Privacy Policy

Privacy Policy

Responsible Body
Responsible for the data processing described in this Privacy Policy is:

Compando.ch GmbH
Lorrainestrasse 12
3013 Bern
Switzerland

Email: [email protected]
Website: www.compando.ch

1. Scope and General Information
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Confederation (Data Protection Act, nDSG), every person has the right to protection of their privacy and to protection against misuse of their personal data. We take the protection of your personal data very seriously and treat it confidentially and in accordance with legal regulations and this Privacy Policy.

This Privacy Policy applies to the processing of personal data, regardless of the channel through which you contact us.

2. Our Role and the Purpose of Data Processing
Compando.ch GmbH operates an independent online platform where users can compare information on insurance and financial products. We do not provide advice ourselves and do not act as intermediaries.

The primary purpose of processing your personal data is to enable you to use our comparison service. If you request advice or an offer, we process your data to establish contact between you and a suitable expert from one of our partner companies at your request. The goal of this contact establishment is to enable you to work with the expert to develop a suitable solution for you. Data processing is therefore necessary for the provision of our service.

3. Processing of Personal Data and Legal Bases
"Personal data" refers to all information relating to an identified or identifiable natural person. We process personal data in accordance with Swiss data protection law (nDSG). If the EU General Data Protection Regulation (GDPR) is applicable, we also base the processing on the following legal grounds:

  • Consent (Art. 6 para. 1 lit. a GDPR): For specific purposes for which you have given your consent (e.g., when submitting a contact request).
  • Contract fulfillment (Art. 6 para. 1 lit. b GDPR): For the fulfillment of our services to you or for the implementation of pre-contractual measures at your request.
  • Legal obligation (Art. 6 para. 1 lit. c GDPR): For the fulfillment of a legal obligation.
  • Legitimate interests (Art. 6 para. 1 lit. f GDPR): To safeguard our legitimate interests, e.g., to ensure IT security or to enforce legal claims.

4. Disclosure of Data to Third Parties (Partner Companies)
A central part of our service is to establish contact between you and our partner companies at your explicit request. For this purpose, we pass on your personal data, especially contact information (name, address, email, telephone number) and details of your request, to selected partner companies (e.g., consulting or insurance companies).

This disclosure takes place exclusively for the initiation of advice or a contractual relationship at your request. The receiving partner companies are in turn obliged to comply with data protection regulations and will contact you directly. Once your data has been transmitted to a partner company, further processing is subject to their own privacy policy.

Furthermore, we may disclose data to service providers (e.g., IT providers) or authorities if this is necessary for the provision of our services or legally required.

5. Data Transfer Abroad
The recipients of your personal data may also be located abroad. If a recipient is located in a country without an adequate legal level of data protection, we contractually ensure the protection of your data (e.g., by means of standard contractual clauses), unless the transfer is directly necessary for the performance of the contract with you or you have consented.

6. Data Collected When Visiting Our Website

  • SSL-/TLS-Encryption: For security reasons, this website uses SSL-/TLS encryption, recognizable by "https://" in the address bar and the lock symbol in the browser.
  • Server Log Files: Our provider automatically collects and stores technical data such as browser type, operating system, referrer URL, hostname, time, and IP address in server log files. This data is used to ensure operation and is not merged with other data sources.
  • Contact Form: Data from the contact form is stored by us for processing the request and for follow-up questions. Disclosure to third parties only occurs within the scope of establishing contact with our partner companies (see section 4) and based on your request.

7. Your Rights (Data Subject Rights)
You have the right at any time to information, rectification, erasure, restriction of processing, and data portability regarding your personal data. You can also object to processing or withdraw a given consent.

To exercise your rights, please contact us at the address mentioned above. The submission of a copy of an identity document may be required for identification. You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: the FDPIC).

8. Retention Period
We store your personal data only as long as necessary for the purpose of processing, we have a legitimate interest in doing so, or legal retention periods (e.g., 10 years according to the Swiss Code of Obligations) require it.

9. Changes to this Privacy Policy
We may amend this Privacy Policy at any time. The current version published on our website applies.

Bern, 25.08.2025