Privacy policy

The processing of information and data – in particular personal data – is a matter of trust. Data protection and security are a top priority for goCaution. To address this concern, the best possible protection must be guaranteed for your data. All data that goCaution receives from you is treated confidentially and in accordance with the currently applicable data protection legislation, i.e. it is in particular collected, stored, used, made available or deleted.

Below you will find information on how we process your personal data when you use our services or are in contact with us, communicate with us or have dealings with us in any other way. Across various websites, we process your personal data within the framework of this privacy policy and therefore in particular for the same purposes. Insofar as we carry out our core business activities, the cantonal data protection law of the Canton of Berne applies in principle.

Insofar as goCaution stores data concerning you, you have the right to information, rectification and deletion/blocking of such data, except where there is a legal obligation to retain it.

This data protection information applies to the processing of personal data carried out by goCaution, Bruennenstrasse 126, 3018 Berne (hereinafter "goCaution") in the course of its services and/or the associated websites and, where applicable, applications, insofar as they do not contain their own data protection information.

• www.gocaution.ch
• www.login.gocaution.ch
• www.my.gocaution.ch
• www.registration.gocaution.ch
• www.offer.gocaution.ch

These websites may contain links to websites of other providers (for example within the framework of so-called social plugins), to which this data protection information and therefore the data protection guaranteed by goCaution does not apply. The websites are operated by goCaution. To the extent permitted by law, goCaution therefore disclaims any liability for any violations of data protection regulations and for any damages resulting therefrom.

Unless otherwise stated, the services and offers provided by goCaution via the Internet and the associated information are only valid for persons and companies domiciled in Switzerland under civil law. Additional restrictions may apply to certain products.

The data and information transmitted to goCaution are used for activities related to the creation and management of the insurance policy. The processing of your personal data is essential to provide you with insurance advice tailored to your needs. The conclusion or execution of an insurance contract is not possible without the processing of your data. Your data is only used for the purpose that was specified at the time of collection, for which you gave your consent, which arises from the circumstances or which is provided for by law.

goCaution processes personal data in particular insofar as this is necessary for business processes such as acquisition, enquiry follow-up, risk assessment of enquiries, protection against insurance fraud, customer relationship management, provision of services, needs-based advice and support, processing of offers and contracts as well as claims and benefits, invoicing, answering questions and enquiries, and the evaluation, improvement and development of new products, services and benefits. In this context, goCaution also processes your personal data for advertising purposes such as satisfaction surveys, general customer communication and personalised customisation of goCaution offers, as well as to create customer profiles.

The personal data processed by goCaution includes data provided by the policyholder as well as publicly available data. The data categories are as follows:

• Customer data (such as name, address, date of birth, gender, nationality, creditworthiness data, etc.)
• Data from applications, including any supplementary questionnaires
• Contract data (contract duration, insured risks, benefits, data on existing contracts, etc.)
• Collection data (such as the date and amount of premiums collected, arrears, reminders, credits, payment connection data)
• Any claim-related data (such as claim notifications, investigation reports, accounting documents, data concerning injured third parties)

We process and retain your personal data for as long as is necessary or appropriate to fulfil our contractual and legal obligations or to comply with the respective legal provisions, or for as long as they are required for the purposes for which they were collected. Where possible, we generally anonymise or delete your personal data as soon as it is no longer required or at the latest upon expiry of the legally prescribed retention period.

You may at any time request the deletion of your personal data by sending us a corresponding request to the point of contact mentioned in section 2. We will comply with your request, provided we are not obliged to continue retaining the data for other reasons (e.g. the legal retention obligation).

We draw your attention to the fact that communication with us via the public and freely accessible Internet is associated with certain security risks over which we have no influence and no means of control. Please contact us if you wish to communicate via a secure connection.

For security reasons, we use SSL or TLS encryption for our website and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We then apply technical and organisational measures to protect your personal data. These measures are regularly reviewed and adapted.

In order to optimise the course of the above-mentioned business processes and to guarantee the accuracy of data, to optimise business and/or customer needs satisfaction and to detect or prevent insurance fraud, data relating to potential or existing customers may be collected from third parties.

When you request a quote via our website, you consent to us transmitting the customer data collected as part of your quote request (name, date of birth, place of birth) to CRIF AG, Hagenholzstrasse 81, 8050 Zurich, for the purposes of identity and creditworthiness verification.

This data transfer takes place so that CRIF, a credit assessment agency, can carry out an identity and creditworthiness check and an assessment of payment capacity on our behalf. In the context of the decision regarding the establishment of a contractual relationship with you, CRIF uses the above-mentioned information in particular to verify the address and analyse your previous payment behaviour. The calculation of these score values is carried out by CRIF on the basis of a recognised scientific, mathematical and statistical method, which also takes your address into account. The score values obtained are transmitted to us, and we make the decision on this basis as to the conclusion and maximum amount of an insurance guarantee that can be contracted with you.

