← Back to the search

Data protection policy

Last updated: 25 October 2026

Translation: in case of any discrepancy, the French version prevails.

This policy explains which personal data Brokerlink SARL processes by means of this 2nd pillar assets search form, why, to whom it is passed on, how long it is kept and what your rights are. It has been drawn up in accordance with the Federal Act on Data Protection (FADP) and, for people residing in the European Union, with the General Data Protection Regulation (GDPR).

1. Controller

Company
Brokerlink SARL
Address
Case postale 90, 1920 Martigny 1
FINMA number
F01536191
E-mail
plp@brokerlink.ch
Telephone
+41793062020

For any questions about your data or to exercise your rights, write to plp@brokerlink.ch.

2. Data processed

  • Estimation questionnaire: your answers and the resulting estimate. As long as you do not leave your contact details, they remain anonymous.
  • Call-back request: first name, surname, telephone number (confirmed by an SMS code) and, if you provide it, your e-mail address.
  • Online search: first name, surname, date of birth, sex, e-mail, telephone number, address and country of residence, AHV number, marital status and its date, a photo of your ID document (front and back) and the signature you draw for the power of attorney.
  • Proof of your consent: the exact text you accepted, the date and time, your IP address and your browser type.
  • Consolidation of your assets: your answers to the investor profile questions.
  • Technical data: IP address, device and browser type, technical logs, and an anonymous count of the form steps (section 10).

3. Purposes and legal bases

  • Performing your mandate: searching for your assets with the Central Office 2nd Pillar and the institutions concerned, opening your vested benefits account if you request it, monitoring the transfers. Basis: performance of the contract (art. 31 para. 2 let. a FADP; art. 6(1)(b) GDPR).
  • Calling you back when you ask us to, or when you have started a search without completing it (section 5). Basis: your request and the legitimate interest in helping you complete a process you have started (art. 6(1)(b) and (f) GDPR).
  • Improving the form and ensuring its security: anonymous statistics, abuse prevention. Basis: legitimate interest (art. 6(1)(f) GDPR).
  • Complying with legal obligations, in particular regarding the retention of documents. Basis: legal obligation (art. 6(1)(c) GDPR).

4. AHV number, ID document and signature

The Central Office 2nd Pillar identifies insured persons by their AHV number and requires a signed power of attorney and a copy of their ID document. These three items are only sent with your completed search, at the moment you submit it. They are encrypted (AES-256) as soon as they are received, are never stored in your browser and are never used for commercial purposes.

5. Search started but not completed

From the ‘Contact details’ step onwards, Brokerlink SARL receives your first name, surname, sex, e-mail, telephone number, your answers to the questionnaire and, at the next step, your address, as well as the last step completed. If you do not complete the search, an adviser may contact you once to help you. This data is deleted 30 days after your last activity if the search is not submitted; you can request its immediate deletion.

6. Recipients

To perform your mandate

  • The Central Office 2nd Pillar (BVG/LPP Guarantee Fund), which receives your request, your power of attorney and your ID document.
  • The pension institutions, vested benefits foundations and banks that hold your assets or to which you request a transfer.
  • If you choose to consolidate your assets: Ampia, a platform for opening vested benefits accounts, and the chosen foundation, which then sends you the link to confirm your identity.
  • The authorities, where required by law.

Technical service providers

Brokerlink SARL uses: LWS (France, hosting of the case management platform and the form), Amazon Web Services (Zurich data centre, document storage), Infomaniak (Switzerland, platform e-mails), Resend (United States, confirmation e-mail) and Twilio (United States, SMS code).

7. Disclosure abroad

Documents are stored in Switzerland and the platform is hosted in France, a country offering an adequate level of protection (Annex 1 DPO). Service providers based in the United States only receive data if they are certified under the Swiss–U.S. and EU–U.S. Data Privacy Framework or, failing that, on the basis of the standard contractual clauses recognised by the FDPIC and the European Commission.

8. Retention period

  • Mandate data: for the duration of the relationship, then 10 years (art. 958f CO).
  • Search started but never submitted: 30 days after the last activity.
  • Call-back request not followed by a mandate: 12 months after the last contact.
  • Anonymous form statistics: 13 months.
  • Technical logs: 12 months maximum.

9. Security

Encryption of communications (HTTPS), encryption of the AHV number, the ID document and the signature as soon as they are received, access limited to those who need it, backups and logging (art. 8 FADP, art. 32 GDPR).

10. Cookies and audience measurement

This form uses neither advertising cookies nor third-party audience measurement tools. For as long as the tab is open, it stores in your browser your progress (without the AHV number, date of birth, ID document or signature) and where your visit came from. It anonymously counts the steps completed (a randomly generated visit number, without IP address or personal data) in order to improve the user journey.

11. Your rights

You can request access to your data, its rectification, its erasure, the restriction of processing and its delivery in a commonly used format, object to processing and withdraw your consent (art. 25 et seq. FADP, art. 15 to 22 GDPR). Write to plp@brokerlink.ch; you may be asked to prove your identity. You can also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you reside in the European Union, the authority in your country (in France: the CNIL, www.cnil.fr). No automated individual decisions are made: the estimate and the investor profile are indications only, and nothing is signed without your consent.

12. Minors

This service is intended for adults.

13. Changes

This policy may be amended, in particular if the service or the law changes. The version published here is authoritative.