Privacy Policy

1. Introduction

With this privacy policy, we, easyall GmbH, Stäffiserweg 13, 4500 Solothurn, Switzerland (hereinafter “we”, “us” or “easyall”), inform you about the processing of personal data in connection with our website www.easyall.ch and our online comparison portal for health insurance.

This privacy policy is based on the Swiss Federal Act on Data Protection (FADP/nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Controller

3. What data we collect

3.1 When you visit our website

When you access our website, the following data is automatically stored in server log files:

• IP address (anonymised)
• Date and time of access
• Page / URL accessed
• Referrer URL
• Browser type and version
• Operating system

This data is technically necessary to deliver the website correctly and is not merged with other data sources.

3.2 When you use the comparison calculator

To calculate and compare health insurance premiums, we collect:

• Postcode / place of residence
• Year of birth
• Gender
• Desired insurance category and options

This information is used exclusively for the premium calculation and is not stored permanently unless you create a user account.

3.3 When you register

If you create a user account, we collect:

• First and last name
• Email address
• Phone number
• Password (stored encrypted)

3.4 When you apply for insurance

If you apply for insurance via our platform, we additionally collect:

• Full address
• Date of birth
• AHV number
• Health information (health questionnaire)
• Current insurance details

Health data is considered particularly sensitive personal data pursuant to Art. 5 lit. c nFADP. This data is only collected with your express consent and used exclusively for the application process.

3.5 Premium alert

If you subscribe to our premium alert, we store your email address and the comparison data you provide (canton, year of birth, deductible, current insurer). We use this data exclusively to notify you by email once a year about the new health insurance premiums. The subscription only becomes active after you confirm it by email (double opt-in). You can unsubscribe at any time via the unsubscribe link in every email; after that we no longer use your data for the premium alert.

4. Purposes of data processing

We process your personal data for the following purposes:

• Provision and operation of our website and the comparison calculator
• Calculation and display of insurance premiums
• Management of your user account
• Processing of insurance applications
• Payment of cashback and management of referrals
• Communication with you (e.g. notifications, support)
• Improvement of our services and website
• Compliance with legal obligations

5. Disclosure to third parties

We only disclose your personal data to third parties in the following cases:

• Insurance companies: When you submit an insurance application, the necessary data is transmitted to the chosen insurance company. This only happens with your express consent.
• IT service providers: We use third-party providers for hosting (Vercel Inc., USA) and data storage (Amazon Web Services). Data processing agreements are in place with these providers. For AI-assisted features (chat assistant, policy analysis) we use Anthropic PBC (USA). For sending transactional emails (e.g. account confirmation, application status) we use Resend Inc. (USA) or Amazon SES; the email address and message content are transmitted in the process. For error monitoring we use Sentry (Functional Software Inc., USA) — personal data is removed before transmission.
• Legal obligations: Where we are legally required to do so or where it is necessary to enforce our rights.

6. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include:

• SSL/TLS encryption of the entire website
• Encrypted storage of passwords (bcrypt)
• Access restrictions and role-based permissions
• Regular security updates

7. Data transfers abroad

Our website is hosted by Vercel Inc. (USA). The database is located on Amazon Web Services in Switzerland (Zurich region). For data transfers to the USA, we rely on the adequacy decisions of the Swiss Federal Council and standard contractual clauses. For AI-assisted features, content is additionally transmitted to Anthropic PBC (USA); the transfer is based on standard contractual clauses. Technical error reports also go to Sentry (Functional Software Inc., USA; standard contractual clauses); personal data is removed beforehand.

8. Cookies

Our website uses technically necessary cookies that are required for the operation of the website (e.g. session cookies, language settings). These cookies are automatically deleted at the end of the browser session.

Beyond this, we do not use any cookies – in particular no analytics, tracking or marketing cookies. A cookie banner is therefore not required.

9. Web analytics

To analyse the use of our website, we use Plausible Analytics, a privacy-friendly web analytics service hosted in the EU. Plausible works entirely without cookies and does not collect any personal data: there is no cross-site tracking, and only aggregated statistics (e.g. page views, referrers, device type) are compiled. As no cookies are set and no personal data is processed, no consent and no cookie banner are required for this.

10. Your rights

You have the following rights with regard to your personal data:

• Right of access: You may request information about the personal data we process.
• Right to rectification: You may request the correction of inaccurate data.
• Right to erasure: You may request the deletion of your data, unless statutory retention obligations apply.
• Data portability: You may request your data in a commonly used format.
• Right to object: You may object to the processing of your data at any time.
• Withdrawal of consent: You may withdraw any consent you have given at any time.

To exercise your rights, contact us at: datenschutz@easyall.ch

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

11. Retention period

We retain your personal data only for as long as is necessary to fulfil the purposes stated or as required by statutory retention obligations. In Switzerland, business records are subject to a retention period of 10 years (Art. 958f CO).

12. Changes

We reserve the right to amend this privacy policy at any time. The current version is always available on our website. In the event of significant changes, we will inform you through appropriate channels.

13. AI-assisted features (chat assistant and policy analysis)

easyall.ch offers an AI chat assistant and an AI-assisted policy analysis. To answer your requests, the chat messages you enter and the insurance documents you upload are transmitted to Anthropic PBC (USA) and used there for one-time processing; the transfer is based on standard contractual clauses.

• Chat assistant: Conversations are stored without any link to names or accounts and without IP addresses, evaluated for quality assurance, and deleted automatically after 90 days at the latest. Please do not share health data in the chat.
• Policy analysis: Uploaded documents are processed solely for the one-time extraction and are not stored by easyall; only the structured result is returned to your browser.