PRÉVANCIA
Privacy statement
Version 1.0 – updated on 25 January 2027.
1. Who processes your data?
The controller is Prévancia Sàrl, Allée de la Petite Prairie 10, 1260 Nyon, UID CHE-405.988.190. Contact for any question about your data: mondossier@prevancia.ch, or by post for the attention of the data protection advisor, Antoine Chevé.
2. Data processed
- Identity and contact: surname, first names, date of birth, address, email, mobile phone, language.
- AVS number: needed by the Central Office of the 2nd pillar and the institutions to identify you; it is encrypted in our database and never appears in our emails and SMS.
- Identity document (identity card or passport) and automatic reading of its machine-readable zone, to check your identity.
- Power of attorney and signature.
- Pension: institutions, statements, amounts, exit dates.
- Advice: appointments, answers to the risk profile, contract and transfer orders.
- Communications: emails and SMS sent, metadata of your calls with our line (date, duration, direction, result; no recording).
- Technical data: log of accesses and actions, IP address, browser, proofs of acceptance.
We do not ask for a residence permit or any health data.
3. Purposes and legal bases
| Processing | Purpose | Basis |
|---|---|---|
| Call-back request (home page) | Call you back about your request | Your request; your agreement to be contacted |
| Search for assets | Contact the Central Office and the institutions, gather the statements | Mandate (power of attorney) |
| Personal space and messages | Sign you in securely, keep you informed | Performance of the mandate |
| Advice and Liberty contract | Interview, risk profile, transfer documents | Pre-contractual measures and contract; FinSA obligations |
| Telephony | Answer your calls and call you back | Overriding interest, performance of the mandate |
| Security and audit log | Protect the data, prove who did what | Security obligation; overriding interest |
| Review request | A single review request after the funds arrive, no reward, with opt-out | Overriding interest |
If the GDPR applies: performance of a contract or pre-contractual measures (Art. 6(1)(b)), legal obligation (point (c)), legitimate interests (point (f)). We do not ask for your consent where another basis applies.
4. Recipients
- Central Office of the 2nd pillar, and the pension and vested-benefits institutions concerned, in Switzerland: identity, AVS, copy of the identity document and power of attorney, by email or post.
- Liberty Vested Benefits Foundation, in Switzerland, if you decide to open an account: contract, documents and statements.
- Advisors of M&F Conseil SA and HelveticAdvice, in Switzerland, acting for Prévancia: only the files of the clients they follow.
- Authorities, if the law requires it.
5. Service providers and transfers abroad
| Provider | Role | Location of the data |
|---|---|---|
| Nine Internet Solutions AG | Hosting of the platform, database, files, backups | Switzerland (emergency access possible from Canada) |
| Infomaniak Network SA | Video conferencing (kMeet) | Switzerland |
| Brevo (Sendinblue SAS) | Sending of emails and SMS | European Union |
| Youtrust SAS (formerly Yousign) | Electronic signature of the Liberty contract | European Union |
| Aircall (Aircall SAS, Aircall.io, Inc.) | Telephony: call metadata | United States |
Transfers to the European Union benefit from an adequate level of protection recognised by Switzerland. Data relating to calls (metadata) may be processed in the United States by Aircall.io, Inc. Before going live, Prévancia checks whether this entity is certified under the Swiss-U.S. Data Privacy Framework and whether the certification covers the processing concerned. Failing that, the transfer relies on appropriate contractual safeguards, in particular the applicable clauses of the Aircall contract. No call is recorded or transcribed.
6. Retention periods
| Data | Period |
|---|---|
| Call-back request or request never sent | 14 days after the last activity |
| Proof of your agreement to be contacted (without name or phone) | 12 months |
| Identity document | At most 90 days after the file is closed; only the proof of verification (date, method, result) is kept |
| AVS number | At most 90 days after closure (30 days if no asset is found) |
| Statements and letters to the institutions | 90 days after the last transfer, or after the answer “no assets” |
| Call history | In the platform: 90 days after closure; number of an unknown caller: 30 days. At Aircall (call metadata): for the duration of the Aircall contract |
| Signed documents (contract, transfer orders) | 90 days after the file is closed; Liberty keeps the originals |
| Audit log | 12 months |
| Backups | 30 days, plus 7 days at a remote site; earlier versions of files: 30 days at most |
A complaint or a procedure under way may extend these periods for the data concerned only. At the end of the period, data is erased or anonymised.
7. Your rights
You may ask for access to your data, for its rectification or erasure, object to a processing and withdraw your agreement to be contacted. Write to mondossier@prevancia.ch. We check your identity through a sign-in to your space and reply within 30 days. The export of your data is placed in your personal space and can be downloaded for 7 days.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or, if you live in the European Union, the data protection authority of your country.
8. Automated decisions and security
No decision concerning you is taken solely by a computer. The automatic reading of documents and statements proposes information that an employee checks; the risk profile is calculated from your answers and discussed with your advisor.
Security measures: hosting in Switzerland; encrypted AVS number and documents; documents served by temporary links; one-time code for clients; mandatory two-factor authentication for the team; access limited to the files needed; log of every consultation; independent security tests.
9. Cookies
The platform uses only two technical cookies: the chosen language and the sign-in session. There is no advertising cookie, no audience measurement tool and no social-network pixel. No consent banner is therefore needed.
10. Representative in the European Union and updates
Our representative in the European Union (Art. 27 GDPR) is Antoine Chevé, 27 route de chez Cachat, 74500 Lugrin, France, antoine.cheve@prevancia.ch, +41 21 588 13 75. We publish any change to this statement on this page, with its date.