Coop Finance+ Privacy Policy
1 What is the purpose of this Privacy Policy and what does it tell you?
Data privacy is a priority for us, and we always process your data with the utmost care and in accordance with the applicable statutory requirements. Transparent information is essential for effective data privacy. In this Privacy Policy, we tell you how and for what purposes we process your personal data.
This Privacy Policy applies to Coop Finance+ services (hereinafter "Service"). In this Privacy Policy we inform you about the following points in particular:
• who is responsible for processing the data;
• which data we process and where they are obtained;
• the purposes for which they are processed;
• who we share the data with.
The Coop Group Privacy Policy also applies. It contains the following additional information in particular:
• general definitions of terms (see Clause 6);
• additional information regarding the purposes for which we process data (see Clause 8);
• the legal basis on which we process your data (see Clause 9);
• how long we keep your data (see Clause 15);
• how we protect your data (see Clause 16);
• what rights you have and how you can exercise those rights (see Clause 5);
• website and cookie information (see Clause 18).
2 Who is responsible for processing personal data?
The he Coop Cooperative, Thiersteinerallee 12, 4053 Basel (hereinafter “we”) is responsible for data processing in accordance with this Privacy Policy.
When using the present Service, you may conclude a contract for banking services, pension services or other financial services directly with one of our partner companies in the financial and pensions sector (hereinafter “Partners”). Our Partners in the financial and pensions sector currently include Hypothekarbank Lenzburg AG, Glarner Kantonalbank, the Liberty Foundation for 3a Retirement Savings and the Liberty Foundation for Vested Pension Benefits. The Partners are responsible for data processing in the context of performing their contracts, and their own data protection provisions apply.
Coop may offer new services and products from other Partners at any time. In this case, the selected Partners are again responsible for the relevant data processing.
3 Whom can you contact with data privacy-related questions?
If you have any questions or concerns about data privacy, you can contact the Coop Cooperative at the following address:
Thiersteinerallee 12
4053 Basel
+41 (0) 848 11 66 11
service@coopfinanceplus.ch
We also have an EU Representative for the EU region. The EU Representative's contact details are as follows:
VGS Datenschutzpartner GmbH,
Am Kaiserkai 69
20457 Hamburg
Germany
info@datenschutzpartner.eu
4 Which data do we process and where are they obtained?
In order to provide the Service in accordance with this Privacy Policy, we process the following data:
• Person master data (in particular title, last name, first name, gender, date of birth, address, e-mail address, telephone number, nationality, marital status, language, employment relationship, pension fund membership, customer number, Supercard number);
• Contractual data (all the data needed in order to provide the Service including any feedback and complaints);
• Financial data (e.g. data about assets and income, information about creditworthiness, information about the origins of and entitlement to assets);
• Communication data (in particular name and contact details, content of correspondence and metadata relating to the communication);
• Behavioural and transactional data (e.g. the daily turnover data we receive from our Partners – see below; or data gathered in relation to the Supercard programme so that Supercard points can be allocated);
• Preference data (In order to customize our products and services to suit you better, we may process data regarding your preferences – see also Clause 5. In order to do this we may, for example, combine behavioural and transactional data with other data);
• Online identification data (e.g. cookie identifier, IP addresses, log files);
• Online tracking and traffic data (e.g. browsing behaviour on the website or app, clicking behaviour when receiving newsletters);
We usually obtain this data directly from you. If an additional card is applied for, we will receive these details from the account holder. In certain instances, we also collect data about you ourselves or automatically, e.g. when you use the Service, browse our website or use the app. Such data include, in particular, behavioural and transactional data, online identification data, and online tracking and traffic data. In certain instances we may also derive the data from existing data, for example by analysing transactional or behavioural data.
We receive the following data directly from our Partners::
• Onboarding confirmation (including in particular the IBAN and contract number);
• Identification data (copy of passport/ID or other identification records);
We process these data only for the purposes specified in Clause 5.
Other data we receive from our Partners include data connected with the risk profile, housing situation, contact and contract details, or information relating to the product (e.g. product used, including transaction data, account history, performance).
To ensure that we always have your current address, we may utilize an address update service provided by third parties or other group companies in order to find out your present address.
