Privacy Policy

Protecting your data, with complete transparency.
The CVCI places particular importance on protecting your personal data. This Privacy Policy clearly explains how your information is collected, used and protected when you use our services, platforms and content. A tangible commitment to a lasting relationship of trust.

Website Terms of Use

This Privacy Policy reflects our practices and standards regarding the processing of personal data.

It applies where we act as the data controller for the personal data of our affiliated members, clients, partners or visitors to our website.

It may be amended at any time. We therefore encourage you to consult our website (www.avscvci.ch) regularly.

This Privacy Policy was last updated on 01.09.2026.

Who are we?

This website is owned and operated by the Vaud Chamber of Commerce and Industry (Chambre Vaudoise de Commerce et de l’Industrie – CVCI), and more specifically by its OASI/DI/IC and Family Allowances social insurance funds.

As a professional compensation fund, our mission is to provide our affiliated members with services relating to case management, to collect contributions and to ensure that all their employees receive the statutory first-pillar benefits, in accordance with the Federal Act on Old-Age and Survivors’ Insurance (OASI), the Federal Act on Disability Insurance (DI), the Federal Act on Income Compensation (IC), the Federal Act on Family Allowances, their respective implementing regulations and the directives issued by the Federal Social Insurance Office.

Under data protection legislation, we are considered the data controller.

What personal data do we process and why?

The personal data we process depends on the type of relationship we have with you. By personal data, we mean any information that identifies you or makes you identifiable (hereinafter referred to as “Data”).

We undertake to:

  • use the Data only for the stated purposes;

  • collect only the Data necessary for those purposes;

  • not retain the Data for longer than necessary for those purposes;

  • disclose the Data only to authorised organisations or persons who require it in connection with the activities of the CVCI OASI fund;

  • inform our affiliated members clearly and transparently about how the CVCI OASI fund uses the Data and about their rights.

1) If you express an interest in our services:

2) If you are an affiliated member or a business partner:

3) If you visit our websites or consult information available online:

We may process the contact details you provide to us, including first and last names, postal addresses, email addresses, telephone numbers and the job titles of employees within your organisation.

We process your Data in order to provide you with services relating to OASI (Art. 49a), in particular to:

• calculate and collect contributions;
• establish entitlement to benefits, calculate, award and coordinate them with benefits provided by other social insurance schemes;
• establish entitlement to subsidies, calculate and pay them, and monitor their use;
• assert rights of recourse against liable third parties;
• supervise the implementation of OASI legislation;
• compile statistics;
• assign or verify the OASI number.

We may process usage data including your IP address, approximate geographical location, browser type and version, operating system, referral source, duration of your visit, pages viewed, browsing history and frequency of use.

The usage data is obtained from our tracking systems provided by Google Analytics.

The purpose of this processing is to analyse the use of our websites and services. It is based on our legitimate interest in securing and improving the content of our websites.

If you use our eServices, we process the following access data: first name, last name, email address, telephone number (if provided) and login history.

This Data is processed for the purpose of communicating with you and providing you with information or an offer relating to our services.

1b) Specific provisions for self-employed affiliated members or persons without gainful activity

In addition to the above-mentioned business relationship data, we process the personal data that you provide to us as part of an application for affiliation: private address, social security number (OASI number), date of birth, marital status, copy of identity card or residence permit, bank details, current professional situation, income, assets, family circumstances, as well as information relating to the professional situation of your spouse or partner.

The legal basis is the Federal Act on Old-Age and Survivors’ Insurance (OASI).

What are the legal bases for processing your Data?

  • compliance with data protection principles;

  • the Federal Act on Data Protection (FADP) and its Ordinance (DPO);

  • the Federal Act on Old-Age and Survivors’ Insurance (OASI), its implementing regulations and the relevant directives;

  • the Federal Act on the Amendment of the Swiss Civil Code (Part Five: Code of Obligations);

  • in certain cases, consent.

With whom do we share your Data?

