and appropriate, we can request and process particularly sensitive personal data. In this case, their processing is subject to strict confidentiality.

Processing means any handling of personal data, regardless of the means and procedures used, in particular the acquisition, storage, retention, use, modification, disclosure, archiving, deletion or destruction of data.

Disclosure is the transmission or making available of personal data, for example publication or disclosure to a third party.

Anonymization refers to the process in which personal data is changed so that no conclusions can be drawn about the corresponding natural person. In contrast to pseudonymization, anonymization cannot be reversed.

The pseudonymization of personal data describes the process of making personal data unrecognizable. For this purpose, personal identifying data (e.g. name, date of birth, place of residence) is replaced by a pseudonym (e.g. a code). Anyone who has the key information can use it to assign the data to a specific person (so-called depseudonymization or re-identification ).

In order for us to conclude and process contracts with you, we normally have to process your personal data. This is e.g. This is the case, for example, if you take out new insurance via our platform or trigger a cashback payout. When fulfilling the contract, the following categories of personal data in particular may be processed:

• Personal master data (e.g. title, first name, last name, date of birth, gender, customer number, user name);
• Contact information (e.g. home address, email address, telephone number, shipping address);
• Financial data (e.g. payment details, credit reports);
• Transaction data (e.g. insurance conclusion);
• Customer history (e.g. interaction on the portal, information on how to handle defects or complaints).

For the purpose of fulfilling the contract, we can carry out all processing that is necessary for initiating the contract, concluding the contract, processing the contract or enforcing the contract. For example, we can obtain credit information about you before concluding a contract (with data on your solvency and payment history) in order to decide whether or in what form we will enter into a contract with you. For products for which there is an age requirement, we may require proof of your date of birth using a copy of your passport or ID or verify your age using your passport or ID number. check automatically. For example, in order to submit an insurance application, your data will be passed on to the insurance company, and in the case of additional insurance you will also pass on particularly sensitive data about your health. For payment processing, there is also an exchange with the relevant payment service provider. We may also process your data in connection with your inquiries about the product, to correct defects, to deal with complaints or to evaluate the product.

In order for us to communicate with you and respond to your request, we need to process your personal data. This may be the case if you use a contact form from us, contact us by email, post, telephone, via digital channels (e.g. WhatsApp Business Platform and WhatsApp Flows) or in any other way when we contact you, or for customer care.

In particular, we process the following data for this purpose:

• Name and contact details (e.g. name, address, email address, telephone number);
• Content of the communication (e.g. letter, email, chat, WhatsApp message, comments on the website, telephone conversations);
• Marginal data of the communication (e.g. information on the type, time or, if applicable, location of the communication).

We can carry out all processing operations necessary for communication with you. In particular, we can respond to your inquiries or contact you if we have any questions. We may also use the communication data for quality assurance and training purposes. In this case, the data will be pseudonymized or anonymized as far as possible. We may record or listen in on telephone calls or video conferences for quality assurance and training purposes. If you do not want your image to be recorded, you can turn off your camera.

Communication in connection with other purposes such as contract fulfillment, marketing, or market research may also be covered by this. Additional information can be found in the respective purpose description.

We also use the WhatsApp Business Platform (API) and WhatsApp Flows for communication. If you contact us via WhatsApp or interact with an automated flow, your name, phone number, and the content you send will be processed. Data is transferred via WhatsApp Ireland Limited. Data may also be processed outside Switzerland or the EEA. We recommend that you do not send any particularly sensitive personal data (e.g., health data) via WhatsApp. For more information, please refer to WhatsApp's privacy policy:
https://www.whatsapp.com/legal/privacy-policy-eea

In certain cases, we also use pre-approved message templates (known as templates) via the WhatsApp Business platform to contact you proactively. This includes, for example, service information, reminders about insurance changes, queries about ongoing consultations, or personalized offers. Such messages will only be sent if you have given your consent or if there is a legitimate interest, such as in the context of an existing customer relationship.

You can give us your consent in various ways:

• By clicking on a checkbox when contacting us or registering on our website alletta.ch.
• By sending the message 'START' to us via WhatsApp.
• By replying to a template message from us.
• As part of the registration process on the alletta.ch platform.

