Data protection

1. Controller

BS Assicurazioni Sagl, Via Bartolomeo Papio 6, 6612 Ascona, Switzerland — simone.berta@bsas.ch, +41 79 366 91 15. For any question relating to data protection you may contact the director directly.

2. Which data we process

• Contact data: first name, surname, address, telephone number, e-mail address, language of correspondence.
• Data needed for the advice: composition of the household, date of birth, marital status, housing and employment situation, existing policies, premiums, claims, pension data and, where necessary, health information required by insurers for supplementary insurance.
• Technical data from the site: IP address, browser type, pages visited and date of access, recorded in the server log files for reasons of security and stability.

3. Purposes and legal bases

• Performance of the advisory and insurance intermediation mandate (performance of a contract).
• Requesting quotations from insurance companies and forwarding their proposals (performance of the contract and your consent).
• Compliance with the intermediary's legal obligations, in particular the duties of information and documentation under the Insurance Supervision Act and the advice records required in the health branch.
• Handling of claims and correspondence with insurers.
• Replying to enquiries sent through the contact form or by e-mail.

4. Disclosure to third parties

In order to carry out the mandate we disclose the necessary data to the insurance companies approached and, for the health branch only, to our partner Due Mila within the collaboration described on this site. We may also use technical service providers (hosting, e-mail) who are contractually bound to confidentiality. We do not sell or transfer data for advertising purposes.

This website is hosted on servers located in Germany, and therefore within the European Economic Area, which Switzerland recognises as offering adequate data protection. The hosting provider processes the data solely on our instructions. Should a transfer to another country become necessary, it would take place only to states offering adequate protection or on the basis of recognised contractual safeguards.

5. Retention

We keep data for the duration of the mandate and thereafter for the period required by statutory documentation obligations and limitation periods — as a rule ten years for business records. Data that is no longer needed is deleted or anonymised.

6. Cookies and site tools

This site uses no tracking, advertising or third-party statistical analysis cookies. We store only the language you have chosen, in your browser's local storage, in order to offer it again on your next visit; you can delete it at any time in your browser settings.

The typefaces are hosted on our own servers: displaying them involves no request to external services. The map on the Contact page is loaded from OpenStreetMap: when you open it, your IP address is transmitted to that service.

WhatsApp. The contact form does not send messages on your behalf: it opens WhatsApp with the text already drafted, which you then send yourself. From that moment the conversation takes place on WhatsApp and the data is also processed by Meta Platforms Ireland Ltd. under its own terms. Message content is end-to-end encrypted, but metadata — phone number, timing and frequency of contact — is processed by Meta, including outside Switzerland and the European Economic Area. If you would rather avoid this, write to us by e-mail or call.

7. Your rights

• The right of access to the data concerning you.
• The right to have inaccurate data corrected.
• The right to erasure or to restriction of processing, within the limits of statutory retention obligations.
• The right to withdraw your consent at any time, without retroactive effect.
• The right to have your data handed over or transferred in a common electronic format.
• The right to contact the Federal Data Protection and Information Commissioner (FDPIC), Bern.

To exercise these rights, simply write to simone.berta@bsas.ch. For security reasons we may ask you to prove your identity.

8. Security

We take appropriate technical and organisational measures to protect data against unauthorised access, loss or manipulation: an encrypted connection to the site, access limited to the staff who need it, and regular updating of our systems. No transmission over the internet can, however, be guaranteed to be absolutely secure.

9. Amendments

This notice may be adapted in the event of legislative or organisational changes. The version published on this site is the one that applies.