Pursuant to Article 50a OASI, provided that no overriding private interest prevents such disclosure, we may disclose Data, by way of derogation from Art. 33 ATSG:

  1. to other bodies responsible for implementing OASI legislation or for controlling or supervising its implementation, where the Data is necessary for the performance of their duties;

  2. to bodies of another social insurance scheme where, by way of derogation from Art. 32 para. 2 ATSG, the obligation to disclose the Data arises from a federal law;

  3. to bodies of another social insurance scheme and other services or institutions authorised to use the OASI number, where the Data is required to assign or verify that number;

  4. to the services responsible for operating the central database for civil status records or for managing the joint information system for the foreign nationals and asylum sectors, where the Data is required to assign or verify the OASI number;

  5. to federal statistical bodies, in accordance with the Federal Statistics Act of 9 October 1992;

  6. to cantonal cancer registries and the Childhood Cancer Registry in accordance with the Federal Act of 18 March 2016 on the Registration of Cancer Diseases;

  7. to criminal investigation authorities where this is necessary to report or prevent a crime;

  8. to the Federal Intelligence Service (FIS), or to cantonal security bodies acting on its behalf, where there is a specific threat to internal or external security within the meaning of Art. 19 para. 2 of the Federal Intelligence Service Act of 25 September 2015;

  9. in individual cases and upon a written and reasoned request:

  10. to the competent social assistance authorities where the Data is required to determine or amend benefits, demand repayment thereof or prevent undue payments;

  11. to civil courts where the Data is required to resolve a dispute concerning family or inheritance law;

  12. to criminal courts and criminal investigation authorities where the Data is required to establish the facts in cases involving a felony or misdemeanour;

  13. to debt enforcement offices in accordance with Arts. 91, 163 and 222 of the Federal Act of 11 April 1889 on Debt Enforcement and Bankruptcy;

  14. to tax authorities where the Data is required for the application of tax legislation;

  15. to child and adult protection authorities referred to in Art. 448 para. 4 of the Swiss Civil Code;

  16. to migration authorities referred to in Art. 97 para. 1 of the Federal Act of 16 December 2005 on Foreign Nationals and Integration.

Data required to combat undeclared work may be disclosed in accordance with Arts. 11 and 12 of the Federal Act of 17 June 2005 on Measures to Combat Undeclared Work.

By way of derogation from Art. 33 ATSG, Data relating to matters of public interest connected with the application of this Act may be published. The anonymity of insured persons must be guaranteed.

In other cases, Data may be disclosed if you have given your consent.

How long is your Data retained?

Any personal Data that we process is not retained for longer than is necessary to achieve the specific purpose for which it is processed.

If we have a contract with you, we will apply the statutory retention periods applicable to that type of contract.

We may retain certain Data or records for longer periods for reasons of legal compliance – in accordance with OASI legislation, its implementing regulations and the relevant directives – for financial reasons or for other statistical reporting purposes.

How is your Data protected?

We take appropriate security measures to protect your personal Data against theft, misuse, accidental disclosure or destruction.

We have also implemented measures to ensure the confidentiality of your Data, both in our processes and in the technical systems used to process it.

What are your rights?

You have fundamental rights in relation to the Data we process about you. You will not be charged for exercising these rights, and we undertake to process your request within 30 days.

We will respond in accordance with applicable legal requirements, which may mean that, in certain cases, we are unable to comply with specific requests.

You have the right to:

  • access information concerning you (right of access);

  • request that we correct any inaccurate personal information (right to rectification);

  • request the destruction of your personal Data (right to erasure);

  • in certain cases, temporarily or permanently restrict the processing of your Data;

  • withdraw your consent or object to processing where such processing is based either on your consent or on our legitimate interest (opt-out).

You may exercise your rights, or submit any questions regarding this Privacy Policy, by contacting us by email at dpo@avscvci.ch.

Is your Data transferred abroad?

  • The Data processing activities of the CVCI OASI fund are carried out in Switzerland.

  • If Data is transferred abroad to a country whose legislation does not ensure an adequate level of protection within the meaning of Art. 16 para. 1 FADP, the transfer is either based on the performance of social insurance obligations (Art. 17 para. 1(b) FADP) or safeguarded by entering into a contract based on the standard data protection clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) (EU Standard Contractual Clauses) (Art. 16 para. 2(d) FADP).