By agreeing to receive WhatsApp messages, you confirm that you are at least 16 years old.

alletta sales platform ag will send you contract and consultation information as well as occasional marketing offers (max. once a week) via WhatsApp. The messages are sent via WhatsApp, partly automatically or using pre-approved WhatsApp templates.

You can object to being contacted via WhatsApp at any time by writing “STOP” or “No more WhatsApp” directly in a WhatsApp chat. Once we receive your objection, your number will be blocked from receiving further proactive messages.

So that we can make you attractive and suitable offers and provide you with interesting information about products, services, events, etc., we may process your personal data for marketing purposes. This is e.g. This is the case, for example, if you take out insurance on our portal, if you use your cashback for a donation or find out about offers on our website. For marketing purposes, we may process the following data about you in particular:

• Personal master data (e.g. title, first name, last name, date of birth, gender, user name);
• Contact information (e.g. home/shipping address, email address, telephone number);
• behavioral and transactional data (e.g. purchase details, purchasing behavior, participation in competitions, participation in events, information about subscribed services);
• online identifiers (e.g. cookie identifiers, IP addresses);
• Online tracking and traffic data (e.g. surfing behavior, click behavior when receiving newsletters);
• Profile data or personal preference data (e.g. preferences regarding products or services).

The marketing purpose includes all processing that enables us to provide you with information about our offers. We may send you written and electronic information or offers. This includes, for example, the electronic dispatch of newsletters, emails, push notifications in apps, or other electronic communications, as well as the postal dispatch of advertising brochures, magazines, or other printed materials. This also includes digital advertising messages such as search, display, video, or social ads (e.g., on Google, YouTube, Facebook, Instagram, and TikTok). In addition, we may send you vouchers or invite you to events, prize draws, and competitions. We may also show you recommendations for products or services on our websites, our apps, and the Member Get Member program, or notify you of interrupted consultation processes.

We can also personalize the relevant offers and information based on the data we have about you so that, as far as possible, you only receive information and offers that are relevant and interesting to you. To do this, we may carry out appropriate evaluations and create profiles (see section 13). We also measure and evaluate the effectiveness of our advertising measures.

We may also commission third-party providers to place advertising measures, advertising campaigns, and measure conversions and carry out corresponding evaluations (e.g., using third-party cookies; see Sections 18.2 and 18.3).

You can unsubscribe from marketing communications at any time. You will find a corresponding unsubscribe link in each email communication. The relevant information on preventing marketing cookies (which lead to personalized ads, for example) can be found in the cookie policy (Section 18.2).

We may also process your personal data for other purposes. These include:

Market and opinion research: We can process your personal data so that we can continually develop and improve our offerings. For example, we carry out customer surveys or surveys after you have purchased a product or service from us or have used a service. Corresponding surveys or surveys can e.g. B. via email, SMS, app or via a website. For this purpose, we normally only use pseudonymized or anonymized data. Under certain circumstances, we can evaluate and use the information to send you personalized offers (see sections 8.3 and 13). We can also use online reviews of products in advertising the products and show your review there (possible in both online and print media).

Asserting legal claims: In order for us to be able to assert legal claims or defend against unjustified claims, we may need to process your personal data. This may concern different categories of personal data, depending on the case concerned.

Compliance with legal requirements and prevention and investigation of criminal offenses or other misconduct: We may be obliged to check compliance with legal requirements and to cooperate with the authorities in the event of legal violations. Personal data may be processed for these purposes. This can affect all relevant personal data. This is e.g. B. in the case of enforcing regulatory requirements, disclosing information or documents to authorities if we are legally obliged to do so, or assisting in an official investigation (e.g. law enforcement or supervisory authority) if there is a legal obligation to do so.

Security: In order for us to ensure your security and the security of our business, we may need to process your personal data. This can affect all of your personal data. This includes carrying out spot checks to check the correct processing of transactions, analyzing behavioral and transaction data to identify suspicious behavior patterns or evaluating and analyzing the use of our systems.

