Privacy policy

PRIVACY NOTICE

Last updated: 2026-02-11

We attach great importance to your privacy and are committed to respecting it in all our daily activities. This Privacy Notice informs you about how we process your personal data.

1. Who controls your personal data?

Loyco SA (hereinafter “Loyco” or “we”), CHE-339.029.861, with its registered office at 8 rue Jacques-Grosselin, 1227 Geneva, Switzerland (commercial register), is the data controller for your personal data.

We process your personal data as well as the personal data of individuals or entities linked to you (together the “Data Subjects” or “you”), which you or a third party may provide to us. In general, you transmit personal data to us within the scope of our potential and/or existing business relationship (“Business Relationship”), for example, when using our services, our website, or our platform.

We may process your personal data as a data controller or co-data controller (the “Controller”).

2. Who to contact for any questions or clarifications?

You can contact your usual Loyco representative and/or write to:
Loyco SA
8 rue Jacques-Grosselin
1227 Geneva, Switzerland
dpo@loyco.ch

3. What personal data do we collect?

Personal data (“Personal Data”) includes any information, regardless of its medium, relating to an identified or identifiable natural person.

Specifically, we may process the following categories:

  • Identification data: first name, last name, date of birth, gender, address, email, telephone numbers, nationality, citizenship, residence, identity documents;
  • Information relating to family members and professional relationships;
  • Education: professional qualifications, employment information, references;
  • HR information: salary, pension, health data;
  • Financial information: tax, banking data;
  • Website-related information: cookies, associated technical data.

4. What are our sources of collection?

We collect Personal Data at different times and from different sources:

  • Directly from data subjects, for example, when you or your organization contact us as part of a Business Relationship;
  • Indirectly from external sources, for example, public information, data provided by third parties, our website.

5. Why (our Purposes) and on what bases do we process your Personal Data?

We process your Personal Data within the scope of our Business Relationships with Data Subjects. Please note that we may be required to collect and process certain data to comply with legal or regulatory obligations. Refusal to provide this information may limit, entirely or partially, our ability to maintain a Business Relationship with you.

To be clear, we refrain from processing your Personal Data for any purpose unrelated to our Business Relationship, and we do not sell your Personal Data under any circumstances.

By way of example, we process your Personal Data to:

  1. Contact and identify Data Subjects;
  2. Fulfill our contractual obligations within the Business Relationship, e.g., provide our services, manage your relationship with Loyco, process payments and invoicing, respond to Data Subjects’ requests, provide relevant information to third parties or authorities;
  3. Comply with our legal obligations, e.g., maintaining tax and commercial records, cooperating with administrations, prosecuting authorities, regulatory bodies, or public authorities;
  4. Conduct our internal processes within Loyco;
  5. Monitor, develop, and improve our services and processes;
  6. Establish, exercise, or defend our legal rights;
  7. Send newsletters and marketing materials;
  8. Monitor website usage.

Our main legal bases (alone or combined) are: performance of a contract, compliance with legal obligations, and our legitimate interest.

6. Do we share your Personal Data outside Loyco?

Yes, we may share your Personal Data with third parties (“Third Parties”) when necessary and related to our Business Relationship and the Purposes described in §5. We do this with full transparency and commit to documenting any communication or transfer to a Third Party, particularly in our contractual documentation.

Here is a list of Third Parties with whom we generally collaborate to provide our services, depending on the type of services provided. All have a contractual agreement with your employer:

  • Insurance companies
  • Pension fund
  • Tax authorities
  • Social security authorities

We also delegate the following services to professional companies in Switzerland:

  • Hosting and operation of our client applications
  • Management of our internal infrastructure, based on Microsoft Azure Cloud, hosted exclusively in Switzerland
  • Physical archiving of paper documents
  • Loyco remains solely responsible for these services, as stipulated in our contractual documentation.

7. Do we transfer your Personal Data outside Switzerland?

No. We have organized our infrastructure so that all our data is stored in Switzerland (see also §9).

We may collaborate with certain IT service providers (development) located abroad. In such cases, they only have access to development environments that do not contain personal data, unlike production environments.

8. What are your rights and how can you exercise them?

We respect your rights and do our best to respond effectively to your requests.

You can contact us (see §2) to exercise your rights provided by the applicable regulations, including:

  • right to information / access;
  • right to rectification or erasure of inaccurate Personal Data;
  • right to erasure;
  • right to restriction of processing;
  • right to object;
  • right to receive your Personal Data in a common electronic format (portability).

You may also withdraw your consent to specific processing. Withdrawal applies only for the future.

Please note that the exercise of certain rights may be subject to conditions or exceptions limiting our ability to respond favorably. We will inform you if this is the case.

9. How do we store and secure your Personal Data?

We electronically store your Personal Data on servers located in Switzerland, including backups (see §7). Paper documents are also kept exclusively in Switzerland.

We implement all reasonable and necessary measures to ensure secure processing: administrative, technical, and physical measures aimed at protecting the confidentiality, integrity, availability, and traceability of Personal Data.

10. How long do we retain your Personal Data?

For client employee data, Loyco distinguishes three categories:

  1. Data of client employees who have ceased their Business Relationship with Loyco (former clients): Upon expiration of the contract, we apply a “return policy”: we return all electronic data to the client and, after written confirmation, destroy electronic copies.
  2. Data of former client employees: Retained as long as necessary, but for a maximum of 11 years (10 legal years + 1 year for backup), to provide evidence in case of an audit or administrative procedure.
  3. Data of current client employees: Retained as long as the employee remains with the client (see point 2) or until the end of the Business Relationship (see point 1).

In the event of the end of a Business Relationship, the client can choose between data retention or deletion. In case of deletion, we export and make the data available to the client before destruction, after written confirmation.

11. How long do we manage cookies?

To optimize your experience on the site, cookies and similar technologies may be used. These are small files stored in your browser, containing certain configurations and data exchanged with Loyco’s system.

You can refuse cookies in your browser settings or via the site’s cookie management system. Please note that deactivation may limit certain site functionalities.