General privacy policy and cookie policy of Palomar Asset Ma­nage­ment AG

No­vem­ber 2023


The details pro­vi­ded below are in­ten­ded to give you an over­view of the pro­ces­sing of per­so­nal data by Palomar Asset Ma­nage­ment AG and of your rights based on the ap­p­lica­ble pro­vi­si­ons of data pro­tec­tion law.


Re­s­pon­si­bi­li­ty

Palomar Asset Ma­nage­ment AG, Lim­mat­quai 72, 8001 Zurich, is re­s­pon­si­ble for pro­ces­sing per­so­nal data in ac­cor­dance with this privacy policy.


The de­si­gna­ted person re­s­pon­si­ble for data pro­tec­tion at Palomar Asset Ma­nage­ment AG can be con­tac­ted at the above postal address, by e-mail at contact@pa­lo­marl­td.com or by te­le­pho­ne on +41 44 269 80 03.


Per­so­nal data and pro­ces­sing

Per­so­nal data refers to any in­for­ma­ti­on re­la­ting to a spe­ci­fic or iden­ti­fia­ble natural person, such as name, address, te­le­pho­ne number, email address, date of birth, etc. (“per­so­nal data”).


Any hand­ling of per­so­nal data, re­gard­less of the means and methods used, in par­ti­cu­lar the collec­tion, pro­cu­re­ment, storage, use, dis­clo­sure, ar­chi­ving or erasure of data, is con­side­red to con­sti­tu­te pro­ces­sing (“pro­ces­sing” or “pro­ces­sed”).


Per­so­nal data used

You or the persons con­cer­ned provide some of your per­so­nal data to Palomar Asset Ma­nage­ment AG yours­elf by making it avail­able to us, by using the ser­vices of Palomar Asset Ma­nage­ment AG or by con­tac­ting us by e-mail or te­le­pho­ne. This in­clu­des, for example, name, contact details, date of birth, pro­fes­sio­nal po­si­ti­on, etc. Palomar Asset Ma­nage­ment AG may also collect per­so­nal data itself, for example, if you or the company you work for use ser­vices pro­vi­ded by Palomar Asset Ma­nage­ment AG or visit our website (see section 10). We also process per­so­nal data which Palomar Asset Ma­nage­ment AG re­cei­ves from job ap­p­li­cants. Data is also pro­ces­sed in con­nec­tion with the re­qui­re­ments of the Swiss Anti-Money Laun­de­ring Act and its as­so­cia­ted or­di­nan­ces and gui­de­li­nes and with other re­qui­re­ments that Palomar Asset Ma­nage­ment AG must comply with, for example due to legal re­qui­re­ments or as a con­se­quence of its status as an in­sti­tu­ti­on su­per­vi­sed by the Swiss Fi­nan­ci­al Market Su­per­vi­so­ry Aut­ho­ri­ty (FINMA) (e.g. FINMA cir­cu­lars). If ne­cessa­ry, we also obtain de­tai­led in­for­ma­ti­on that permits an eva­lua­ti­on of your fi­nan­ci­al si­tua­ti­on and an as­sess­ment of your risk ca­pa­ci­ty and risk to­leran­ce, for example re­gar­ding your pro­fes­sio­nal or family cir­cum­stan­ces in con­nec­tion with your fi­nan­ci­al out­go­ings, salary, assets, etc. In ad­di­ti­on to data that Palomar Asset Ma­nage­ment AG re­cei­ves di­rect­ly from you, it also obtains and pro­ces­ses data about you from pu­bli­cly ac­ces­si­ble sources (e.g. the in­ter­net, lists of debtors, com­mer­ci­al re­gi­sters, the press, etc.).


If you are acting on behalf of a third party or pro­vi­ding Palomar Asset Ma­nage­ment AG with in­for­ma­ti­on about a third party, you confirm that you are an aut­ho­ri­sed re­pre­sen­ta­ti­ve or agent of this third party and/or that you have ob­tai­ned all ne­cessa­ry cons­ents from this third party for the dis­clo­sure, collec­tion, pro­ces­sing and use of their data by Palomar Asset Ma­nage­ment AG in ac­cor­dance with the terms of this privacy policy.

