Information concerning the Collection, Processing and Retention of Personal Data - Insured

This document describes the processing of your personal information done by

Zurich Danmark, filial af Zurich Insurance Europe AG, Tyskland, org.no.: 31184606
Frederiksgade 17
1265 Copenhagen K
DENMARK

(further called "Zurich")

Zurich cares about protecting your personal integrity and privacy, and we want you to feel confident and secure with how we process data about you. We also want you to know why we are doing so, and what rights you have in connection with the processing.

An item of personal data is any information that can directly or indirectly identify you.

We process information about you in order to fulfill our part of the insurance policy that protects you.

We process

• your contact details, for example your name, address, e-mail address and telephone number,
• information about you personally, such as your civil registration number, your previous and expected behaviour, such as the expected driving distance for vehicle insurance or travel plans for travel insurance, and your relationship with the party who has purchased the insurance (in the event it was not you personally),
• information about your financial circumstances, such information about your banking details relevant to the payment of premiums,
• information about the risks to be covered, for instance, your property
• information about your representatives, such as their name, relationship vis-à-vis you, and professional contact details.

Zurich has legal obligations imposing a requirement on us to collect and process certain information about you. For example, we are obligated to carry out verifications in order to prevent money laundering or to avoid business relationships with companies or individuals that are subject to sanctions. In connection with this, it may occur that we receive information that may indicate criminal activities, such as a suspicion of crime, ongoing criminal investigations, court rulings or verdicts that have been pronounced.

Some of the information, you provide directly to us. This occurs for instance when you talk to us by telephone or when you send us letters, documents, e-mail messages, or submit information via a web form.

When you are asked to provide personal data, you can choose to decline. If you choose not to provide such information that is necessary for Zurich’s administration of your insurance coverage, there is a risk that Zurich will not be able to offer you insurance coverage.

We can also obtain information about you from someone else. When we have received information about you from someone else, we’ll let you know what information we have received, who provided it, and why we collected this information.

We share personal data about you if it is necessary in order to fulfil our commitments as an insurer.

We share information about you with other companies within the Group in which Zurich belongs, our partners, vendors/suppliers and agents who assist or enable us to fulfil the commitments we have made in our business activities.

We will also, when necessary, disclose information about you to an insurance or reinsurance company that acts as an intermediary in the provision of protection related to the contract for insurance that relates to you.

We will share information about you when it is necessary in order to:

• comply with applicable legislation or an order from a public authority,
• protect the rights of Zurich and/or our customers. This may occur for instance in legal proceedings, including but not limited to proceedings before courts, arbitration boards, other reviewing authority or investigative body, the Police and other law enforcement agencies
• manage and maintain the security of our systems.

If we transfer personal data about you to a party outside of the European Union, we will ensure that the information is kept safe and secure, and the transfer occurs according to applicable legislation. This occurs via that we enter into a written agreement with the recipient, so as to ensure that it is taking adequate security measures.

You can learn more about the security measures in place concerning data transfers outside of the EU by requesting such information via sending an e-mail to databeskyttelse.dk@zurich.com.

How long we retain your information depends upon what the data needs to be used for. For example, we retain data about the insurance policy/contract of insurance contract as long as there is a possibility that a claim may be filed requesting compensation based on the insurance commitments. The duration of the retention period is also affected by legal requirements in legislation, such as those relating to insurance activities and tax.

• inquire to find out how personal data concerning you is processed by Zurich
• obtain an extract showing what personal data is being processed about you (registry extract)
• have inaccurate or erroneous information corrected or deleted in relevant situations
• request that our processing of information about you be restricted
• object to our processing or retaining information about you
• request that certain data you yourself have provided to us be sent to you or transferred to another party (data portability).

For further information about these rights or to assert any of them, please let us know by sending an e-mail to databeskyttelse.dk@zurich.com.

If in your opinion we have committed some error in the processing of personal data about you, then you may file a complaint with the

1. Data Protection Officer at Zurich
2. The Supervisory Authority

Zurich Danmark, filial af Zurich Insurance Europe AG, Tyskland
databeskyttelse.dk@zurich.com

databeskyttelsesradgiver.dk@zurich.com

Datatilsynet
Borgergade 28, 5.
DK-1300 Copenhagen K
Telephone: 33 19 32 00
E-mail: dt@datatilsynet.dk