When you request a quote via our website, you consent to us transmitting the customer data collected as part of your quote request (name, date of birth, place of birth) to Creditreform Egeli Zurich AG, Binzmuhlestrasse 13, 8050 Zurich, for the purposes of identity and creditworthiness verification.

This data transfer takes place so that Creditreform, a credit assessment agency, can carry out an identity and creditworthiness check and an assessment of payment capacity on our behalf. In the context of the decision regarding the establishment of a contractual relationship with you, Creditreform uses the above-mentioned information in particular to verify the address and analyse your previous payment behaviour. The calculation of these score values is carried out by Creditreform on the basis of a recognised scientific, mathematical and statistical method, which also takes your address into account. The score values obtained are transmitted to us, and we make the decision on this basis as to the conclusion and maximum amount of an insurance guarantee that can be contracted with you.

For the translation of content and customer communications, goCaution uses the DeepL API provided by DeepL SE (Cologne, Germany). Texts such as email content or documents may be transmitted to DeepL servers for translation purposes. DeepL processes the transmitted texts exclusively for translation purposes. When using the DeepL API Pro, transmitted texts are not stored after translation and are not used for training AI models. Data processing takes place on servers within the European Union.

For the above-mentioned purposes and/or to ensure compliance with legal and regulatory provisions, your personal data may be transmitted to third parties (referred to as "data processors"). goCaution may also outsource all or part of its business areas, certain value creation steps thereof and/or its services (e.g. claims processing, IT, contract management, product development) to third parties in Switzerland and abroad. This then also concerns the processing of personal data. In this context, goCaution attaches great importance to protecting your data against unauthorised access, loss or misuse by third parties.

• Service providers (internal and external), including data sub-processors
• Insurance intermediaries and other contracting parties
• Risk carrier
• Landlords / beneficiaries of sureties (e.g. in the event of a claim)
• Local, national and foreign authorities and services
• Acquirers or parties interested in acquiring activities, companies or other parts of goCaution
• Other parties to potential or actual legal proceedings

Where necessary, goCaution or the data processors consult third parties (for example the current or previous landlord) with your consent, depending on the insurance cover to be verified. On the basis of your consent, these persons are expressly released from their obligation of confidentiality towards goCaution and the data processors for the purposes of examining insurance cover.

Data may also be transmitted for the purpose of detecting or preventing insurance fraud, in particular to insurers in Switzerland and abroad as well as to criminal prosecution authorities.

If the recipient is located in a country that does not have adequate legal data protection, we ensure by contract that the recipient complies with the applicable data protection, insofar as it is not already subject to a legally recognised set of rules to guarantee data protection and we cannot rely on an exception provision.

goCaution takes appropriate technical and organisational measures in the context of processing personal data to prevent unauthorised access and any other unauthorised processing. These measures are based on the relevant international standards and are regularly reviewed and adapted where necessary.

The websites on which you transmit sensitive or personal data are secured against third-party access using so-called "SSL encryption". However, since the integrity, confidentiality and security of data cannot generally be guaranteed on the Internet, goCaution disclaims any liability with regard to:

• The security of your data during its transmission over the Internet
• If a third party modifies, views, takes over, uses or exploits the data that you or goCaution have entered
• Malfunctions on the Internet, imported data of all kinds (including viruses) as well as links to and from other websites

By accessing the goCaution SA website, you agree to the above conditions.

Please note that e-mail communication is generally not encrypted. It is possible that data may be lost or intercepted and/or manipulated by third parties. goCaution takes appropriate technical and organisational security measures to avoid this within the goCaution system. However, your access device (PC, smartphone, etc.) is outside the security zone controllable by goCaution. It is your responsibility as an Internet user to inform yourself about the required security measures and to take the appropriate steps (e.g. up-to-date anti-virus protection, etc.).

If you contact goCaution via the online contact form, the data entered in these forms is transmitted from your computer in encrypted form according to internationally recognised security standards in order to protect it against misuse by third parties.

If you contact us via the callback service form and request a telephone callback, your call data will be recorded. Your data is stored exclusively for the processing of your callback request. Your data will not be shared without your consent. The processing of data entered in the form is carried out solely on the basis of your consent. You may revoke this consent at any time.

It is sufficient to send us an informal message by e-mail. The legality of the data processing operations carried out until the revocation is not affected by the revocation. The data you have entered in the form will remain with us until you ask us to delete it, you revoke your consent to its storage or the purpose of the data storage becomes obsolete (e.g. after your request has been processed). Mandatory legal provisions, such as retention periods, remain unaffected.

You can visit the goCaution web pages anonymously, without having to provide any information about yourself. To do this, you must disable the tracking function in your browser. In any case, your IP address will only be processed in pseudonymised form.

Personal data is only processed if you make it available as part of one of the website applications (e.g. via a contact form, a quote request, an offer, a premium calculator, an online conclusion, a claim notification, live chats, a competition, etc.). This personal data is not forwarded or made available to third parties for any other purpose.