In par­ti­cu­lar, the fol­lo­wing per­so­nal data are pro­ces­sed:

  • Per­so­nal details (name, address and other contact details such as te­le­pho­ne number, mobile number, e-mail address, date of birth, place of birth and na­tio­na­li­ty)
  • Iden­ti­fi­ca­ti­on and au­then­ti­ca­ti­on data (e.g. iden­ti­ty do­cu­ment data)
  • Mandate data (e.g. wealth ma­nage­ment mandate or client number)
  • Data from the ful­fil­ment of con­trac­tu­al ob­li­ga­ti­ons (e.g. reports, sta­ti­stics and eva­lua­ti­ons from earlier years)
  • In­for­ma­ti­on about your fi­nan­ci­al si­tua­ti­on (e.g. in­for­ma­ti­on about the origin of assets)
  • Do­cu­men­ta­ti­on data (e.g. re­cord­ings of con­ver­sa­ti­ons or te­le­pho­ne calls with you)
  • User be­ha­viour on our website (in­clu­ding our digital cust­o­mer portal)
  • Elec­tro­nic data (e.g. IP address)


Data usage by Palomar Asset Ma­nage­ment AG

The pur­po­ses we have stated also con­sti­tu­te the legal basis for the pro­ces­sing of per­so­nal data by Palomar Asset Ma­nage­ment AG where such a legal basis is re­qui­red under the ap­p­lica­ble pro­vi­si­ons of data pro­tec­tion law.


To meet our ob­li­ga­ti­ons under a wealth ma­nage­ment mandate

Pro­ces­sing of your per­so­nal data enables Palomar Asset Ma­nage­ment AG to provide the ser­vices con­trac­tual­ly agreed with you. Your per­so­nal data is used to analyse your needs, to carry out wealth ma­nage­ment and client service ac­tivi­ties, to enable use of the digital client portal (in­clu­ding the ex­ch­an­ge of in­for­ma­ti­on and do­cu­men­ta­ti­on via the portal) and to execute wealth ma­nage­ment tran­sac­tions.


Within the scope of your consent

If you have con­s­en­ted to a spe­ci­fic use of your per­so­nal data, Palomar Asset Ma­nage­ment AG will use it within the scope of the consent you have given (e.g. for news­let­ters or cookies).


To balance and weigh up in­te­rests

To safe­guard its own le­gi­ti­ma­te in­te­rests or the le­gi­ti­ma­te in­te­rests of third parties, Palomar Asset Ma­nage­ment AG also pro­ces­ses per­so­nal data for the fol­lo­wing pur­po­ses:

  • Checking and op­ti­mi­sing pro­ces­ses for ana­ly­sing needs
  • Pro­vi­ding and im­pro­ving our of­fe­ring, ser­vices and website
  • Ma­na­ging risk
  • En­for­cing legal claims and moun­ting a defence in the event of any dis­pu­tes
  • Preven­ting and in­ve­sti­ga­ting cri­mi­nal of­fen­ces


On the basis of legal re­qui­re­ments or in the public in­te­rest

Palomar Asset Ma­nage­ment AG is subject to a number of legal ob­li­ga­ti­ons (e.g. Swiss Collec­tive In­vest­ment Schemes Act, Swiss Anti-Money Laun­de­ring Act, FINMA or­di­nan­ces and cir­cu­lars, tax laws, etc.), su­per­vi­so­ry re­qui­re­ments and related dis­clo­sure ob­li­ga­ti­ons. Per­so­nal data are also pro­ces­sed to prevent fraud and money laun­de­ring.


Service pro­vi­ders’ access to your per­so­nal data and pro­ces­sing lo­ca­ti­on

Palomar Asset Ma­nage­ment AG also dis­clo­ses per­so­nal data to third parties as part of its busi­ness ac­tivi­ties and for the pur­po­ses men­tio­ned above, and to the extent it deems ap­pro­pria­te, whether because they process data for Palomar Asset Ma­nage­ment AG (e.g. IT pro­vi­ders) or because they use the data on behalf of the cust­o­mer (e.g. cu­s­to­di­an bank). In this context, your per­so­nal data will be stored in Swit­z­er­land.