Other purposes: We may process your personal data for other purposes, e.g. B. as part of our internal processes and administration. These other purposes include, for example: B. administrative purposes (such as the management of master data, accounting, data archiving as well as the testing, management and ongoing improvement of IT infrastructure) and the evaluation and improvement of internal processes. This also includes, for example, analyzing usage behavior on our apps and websites in order to optimize them (see also section 18). In order to improve certain services, we may also need artificial intelligence (AI) to analyze and evaluate user data. In these cases, the AI evaluation serves the sole purpose of optimizing the corresponding service. The protection of other legitimate interests is also one of the other purposes that cannot be named exhaustively. And this also includes processing the data to improve and train the AI we use

We use WhatsApp to process your inquiries quickly and conveniently. Please note that when using WhatsApp, personal data (e.g. your phone number, name, communication metadata) is processed on servers operated by Meta, which may also be located in the USA. Despite encryption, it cannot be completely ruled out that third parties or government authorities in the USA may gain access to this data.

You may revoke this consent at any time with effect for the future by sending us a short message (e.g. "Stop WhatsApp").

We walk you through every option so you can confidently take out the right policy for you.

What information do we receive and how do we use it?

When you visit our website, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed. This is done for the purposes of system administration, backup, tracking or for statistical evaluations. This involves the following data:

• the name of your internet service provider;
• your IP address (possibly);
• the version of your browser software;
• the operating system of the computer used to access our website;
• the date and time of access;
• the website you previously visited;
• the search words you used to find our website;
• browser type;;
• Host name of the computer;
• access type;;
• Login status.

We walk you through every option so you can confidently take out the right policy for you.

Cookies are text files that are stored on your device's operating system using the browser when you access a website. Cookies contain a unique identification number (ID) that allows us to distinguish individual visitors from others. As a rule, you will not be identified. Cookies do not cause any damage to your computer and do not contain viruses. They also serve to significantly improve user interaction so that certain settings are saved for you, and are essential for some technical controls (e.g. session or shopping cart management).

Most of the cookies we use are so-called “session cookies” which are automatically deleted at the end of your visit.

Other cookies remain stored on your device until you delete them (although they are normally deleted after 2 years at the latest). The purpose of these cookies is to store your preferences (e.g. language and location settings), to provide the website content quickly and attractively (e.g. through the use of fonts and content delivery networks), and to analyze the use of this website for statistical evaluation as well as for continuous improvements and for marketing purposes (usually using third-party cookies, see below).

We can also use similar technologies such as: B. Use pixel tags, fingerprints or other technologies to store data in the browser. Pixel tags can be used to provide the server operator with certain information (e.g. whether and when a website was visited) through small, normally invisible images or program code that are loaded from a server. Fingerprints collect information about the configuration of your device or browser when you visit the website in order to distinguish your device from other devices. Most browsers also support additional technologies (e.g. web storage ) that we can also use.

We may use the following types of cookies or similar technologies:

Necessary cookies: These include cookies that are necessary for a website and its functions to be used. These cookies provide e.g. This ensures, for example, that when you switch between pages, form data that has already been entered is not deleted and shopping cart contents are not lost.

Performance and performance cookies: Performance cookies enable us to perform analytics by collecting information about how a website is used. This allows us to see, for example, how visitors move on a website. We may also measure loading times or website behavior across different browser types. Thanks to performance and performance cookies, we can always improve our websites and the user experience.

Functional cookies: Thanks to these cookies, we can store certain data that you enter on our websites so that you do not have to enter it again (e.g. location, language, form data, etc.). This allows us to increase the user-friendliness of our websites.

Marketing cookies: Marketing cookies allow us (or our marketing partners) to show you advertisements on our websites (or third-party websites) that are tailored to your browsing habits and that are of interest to you.

We may also use third-party cookies. In this case, the cookies are not stored by us when you visit the website, but by the third party provider. Such providers can also be based outside the European Economic Area (EEA), in which case data protection is ensured with appropriate measures (see Section 11).

Third-party cookies can be , for example, analysis services, but also tracking and retargeting measures. These enable us to target you with advertisements on our websites or on the websites of third parties and to measure the effectiveness of those advertisements. Third parties may record your use of our websites and may combine data collected on other websites. The relevant provider can also use this data for their own purposes, e.g. B. for personalized advertising on its own websites or other websites for which it serves advertisements. If the provider can identify you (e.g. because you have a customer account), they can assign the user data to you. The corresponding processing is carried out in accordance with the third-party provider's data protection regulations. The most important third parties are Google and Facebook. Below you will find a description of the most important tools we use (see section 18.3).

