Responsible for content:
SafeLife Beteiligungsverwaltungs GmbH
8010 Graz, Austria
Corporate Communication, Marketing and Portal Management
Information according to E-Commerce Law (SLH)
Company resgistration Number 377444s
Regional Court of Graz
Competent supervisory authority:
Municipality Graz, Trade Licensing Office (Magistrat Graz, Gewerbeamt)
Membership of a Chamber or other institutions:
Chamber of Commerce, Austrian Insurance Association
UID number (SLH):
The company’s business objective is the participation in other companies, taking over the management for other companies and the asset management.
DATA PROTECTION INFORMATION
With this statement, we would like to inform you which personal data we store and how we use them in the context of your contractual relationship (insurance contract) with us. Further, we will inform you about the rights granted to data subjects by the EU General Data Protection Regulation (GDPR), taking effect on 25 May 2018.
All personal data provided to us in the insurance proposal or by third parties are stored and processed for the purposes of pre-contractual needs assessment, customer consulting, concluding and processing insurance contracts. Personal data are processed only for specific purposes and in compliance with the GDPR, regulations of the Data Protection Act, relevant provisions of the Insurance Contract Act and all other appropriate laws.
As a controller within the meaning of the GDPR we determine the purposes and means of the processing of your personal data:
If you have any questions regarding the processing of your personal data you may as of 25 May 2018 address your request to the above stated address (for the attention of the “Data protection officer”) or send an email to firstname.lastname@example.org .
Which personal data do we use?
We process the data which are provided by you in the insurance proposal (application data), as well as contractual data and data received from third parties (brokers, doctors, experts, insurance agents etc.). Such data are, for example, your name, your date of birth, your address, information about the insured interest, the amount insured, the contract term, the insurance premium and your bank details. We submit those data to the insurance partner mentioned on the application, who processes for concluding the insurance contract.
If an insured event occurs, we or the insurance company will collect and process additional information about the event itself (e.g. date of the accident, cause of the accident, photos, documents etc.) and claim data (amount of the benefit, bank details etc.). If necessary, this may also include data obtained from third persons who were entrusted with the claim assessment (experts, for example), or who are competent in any way to provide information (authorities, witnesses etc.), or who are standing in connection with the payment of the benefit (doctors, hospitals etc.).
We collect only necessary information, which means that in some individual cases it will be sufficient to acquire just some of the above-listed data.
For what purpose and on which legal basis is data collected and processed?
a) Preparation, administration and fulfilment of (insurance) contracts (legal basis: art. 6 para. 1 (b) GDPR)
If you submit an application for insurance, your statements on the application form are required for an assessment of the risk to be insured. Therefor the data are submitted to the insurance company mentioned in the application. If an insurance contract comes into effect, these data will be processed for the implementation of the contract, like policy issuing and premium invoicing. If an insured event occurs, we or the insurance company will have to process additional data relating to the event in order to determine the extent of your insurer’s obligation to pay indemnification.
b) Consent of the data subject (legal basis: art. 6 para. 1 (a) and art. 9 GDPR, §11a VersVG)
The processing of special categories of personal data (like data concerning health) requires your explicit consent, unless it is needed for the establishment, exercise or defence of legal claims.
The conclusion and performance of insurance contracts is based on the processing of personal data. If you do not provide your personal data to the required extent, it may under certain circumstances be impossible to conclude the requested insurance contract with you or to examine and fulfil benefit claims arising from your insurance relationship.
c) Insurance-specific statistics (legal basis: art. 6 para. 1 (b) and (f) and art. 9 para. 2 (j) GDPR)
The processing of your personal data is also required for the compilation of insurance-specific statistics, which are used for the development of new insurance tariffs or the fulfilment of requirements of the supervisory authority. Furthermore, we use the data of all your insurance contracts to get an overview of the customer relationship with you, which helps us to improve our consulting service in regard of contract adaptions or supplements, make decisions on a goodwill basis or ensure a better exchange of information with you.
d) Data processing related to statutory obligations (legal basis: art. 6 para. 1 (c) GDPR)
We process your personal data in order to comply with legal obligations to which we are subject, such as supervisory provisions, provisions by corporate and tax laws concerning the keeping of records, and consultation obligations.
In the field of life insurance, we process data concerning your tax residence in order to fulfil our reporting obligations towards financial authorities under the Common Reporting Standard (CRS) and under FATCA (Foreign Account Tax Compliance Act) Intergovernmental Agreement with the USA. Furthermore, we are obliged by the Prevention and Suppression of Money Laundering Activities Law to fulfil our duties of due diligence in respect of combating money laundering and terrorist financing. Personal data (like identity data, information related to your professional activity and the source of your assets) is processed also for these purposes.
e) Marketing activities (legal basis: art. 6 para. 1 (a) and (f) GDPR)
We process your data also for marketing purposes in order to promote our own products and the products of our cooperation partners. In order to ensure a better tuning of our advertising according to customer needs and to be able to supply customized quotes we analyse data which are relevant for this purpose. We have a legitimate interest in offering our clients and potential customers insurance products which are well adjusted to their needs. You have the right to object to the processing of your data for direct marketing purposes.
If we want to process your personal data for other than the above mentioned purposes, we will inform you of this in compliance with the law.
With whom do we share data?
If required for the achievement of any of the above purposes or if prescribed by law, we will transmit data which are necessary in a specific case to the relevant recipient who needs them. Such recipients may be:
a) Insurance Companies
As insurance broker or intermediary, we submit the data to the insurance company mentioned in the application.