Re­ten­ti­on period for your per­so­nal data

Palomar Asset Ma­nage­ment AG pro­ces­ses your per­so­nal data for as long as this is re­qui­red to meet con­trac­tu­al and legal ob­li­ga­ti­ons, par­ti­cu­lar­ly in the course of a wealth ma­nage­ment mandate.


To meet legal re­ten­ti­on ob­li­ga­ti­ons as well as any ob­li­ga­ti­ons to provide in­for­ma­ti­on-, per­so­nal data is also stored beyond the point in time at which con­trac­tual­ly defined ser­vices (e.g. in the context of a wealth ma­nage­ment mandate) are pro­vi­ded to you. This ap­proach serves the purpose, among other things, of do­cu­men­ting the correct action of Palomar Asset Ma­nage­ment AG in ac­cor­dance with con­trac­tu­al, su­per­vi­so­ry and legal re­qui­re­ments and proving this if re­qui­red.


Your data privacy rights

De­pen­ding on the pro­vi­si­ons of data pro­tec­tion law that are ap­p­lica­ble to you at any given time, you may have the fol­lo­wing rights:

  • Right to access your per­so­nal data stored at Palomar Asset Ma­nage­ment AG
  • Right to rec­tifi­ca­ti­on of this data if it is inac­cu­ra­te
  • Right to erasure of the per­so­nal data if Palomar Asset Ma­nage­ment AG is not per­mit­ted or re­qui­red to store it
  • Right to re­stric­tion of pro­ces­sing
  • Right to object to pro­ces­sing by Palomar Asset Ma­nage­ment AG
  • Right to receive your per­so­nal data that you have pro­vi­ded to Palomar Asset Ma­nage­ment AG in a ge­ne­ral­ly avail­able, machine-re­a­da­ble and com­mon­ly used format
  • Right to lodge a com­plaint with the com­pe­tent data pro­tec­tion su­per­vi­so­ry aut­ho­ri­ty. The com­pe­tent data pro­tec­tion aut­ho­ri­ty in Swit­z­er­land is the Federal Data Pro­tec­tion and In­for­ma­ti­on Com­mis­sio­ner (FDPIC)


Palomar Asset Ma­nage­ment AG may enforce the legally pre­scri­bed re­stric­tions on your rights as a data subject, for example, if it is obliged to retain or process certain per­so­nal data, has an over­ri­ding in­te­rest in doing so or needs it to enforce claims.

Per­so­nal data re­qui­red on an ongoing basis for busi­ness re­la­ti­onships

Palomar Asset Ma­nage­ment AG needs from you such per­so­nal data as is re­qui­red to esta­blish and conduct a busi­ness re­la­ti­onship, in par­ti­cu­lar a wealth ma­nage­ment mandate, and to meet the as­so­cia­ted con­trac­tu­al and legal ob­li­ga­ti­ons. Without this per­so­nal data, Palomar Asset Ma­nage­ment AG is unable to con­clu­de or execute a ma­nage­ment mandate with you.


In par­ti­cu­lar, Palomar Asset Ma­nage­ment AG is obliged under the pro­vi­si­ons to combat money laun­de­ring and the fi­nan­cing of ter­ro­rism to iden­ti­fy you by means of your iden­ti­ty do­cu­ment before esta­blis­hing a busi­ness re­la­ti­onship and in so doing to collect and esta­blish your address, na­tio­na­li­ty, name, place of birth, date of birth and iden­ti­ty do­cu­ment data. To enable Palomar Asset Ma­nage­ment AG to comply with these pro­vi­si­ons, you are obliged to make the ne­cessa­ry in­for­ma­ti­on avail­able. If this data should change in the course of the busi­ness re­la­ti­onship, you are obliged to notify Palomar Asset Ma­nage­ment AG of this. If you do not make the re­qui­red in­for­ma­ti­on avail­able, it will not be pos­si­ble to esta­blish or con­ti­nue a busi­ness re­la­ti­onship with you.