The cookies are stored on your computer. You therefore have full control over the use of cookies. You can delete these completely or deactivate or restrict transmission by changing your browser settings. You can also block tracking by certain third parties using a browser extension. You can find further information about the use of cookies on the help pages of your browser. After deactivating cookies, you may no longer be able to use all functions of the website to their full extent.

Below you will find instructions for the most common browsers:

• Google Chrome
• Safari (Apple)
• Microsoft Edge
• Mozilla Firefox

('opt -out') is usually required for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA) possible.

In addition to third-party marketing and cookies, we use other techniques to control online advertising on other websites and thereby prevent wastage. For example, we can pass on our users' email addresses to third-party companies in a pseudonymized form (so-called hashing ) (see Section 6.6 for definition). By comparing the database, the advertising company (usually a social media provider) recognizes the contact details that already exist in its own database and can show you advertisements tailored to your interests (see, for example, the cookies used under Section 18.3). The third-party companies do not receive personal email addresses from people who are not already known. You can prevent personalized advertising from being displayed using the appropriate cookie settings (see above).

We can integrate additional offers from third parties on our websites, in particular from social media providers. These offers are disabled by default. As soon as you activate this (e.g. by clicking a switch), the relevant providers can determine that you are on our website. If you have an account with this social media provider, it can assign this information to you and thus track your use of online offerings. The social media providers process this data on their own responsibility..

Our website uses Google Analytics, a service provided by Google Ireland Ltd. (Google Building Gordon House, Barrow St, Dublin 4, Ireland). Google uses cookies that are stored on your device and enable analysis of website usage. The information generated by the cookie about your use of the website is normally transmitted to a Google server in the USA and stored there. We have added the code “ anonymizeIP ” to Google Analytics. This ensures that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google evaluates the data collected on our behalf so that we can get an idea of visits and user behavior on our websites. This allows us to improve our services and website content and design.

We also use cookies for remarketing campaigns. This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick . In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. smartphone) can also be displayed on another of your devices (e.g. tablet or PC). become. If you have given Google your consent, Google will link your web and app browsing history to your Google account for this purpose. This means that the same personalized advertising messages can be displayed on every device on which you log in with your Google account. To support this feature, Google Analytics collects Google authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.

You can prevent the storage of cookies by adjusting the settings in your browser accordingly (see section 18.2). You can opt out of Google Analytics by downloading and installing the Google Browser add-on.

If you do not wish to participate in the tracking process, you can prevent the required cookies from being set in your browser settings.

You can find more information about Google Ads and Google Conversion Tracking in Google's privacy policy at https://www.google.de/policies/privacy.

Facebook's visitor action pixel ( Meta.) to measure conversions Platforms Ireland Ltd., Harbor 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland). Meta Pixel allows us to track your behavior after you have been redirected to our website by clicking on a Facebook ad . The data collected is anonymous for us as the operator of this website and therefore does not allow any conclusions to be drawn about you personally.

We use Meta Pixel to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimize future advertising measures.

We also use Custom Audience so that our Facebook ads are only shown to those people who are already interested in our offers or have similar interests). For this purpose , we can transmit email addresses to Facebook in encrypted and pseudonymized form (so-called hashing ) so that they can be compared with the database and identical users can be identified (see also section 8.3 above). Through this process, Facebook does not obtain new email addresses that can be used for its own purposes.

If you do not want personalized ads from Facebook, you can set this accordingly in the settings.

for exchanging data that Facebook collects or receives via Meta Pixel or comparable functions, for displaying advertising information that corresponds to visitors, for improving ad delivery and personalizing functions and content . You can therefore address requests for information or other data protection concerns directly to Facebook.

We are not responsible for any further data processing. Your data may be processed by Facebook in this regard. In particular, a connection to your respective user profile is possible and Facebook can use the data collected for its own advertising purposes.

Some of our apps use the so-called Facebook Software Development Kit (Facebook SDK). Provider is Meta Platforms Ireland Ltd., Harbor 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland . Facebook SDK is used to measure Facebook Ads that we run on Facebook. Facebook SDK serves as an interface for the transmission of information for the display of advertising on end devices. To identify our apps, we send Facebook an ID via this interface. Furthermore, no other user data is transmitted to Facebook via the SDK. However, Facebook SDK itself is able to collect various data and send it to Facebook.