In the insurance of particular risks, insurance companies cooperate closely with reinsurers, supporting in risk assessment and in the examination of claims. In these cases, it may be necessary to exchange data with reinsurers for the purposes of risk or claims assessment.
c) Independent insurance agents
When you use the service of a broker, consultant or an insurance agent, he/she collects and processes your personal data and passes them on to us for risk assessment, contract processing or claims assessment. Likewise, we share your personal data with your agent, if this is required for a competent insurance consultation.
d) Authorities, courts and other third parties
As a company in the field of financial services, we are subject to strict regulatory requirements and to supervision by the authorities. In that context, it may become necessary to disclose to authorities or courts upon their request the personal data of our policyholders.
During the examination of a claim, it may be required to use the service of third parties like doctors, hospitals, experts or claim adjusters, and to share your personal data with them.
e) Recipients of data concerning your health
According to the legal regulations, data concerning your health may only in specific cases and within the scope of the consent you gave, but even without your explicit permission (given in individual situations) transmitted to the following recipients:
The insurance company mentioned in the application, examining and treating physicians and hospitals or other medical care and health care institutions, reinsurers, cooperating in the processing of the relevant claim, appointed and authorised experts, authorised or legal representatives of the persons concerned, courts, public prosecutors, administrative authorities, arbitration boards or other third party institutions and bodies responsible for dispute resolutions, including all experts appointed by them
Where is data stored? Can data be transmitted to recipients in third countries?
All data processed in the course of insurance business intermediations and operations is centrally stored on our internal computers and in external data centers which fulfil the data protection standards.
A transmission of data to recipients outside the European Economic Area (EEA) takes only place when it has been officially confirmed by the EU Commission that the relevant third country is able to ensure an adequate level of data protection or if other safeguards for data protection, like binding corporate rules or EU Standard Contractual Clauses, exist.
For how long is data stored?
Basically, your data is stored for the duration of our insurance relationship. However, there are legal obligations concerning the preservation of records, requiring that we keep data concerning you or third parties (like co-insured persons), your claim cases and your insurance contract even beyond the term of the insurance relationship or for a certain time after the settlement of a claim.
Furthermore, we store your personal data for as long as any legal claims may be asserted in connection with our insurance relationship. The statutory periods of limitation are between 3 and 30 years.
Which rights do you have under the Data Protection Law?
In accordance with articles 15 – 22 GDPR you have the following rights against the data controller concerning the data stored in relation to your person:
• Right of access
• Right to rectification of inaccurate or incomplete data
• Right to erasure of data which have been unlawfully processed
• Right to restriction of processing (as of 25 May 2018)
• Right to object to the processing of personal data (if a legitimate interest exists)
• Right to data portability: right to receive the data you provided in a structured, commonly used and machine-readable format (as of 25 May 2018)
Where the processing of your data is based on your consent, you may withdraw this consent at any time with the effect that we will no longer process your data, unless there is another legal ground that requires a further processing. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
The data subject must provide information enabling his or her identification in order to ensure that a response will reach the right person.
You have the right to lodge a complaint with the local Data Protection Authority (Commissioner for Personal Data Protection) as the supervisory authority, if you believe that your personal data is being unlawfully processed.
The website of SAFE LIFE serves to provide information on the group and the companies affiliated with the group, as well as their services and products. Unless otherwise expressly stated, the information provided on the website does not represent an offer of contract in the legal sense. If you are interested in concluding an insurance contract, please contact your nearest customer consultants. Any insurance premiums quoted on the website include the legally-stipulated insurance tax.
Exclusion of liability
All information that is freely accessible on the website is meticulously compiled and continuously updated. However, SAFE LIFE assumes no liability for the correctness and up-to-dateness of the information. Moreover, SAFE LIFE assumes no liability for the freedom from viruses, or from other damaging components, of any information made available through this website, or of any other content that is accessible through this website and its links. SAFE LIFE is not liable for material or immaterial damage, as a result of the content of this website.
Provided not otherwise expressly stated, the copyright for the design and content of the website (images, illustrations, texts, animated graphics, etc.) is the property of SAFE LIFE. None of the said content may be used without the consent of SAFE LIFE.
Download and use of material from this website without permission of SAFE LIFE is not allowed and may be subject to litigation.
Any personal information that you may disclose via the Online Services of SAFE LIFE that are made available on the website shall be used exclusively for the stated, i.e. necessary, purposes and shall not be passed on to third parties.
In the event of any dispute will be competent Commercial Court in Graz.
Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses what are called “cookies” – text files which are saved on your computer and enable an analysis of your use of the website. The information on your use of this website (including your IP address) that is generated by the cookie is transmitted to a server of Google’s located in the USA, and saved there. Google will use this information to analyse your use of the website, to compile reports on website activities for the website operators, and to provide further services connected with your use of the website and use of the internet. Google will also, as the need arises, pass on this information to third parties, insofar as this is legally stipulated or insofar as third parties are processing this data on behalf of Google. Google will under no circumstances whatever create any connection between your IP address and any other data of Google’s. You can prevent the installation of the cookies through making an appropriate adjustment to your browser software; however, we must advise you that, in that case, you will be unable to make full use of all the functions of this website, should the need arise. Through using this website, you thereby automatically give your consent to the processing by Google of the data about you that has been compiled in the manner described above and for the above-stated purpose.
Status: December 2016