For the purposes indicated above, we may process the personal data we receive about you from public databases, third parties such as brokers and business partners, other insurers, credit reference and fraud prevention agencies, advertising networks, analytics providers, search information providers, loss adjustors, surveyors, intermediaries, premium finance companies, delegated authorities, lawyers.
For those purposes indicated above where we have indicated that we do not require your explicit consent or where we are otherwise required to collect your personal data in order to underwrite your insurance product and/or process your claim, we will process your personal data based on the performance of the insurance contract (legal basis: art. 6 (1) (b) GDPR), our legitimate interests (legal basis: art. 6 (1) (f) GDPR) and/or to comply with our legal obligations (legal basis: art. 6 (1) (c) GDPR) and/or the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity. When we process your personal data based on our legitimate interest, you have the right to object to the processing on grounds relating to your particular situation (art. 21 GDPR).
We are required to collect and process your personal data if you would like to purchase our products and services (amongst others art. 58 Law of 4 April 2014 concerning the insurances). If you do not provide personal data to us, we will not be able to provide you with the products and services you want or that may be of interest to you, to manage your claims or to adapt our offers to your particular needs.
4. Who will have access to your personal data?
We will ensure that your personal data is processed in a manner that is compatible with the purposes indicated above. For the stated purposes, your personal data may be disclosed to the following parties who operate as third party data controllers only on a “need to know”-basis:
- Public authorities, other Allianz Group companies, other insurers, co-insurers, re-insurers, insurance intermediaries/brokers, and banks.
For the stated purposes, we may also share your personal data with the following parties who operate as data processors under our instruction and limited to “need to know”:
- Other Allianz Group companies, technical consultants, experts, lawyers, loss adjustors, repairers, medical doctors; and service companies to discharge operations (claims, IT, postal, document management); and
- Other Allianz Group companies, technical consultants, experts, lawyers, loss adjustors, repairers, medical doctors; and service companies to discharge operations (claims, IT, postal, document management); andAdvertisers and advertising networks to send you marketing communications, as permitted under local law and in accordance with your communication preferences. We do not share your personal data with non-affiliated third parties for their own marketing use without your permission.
Finally, we may share your personal data in the following instances:
- In the event of any contemplated or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in any insolvency or similar proceedings; and
- In the event of any contemplated or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in any insolvency or similar proceedings; andTo meet any legal obligation, including to the relevant ombudsman or applicable supervisor authority if you make a complaint about the product or service we have provided to you.
5. Where will my personal data be processed?
Your personal data may be processed both inside and outside of the European Economic Area (EEA) by the parties specified in section 4 above, subject always to contractual restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. We will not disclose your personal data to parties who are not authorized to process them.
Whenever we transfer your personal data for processing outside of the EEA by another Allianz Group company, we will do so on the basis of Allianz’ approved binding corporate rules known as the Allianz Privacy Standard (Allianz’ BCR) which establish adequate protection for personal data and are legally binding on all Allianz Group companies.
Allianz’ BCR and the list of Allianz Group companies that comply with them can be accessed under http://www.allianz.com. Where Allianz’ BCR do not apply, we will instead take steps to ensure that the transfer of your personal data outside of the EEA receives an adequate level of protection as it does in the EEA (for example, Standard Contractual Clauses). You can find out what safeguards we rely upon for such transfers by contacting us as detailed in section 9 below.
6. What are your rights in respect of your personal data?
You have the right to:
- Obtain confirmation as to whether or not personal data are being processed and access your personal data held about you and to learn the origin of the data, the purposes and ends of the processing, the duration of the storage, the details of the recipients, data controller(s), the data processor(s) and the parties to whom the data may be disclosed;Obtain confirmation as to whether or not personal data are being processed and access your personal data held about you and to learn the origin of the data, the purposes and ends of the processing, the duration of the storage, the details of the recipients, data controller(s), the data processor(s) and the parties to whom the data may be disclosed;
- Withdraw your consent at any time where your personal data is processed with your consent;
- Oppose to the treatment, especially when your personal data are not useful or are no longer necessary to our contractual relationship (see article 7 of this Privacy Notice);
- Request rectification of your personal data if inaccurate or incomplete;
- Request erasure of your personal data from our records in certain circumstances, such as when the retention period of your personal data is exceeded or when they are no longer necessary for the purpose of their collection and processing (art. 17 GDPR);
- Request the restriction of processing of your personal data in certain circumstances, for example where you have contested the accuracy of your personal data, for a period enabling us to verify its accuracy (art. 18 GDPR);
- Obtain your personal data in an electronic format for you or for your new insurer; and
- The right to the portability of your personal data, that is to say the right to receive your personal data in a structured, commonly used and machine-readable format or to have them transmitted directly to another controller;
- File a complaint with us and/or the relevant data protection authority: https://www.dataprotectionauthority.be/procedures
You may exercise these rights by contacting us as detailed in section 9 below providing your name, email address, account identification, and purpose of your request. You may also make an access request by completing the Data Access Request Form available via agcs.allianz.com
7. How can you object to the processing of your personal data?
Where permitted by applicable law or regulation, you have the right to object the processing of your personal data (including for purposes of direct marketing). Once you have informed us of this request, we shall no longer process your personal data unless permitted by applicable laws and regulations. You may exercise this right in the same manner as for your other rights indicated in section 6 above.
8. How long do we keep your personal data?
We keep your data throughout the full term of your contract. After expiry of the contract, and according to our Record Retention Policy, we will retain your personal data for 10 [ten] years from the date the insurance policy or product expires, a claim has been settled or the business relationship ends, unless a longer retention period is required or is permitted by law and necessary from our side. We will not retain your personal data for longer than necessary and we will hold it only for the purposes for which it was obtained.
9. How can you contact us?
If you want to object to the use of your data, if you want to request the erasure, if you have any queries about how we use your personal data or if you want to file a complaint, you can contact us by post or email as follows:
By email: AGCS-DATA-PROTECTION-MED@allianz.com
By post:
Allianz Global Corporate & Specialty SE
Data Protection
1, cours Michelet
Case Courrier S 1205
CS 30051
92076 Paris La Défense Cedex
France
For all your requests, please attach a proof of identity.
10. How often do we update this privacy notice?
We regularly review this privacy notice. We will ensure the most recent version is available on our website https://www.agcs.allianz.com/fr/global-offices/belgium/. This privacy notice was last updated on May 25th, 2018.