The data that the Facebook SDK logs can be found on the Facebook website under 'What data does Facebook collect with the SDK?' visible.

You can restrict the transmission of data through the Facebook SDK by activating the 'Restrict Facebook SDK' option in the app. With the restriction, only the following data will be transmitted:

Our websites use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) or TikTok Inc (5800 Bristol Parkway, Culver City, CA 90230, USA) to measure conversions. The TikTok Pixel enables us to track your behavior after you have been redirected to our website or app by clicking on a TikTok ad. The data collected is anonymous to us as the operator of this website/app and therefore does not allow any conclusions to be drawn about your person.

We use TikTok Pixel to evaluate the effectiveness of TikTok advertisements for statistical and market research purposes and to optimize future advertising measures. We also use Custom Audience so that our TikTok ads are only displayed to people who are already interested in our offers or have similar interests. For this purpose, we can transmit e-mail addresses to TikTok in encrypted and pseudonymized form (so-called hashing) so that a comparison can be made with the database and identical users can be identified (see also section 8.3 above). This process does not provide TikTok with new email addresses that can be used for its own purposes. If you do not wish to receive personalized advertisements from TikTok, you can set this accordingly in the settings.

We are jointly responsible with TikTok for the exchange of data that TikTok collects or receives via TikTok Pixel or comparable functions, for the display of advertising information that corresponds to the visitors, for the improvement of ad delivery and the personalization of functions and content. You can therefore also address requests for information or other data protection concerns directly to TikTok. We are not responsible for any other data processing. Your data may be processed by TikTok in this regard. In particular, a connection to your respective user profile is possible and TikTok may use the data collected for its own advertising purposes. Further information can be found in TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy

We use the WhatsApp Business Platform (API) from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to communicate with you efficiently and personally via WhatsApp to offer services and exchange information. We also use WhatsApp Flows, a function that enables us to integrate structured experiences (e.g. forms, interactive menus, product presentations) directly into WhatsApp chats. We can use the API to send and receive messages, process customer inquiries, arrange appointments, provide product information or fulfill other service and marketing purposes.

We only send WhatsApp messages with your express consent. We obtain this in various ways:

• By clicking on a checkbox when contacting us or registering on our website alletta.ch.
• By sending the message 'START' to us via WhatsApp.
• By replying to a template message from us.
• As part of the registration process on the alletta.ch platform.

By agreeing to receive WhatsApp messages, you confirm that you are at least 16 years old. We also inform you that alletta Sales Platform AG will send you contract and advisory information as well as occasional marketing offers (max. 1x/month) via WhatsApp.

Yes, we would like to point out that the messages sent via WhatsApp can be partially automated or sent via pre-approved WhatsApp templates.

If you communicate with us via WhatsApp or use WhatsApp Flows, we process your telephone number, your WhatsApp user name, the content of your messages and any other information that you provide to us as part of the Flows (e.g. your answers in forms, selection of options). We store this communication data in our customer database to process your requests and improve our services.

We store WhatsApp chat content that is required to fulfill our communication and service purposes for a maximum period of 24 months. After this period has expired, the data will be deleted or anonymized, provided that there are no legal retention obligations to the contrary or further storage is necessary for the fulfillment of the contract.

It is used for efficient and modern customer communication, the provision of support services, the provision of information and, if you have given your consent, also for marketing purposes (e.g. sending offers or updates). WhatsApp Flows enables us to communicate in a more interactive and user-friendly way.

We are responsible for the content of the communication we have with you via the WhatsApp Business Platform. As the operator of WhatsApp, Meta Platforms processes data as part of the provision of the WhatsApp Business Platform and WhatsApp Flows under its own responsibility. This includes technical data for the transmission of messages and data required to comply with WhatsApp's terms of use.

Please note that Meta Platforms may also process your data for its own purposes (e.g., to improve its services, for security purposes, or for marketing) in accordance with its privacy policy. The data may also be processed by Meta in countries outside Switzerland and the EEA where there is no comparable level of data protection. For more information about Meta Platforms' data processing and your rights, please consult WhatsApp's privacy policy:
https://www.whatsapp.com/legal/privacy-policy and https://www.whatsapp.com/legal/terms-of-service