In some circumstances we may also receive other data from third parties. The provisions of the Coop Group Privacy Policy apply in this case (Clause 7).
5 For what purpose do we process your personal data?
We process your personal data for the following purposes:
• contract performance;
• communication;
• marketing and information;
• market and opinion research;
• asserting legal claims;
• complying with legal requirements;
• security;
• other purposes (e.g. internal procedures and administration).
Details of the different purposes may be found in the Coop Group Privacy Policy. As described therein, we may also perform analyses and build profiles for marketing purposes and in order to personalize content. When doing so in connection with the present Service, we do not use any additional data from other companies or formats of the Coop Group.
The data we receive from our Partners in accordance with Clause 4 are processed by us for the following purposes only:
• Onboarding confirmation: Contract performance including conclusion and execution of the contract; synchronization and rectification of errors; marketing purposes in connection with the present Service.
• Contractual data: Synchronization and rectification of errors.
• Identification data: Contract performance including conclusion and execution of the contract.
For data processing in relation to the website and the app, the website and cookie information in the Coop Group Privacy Policy applies.
6 To whom do we pass on your personal data?
We may pass on your personal data as follows:
• Partners: Personal data required by the Partners for the performance of the contract will need to be passed on to them. In this case, the Partner processes the relevant data on its own responsibility. The Partner does not use your data for its own marketing purposes unless you have entered into another form of contractual relationship with the Partner or given your consent. A list of our Partners may be found in Clause 2.
• Within the Coop Group: We may pass on data within the Coop Group for administrative purposes. Other Coop Group companies or Coop Cooperative formats do not process data relating to the present Service for their own purposes, and specifically not for marketing purposes or marketing activities.
• Third parties: We may call on third-party service providers in connection with the provision of this Service. These third-party providers may also process data abroad. More information on this topic may be found in the Coop Group Privacy Policy (see Clauses 10.2 and 11).
7 Changes to this Privacy Policy
We may amend this Privacy Policy from time to time, e.g. if the types of processing or the legal situation change. Changes will be published on the relevant websites. You will be notified separately of such changes insofar as this is reasonably practicable.
Version: 16 October 2023
1 What is the purpose of this Privacy Policy and what does it tell you?
Data privacy is a priority for us, and we always process your data with the utmost care and in accordance with the applicable statutory requirements. Transparent information is essential for effective data privacy. In this Privacy Policy, we tell you how and for what purposes we process your personal data.
This Privacy Policy applies to Coop Finance+ services (hereinafter "Service"). In this Privacy Policy we inform you about the following points in particular:
• who is responsible for processing the data;
• which data we process and where they are obtained;
• the purposes for which they are processed;
• who we share the data with.
The Coop Group Privacy Policy also applies. It contains the following additional information in particular:
• general definitions of terms (see Clause 6);
• additional information regarding the purposes for which we process data (see Clause 8);
• the legal basis on which we process your data (see Clause 9);
• how long we keep your data (see Clause 15);
• how we protect your data (see Clause 16);
• what rights you have and how you can exercise those rights (see Clause 5);
• website and cookie information (see Clause 18).
2 Who is responsible for processing personal data?
The he Coop Cooperative, Thiersteinerallee 12, 4053 Basel (hereinafter “we”) is responsible for data processing in accordance with this Privacy Policy.
When using the present Service, you may conclude a contract for banking services, pension services or other financial services directly with one of our partner companies in the financial and pensions sector (hereinafter “Partners”). Our Partners in the financial and pensions sector currently include Hypothekarbank Lenzburg AG, Glarner Kantonalbank, the Liberty Foundation for 3a Retirement Savings and the Liberty Foundation for Vested Pension Benefits. The Partners are responsible for data processing in the context of performing their contracts, and their own data protection provisions apply.
Coop may offer new services and products from other Partners at any time. In this case, the selected Partners are again responsible for the relevant data processing.