Se­cu­ri­ty

Palomar Asset Ma­nage­ment AG pro­tects per­so­nal data by taking ap­pro­pria­te me­a­su­res against loss, misuse, un­aut­ho­ri­sed access, dis­clo­sure, al­te­ra­ti­on or de­struc­tion and in ac­cor­dance with its con­trac­tual­ly agreed un­der­ta­king of con­fi­den­tia­li­ty. We employ ap­pro­pria­te tech­ni­cal and or­ga­ni­sa­tio­nal me­a­su­res for this purpose. However, Palomar Asset Ma­nage­ment AG cannot gua­ran­tee that data will be ab­so­lu­te­ly secure. 


Data pro­ces­sing as a result of use of the website

When you use the public website and/or the digital cust­o­mer portal of Palomar Asset Ma­nage­ment AG (re­fer­red to as the “website”), general in­for­ma­ti­on is au­to­ma­ti­cal­ly re­cor­ded (such as the date of your visit, time zone, web browser type and set­tings, version and lan­gua­ge, your IP address, the MAC address of the device, the ope­ra­ting system used, the content ac­ces­sed and the domain name of your in­ter­net service pro­vi­der). Palomar Asset Ma­nage­ment AG uses this data for ad­mi­ni­stra­ti­ve pur­po­ses, to improve its pro­ducts and ser­vices and to ensure the func­tio­n­a­li­ty of the website. This data is also re­qui­red to ensure the correct pro­vi­si­on and op­ti­mi­sa­ti­on of the website content, the long-term func­tio­n­a­li­ty of our IT systems and the website and to provide the law en­force­ment aut­ho­ri­ties with the in­for­ma­ti­on they need for cri­mi­nal pro­se­cu­ti­on in the event of a cyber attack.


SSL en­cryp­ti­on

The website uses SSL en­cryp­ti­on for se­cu­ri­ty reasons and to protect the trans­mis­si­on of con­fi­den­ti­al data. You can re­cogni­se en­cryp­ted con­nec­tion because the browser address line is pre­fa­ced with “https://” rather than “http://”.


Server log files

Der Pro­vi­der dieser Web­sei­te erhebt und spei­chert au­to­ma­tisch In­for­ma­tio­nen in so ge­nann­ten «Server-Log Files», die Ihr Browser au­to­ma­tisch an die Palomar Asset Ma­nage­ment AG über­mit­telt. Dabei werden ins­be­son­de­re die unter Ziff. 10 ein­gangs auf­ge­zähl­ten In­for­ma­tio­nen über­mit­telt. 


Use of cookies

a) De­fi­ni­ti­on
Cookies are small files that are stored on your com­pu­ter or mobile device when you use the Palomar Asset Ma­nage­ment AG website.


b) Es­sen­ti­al and non-es­sen­ti­al cookies
Es­sen­ti­al cookies are files that are sent to the browser on your com­pu­ter’s hard drive so that we can provide you with certain func­tions. We use non-es­sen­ti­al cookies to collect in­for­ma­ti­on about visits to the website. We also use non-es­sen­ti­al cookies to improve the user-friend­li­ness of the website, for example, to cust­o­mi­se Palomar Asset Ma­nage­ment AG’s content and to make brow­sing the website as en­joya­ble as pos­si­ble. We also use cookies to op­ti­mi­se ad­ver­ti­sing. Cookies enable us to show you ad­ver­ti­se­ments that could be of par­ti­cu­lar in­te­rest to you based on how you use our website. Our aim is to make our online service as at­trac­tive as pos­si­ble for you and show you offers that match your in­te­rests.


c) Session cookies and per­ma­nent cookies

Session cookies are deleted au­to­ma­ti­cal­ly when you leave our website. We also use per­ma­nent cookies that remain stored on your com­pu­ter or mobile device after the end of your browser session until you delete them. The next time you visit our website, your pre­fer­red inputs and set­tings are re­cognis­ed au­to­ma­ti­cal­ly. De­pen­ding on their type, these cookies remain stored on your com­pu­ter or mobile device for between one month and ten years and are disa­b­led au­to­ma­ti­cal­ly once the spe­ci­fied time has elapsed. They help to make our website more user-friend­ly, ef­fec­tive and secure. For example, these cookies allow the website to show you in­for­ma­ti­on tailo­red spe­ci­fi­cal­ly to your in­te­rests.