The data you transmit to goCaution via the goCaution web pages is encrypted. However, goCaution assumes no liability for damages that you may suffer in the event of data loss or manipulation. Please therefore ensure that your system is protected at all times by adequate protection (e.g. anti-virus) and that your systems and browsers are up to date.

The goCaution web pages use cookies. Cookies are small files that are stored on your access device (PC, smartphone, etc.) when you visit a goCaution web page. Cookies are used to collect information about the use of the web pages. Each time you visit this website, information is captured for this purpose by the system of your access device.

Some cookies are automatically deleted at the end of the browsing session (so-called session cookies), while others are stored in the user's browser for a predefined period or permanently and then delete themselves (so-called temporary or permanent cookies).

The visitor data collected in this way is pseudonymised, making it impossible to identify individuals. The data is not stored together with other personal data. When you visit the goCaution web pages, you are informed about the use of cookies for analysis purposes and your consent is requested for the processing of the data used in this context.

You can determine the use of cookies yourself by configuring your browser accordingly. However, if the use or functioning of cookies is restricted or prohibited, the use of certain web pages may be limited.

The providers of the goCaution web pages collect and store data in so-called log files upon access. The following data is recorded:

• IP address of the Internet user
• Username (User ID) when using the customer portal
• Date and time of access to the goCaution website
• Name of the web pages accessed
• Definition of files retrieved (downloads)
• Message on the success of the call
• Previously visited page

This data is not stored together with other personal data of the user. Furthermore, this data is only collected for statistical purposes regarding the use of the website, security and optimisation of the offer and the website and is not disclosed to third parties for other purposes.

Third-party services are sometimes displayed on the goCaution web pages. The operation of these services requires the providers to record your IP address. goCaution attaches great importance to only using services whose respective providers use the IP address solely for the delivery of the respective services. The processing of your IP address by third parties is carried out in accordance with their data protection provisions.

The data transmitted to goCaution when visiting the websites may be processed for advertising purposes and, on the basis of a pseudonymised identification number without personal reference (known as a cookie ID), be made accessible in aggregated form to advertising partners for the purpose of targeted advertising. goCaution does not disclose your identity to advertising partners or to partners of advertising marketing networks.

The services of the following advertising partners are used

• Facebook Pixel
• Google Ads Conversion

In order to obtain information about the use of the goCaution web pages and to optimise the offers, data analysis and tracking tools are used. These tools are provided by third parties. As a rule, the information collected for this purpose about the use of a web page is transmitted to the provider's server through the use of cookies. Your IP address is also transmitted, but it is anonymised by the provider before being stored, so that it can no longer be attributed to you.

The following tools may be used on the goCaution web pages

• Google Analytics

Privacy policy for the use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there.

Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

By means of so-called "retargeting" tags, visitors to the goCaution websites can be redirected to third-party websites containing goCaution advertising.

The services of the following providers may be used

• Facebook Remarketing
• Google Remarketing

You may object to the data processing by these providers at any time. You will find the necessary links for this purpose in the chapter Restriction of third-party services under "Advertising partners".

We partly use Cloudflare Turnstile on our web pages. The purpose is to verify whether data entry in forms is carried out by a human being or by an automated programme. Turnstile works largely in the background and generally does not require any active interaction from the user.

During the verification, technical data such as the IP address, browser type and interaction patterns are transmitted to Cloudflare. Cloudflare processes this data in accordance with its own data protection provisions. No data is transmitted to Google or other third-party providers.

You can subscribe to the newsletter via the goCaution web pages and applications. During registration, the following information is collected in addition to the personal data you enter in the registration form:

• Pseudonymised IP address of the calling device
• Date and time of registration

In the context of sending the newsletter, this data is not shared with third parties for other purposes. For statistical purposes, anonymous link tracking is carried out when sending. You can unsubscribe from goCaution newsletters by clicking on the links provided for this purpose in the newsletters.

In principle, you have the right to ask us at any time whether we process personal data concerning you. You also have the option of asking us to correct, block or delete your personal data. Exceptions are data that we need to execute pending orders or to assert existing rights and claims, as well as data that we are obliged to retain by law.

You may also object to the disclosure of certain personal data. You may also ask us to return the data that you have provided to us. You may revoke the consent you have given for the use of your personal data at any time.

Within the framework of the applicable data protection provisions and insofar as they are applicable (for example in accordance with the GDPR), you have in particular the following rights:

• Right of access to the personal data concerning you that we process
• Right to rectification of inaccurate or incomplete personal data
• Right to erasure in certain circumstances
• Right to restriction of data processing in certain situations
• Right to object to processing, except for legitimate and compelling reasons
• Right to data portability in a structured, commonly used and machine-readable format

Please note that in certain cases we may have legal obligations to retain or process certain data. In such cases, we may limit these rights in compliance with the applicable laws and regulations. If the exercise of these rights involves costs, we will inform you in advance.

We reserve the right to amend this privacy policy at any time. The current version published on our website or the version that we may have otherwise provided to you shall apply. If you are affected by the amendment of the privacy policy, we will inform you of such amendment in an appropriate form.