3 Whom can you contact with data privacy-related questions?
If you have any questions or concerns about data privacy, you can contact the Coop Cooperative at the following address:
Thiersteinerallee 12
4053 Basel
+41 (0) 848 11 66 11
service@coopfinanceplus.ch
We also have an EU Representative for the EU region. The EU Representative's contact details are as follows:
VGS Datenschutzpartner GmbH,
Am Kaiserkai 69
20457 Hamburg
Germany
info@datenschutzpartner.eu
4 Which data do we process and where are they obtained?
In order to provide the Service in accordance with this Privacy Policy, we process the following data:
• Person master data (in particular title, last name, first name, gender, date of birth, address, e-mail address, telephone number, nationality, marital status, language, employment relationship, pension fund membership, customer number, Supercard number);
• Contractual data (all the data needed in order to provide the Service including any feedback and complaints);
• Financial data (e.g. data about assets and income, information about creditworthiness, information about the origins of and entitlement to assets);
• Communication data (in particular name and contact details, content of correspondence and metadata relating to the communication);
• Behavioural and transactional data (e.g. the daily turnover data we receive from our Partners – see below; or data gathered in relation to the Supercard programme so that Supercard points can be allocated);
• Preference data (In order to customize our products and services to suit you better, we may process data regarding your preferences – see also Clause 5. In order to do this we may, for example, combine behavioural and transactional data with other data);
• Online identification data (e.g. cookie identifier, IP addresses, log files);
• Online tracking and traffic data (e.g. browsing behaviour on the website or app, clicking behaviour when receiving newsletters);
We usually obtain this data directly from you. If an additional card is applied for, we will receive these details from the account holder. In certain instances, we also collect data about you ourselves or automatically, e.g. when you use the Service, browse our website or use the app. Such data include, in particular, behavioural and transactional data, online identification data, and online tracking and traffic data. In certain instances we may also derive the data from existing data, for example by analysing transactional or behavioural data.
We receive the following data directly from our Partners::
• Onboarding confirmation (including in particular the IBAN and contract number);
• Identification data (copy of passport/ID or other identification records);
We process these data only for the purposes specified in Clause 5.
Other data we receive from our Partners include data connected with the risk profile, housing situation, contact and contract details, or information relating to the product (e.g. product used, including transaction data, account history, performance).
To ensure that we always have your current address, we may utilize an address update service provided by third parties or other group companies in order to find out your present address.
In some circumstances we may also receive other data from third parties. The provisions of the Coop Group Privacy Policy apply in this case (Clause 7).
5 For what purpose do we process your personal data?
We process your personal data for the following purposes:
• contract performance;
• communication;
• marketing and information;
• market and opinion research;
• asserting legal claims;
• complying with legal requirements;
• security;
• other purposes (e.g. internal procedures and administration).
Details of the different purposes may be found in the Coop Group Privacy Policy. As described therein, we may also perform analyses and build profiles for marketing purposes and in order to personalize content. When doing so in connection with the present Service, we do not use any additional data from other companies or formats of the Coop Group.
The data we receive from our Partners in accordance with Clause 4 are processed by us for the following purposes only:
• Onboarding confirmation: Contract performance including conclusion and execution of the contract; synchronization and rectification of errors; marketing purposes in connection with the present Service.
• Contractual data: Synchronization and rectification of errors.
• Identification data: Contract performance including conclusion and execution of the contract.
For data processing in relation to the website and the app, the website and cookie information in the Coop Group Privacy Policy applies.
6 To whom do we pass on your personal data?
We may pass on your personal data as follows:
• Partners: Personal data required by the Partners for the performance of the contract will need to be passed on to them. In this case, the Partner processes the relevant data on its own responsibility. The Partner does not use your data for its own marketing purposes unless you have entered into another form of contractual relationship with the Partner or given your consent. A list of our Partners may be found in Clause 2.
• Within the Coop Group: We may pass on data within the Coop Group for administrative purposes. Other Coop Group companies or Coop Cooperative formats do not process data relating to the present Service for their own purposes, and specifically not for marketing purposes or marketing activities.
• Third parties: We may call on third-party service providers in connection with the provision of this Service. These third-party providers may also process data abroad. More information on this topic may be found in the Coop Group Privacy Policy (see Clauses 10.2 and 11).
7 Changes to this Privacy Policy
We may amend this Privacy Policy from time to time, e.g. if the types of processing or the legal situation change. Changes will be published on the relevant websites. You will be notified separately of such changes insofar as this is reasonably practicable.
Version: 16 October 2023