d) En­ab­ling, dis­ab­ling and de­le­ting cookies
All web brow­sers allow users to enable, disable or delete cookies by con­fi­gu­ring their browser set­tings or options ac­cord­ingly. If cookies are fully or par­ti­al­ly disa­b­led or deleted, the full func­tio­n­a­li­ty of the website may no longer be avail­able.


e) Cookies and per­so­nal data

Our cookies ty­pi­cal­ly do not store any per­so­nal data. However, per­so­nal data from you that we or third-party pro­vi­ders com­mis­sio­ned by us may store (e.g. if you have a user account with us or these pro­vi­ders) can be linked to the tech­ni­cal data or the in­for­ma­ti­on stored in cookies and derived from them, and the­re­fo­re pos­si­bly as­so­cia­ted with your iden­ti­ty.


Web ana­ly­tics tools

We use Google Ana­ly­tics or similar ser­vices on our public website. These ser­vices are pro­vi­ded by third parties which may be located in Swit­z­er­land or in another country. In the case of Google Ana­ly­tics, the service pro­vi­der Google is based in Ireland. Google Ireland uses Google LLC (based in the USA) as a data pro­ces­sor (both “Google”). With these ser­vices, we can measure and eva­lua­te the usage of the website (non-per­so­na­li­sed). This also in­vol­ves the use of per­ma­nent cookies, which are placed by the service pro­vi­der. Alt­hough we can assume that the in­for­ma­ti­on we share with Google is not con­side­red per­so­nal data by Google, it is pos­si­ble that it might use this data, in con­junc­tion with the data which it collects, to draw con­clu­si­ons about the iden­ti­ty of the vi­si­tors and to link this in­for­ma­ti­on to their re­spec­tive Google ac­counts. We adopt a similar ap­proach when uti­li­sing equi­va­lent service pro­vi­ders. If you have re­gi­ste­red with the service pro­vi­der yours­elf, it may be able to iden­ti­fy you as well. The service pro­vi­der will then take re­s­pon­si­bi­li­ty and process your per­so­nal data in ac­cor­dance with its data pro­tec­tion policy. The service pro­vi­der only tells us how our website is used (no per­so­nal in­for­ma­ti­on about you).


Script li­bra­ries

To deliver content ac­cu­ra­te­ly, we may use script li­bra­ries and font li­bra­ries on our website (such as Google Web­fonts). Calling a script library or font library au­to­ma­ti­cal­ly trig­gers a con­nec­tion to the library ope­ra­tor. It is pos­si­ble that the ope­ra­tor of the library may collect data on this con­nec­tion.
 

Google Maps

We use an in­ter­face to geo-spe­ci­fic data from Google to display lo­ca­ti­on in­for­ma­ti­on vi­sual­ly. Google records and uses data on the use of the Maps func­tion. In­for­ma­ti­on on how Google uses data can be found in its data privacy in­for­ma­ti­on.
 

Links to other web­sites

The website con­ta­ins links to other web­sites. Palomar Asset Ma­nage­ment AG has no control over whether the ope­ra­tors of these web­sites comply with ap­p­lica­ble data pro­tec­tion re­qui­re­ments. Palomar Asset Ma­nage­ment AG accepts no re­s­pon­si­bi­li­ty or lia­bi­li­ty whatsoe­ver for the third-party web­sites ac­ces­si­ble via the links.


Final pro­vi­si­ons

This privacy policy does not con­sti­tu­te a con­tract with you. Palomar Asset Ma­nage­ment AG re­ser­ves the right to change the content of this privacy policy at any time and without notice. The current version pu­blis­hed on our website is valid. The­re­fo­re, it is ad­vi­sa­ble to consult this privacy policy re­gu­lar­ly.


If you have any questi­ons re­gar­ding the hand­ling of your data, please do not he­si­ta­te to contact your client advisor or Palomar Asset Ma­nage­ment AG’s Data Pro­tec­tion Officer (contact details pro­vi­ded above).