Information requirements in accordance with Art. 13 and 14 EU-GDPR 

We hereby advise you, as insurance customers or parties, about the processing of your personal data by Advigon and your rights under the Data Protection Act.

Advigon International Versicherung AG
Pflugstrasse 20
9490 Vaduz
Tel. +41 (0)43 55 021-85
E-Mal: service@advigon.ch

The Data Protection Officer of the responsible entity is: Herr Jens Frey: Herr Jens Frey

For correspondence, please use the address above or send an e-mail to: datenschutz@advigon.ch

We process your personal data in compliance with the EU General Data Protection Regulation (DSGVO - EU-Datenschutz-Grundverordnung), the Federal Data Protection Act (BDSG - Bundesdatenschutzgesetzes), the provisions of the Insurance Contract Act (VVG - Versicherungsvertragsgesetzes) relevant to data protection and all other relevant laws.

If you apply for insurance cover, we need the information you have provided to conclude the contract and to assess the risk to be assumed by us. If the insurance contract is concluded, we process this data to conclude the contractual relationship, for example, for the purpose of concluding contracts or invoicing. We need information about a claim, for example, so we can check whether an insured event occurred and the amount of the claim.

Concluding or executing the insurance contract is not possible without processing your personal data.

The legal basis for processing personal data for pre-contractual and contractual purposes is Art. 6 para. 1 b) GDPR/DSGVO. Insofar as special categories of personal data are required for this (e.g. your health data when concluding a health insurance contract), we will obtain your consent in accordance with Art. 9 para. 2 a) in conjunction with Art. 7 GDPR/DSGVO.

In addition, we need your personal information to compile insurance-specific statistics, for example, for the development of new pricing or for fulfilling regulatory requirements. If we create statistics with these data categories, this is done based on Art. 9 para. 2 j) GDPR/DSGVO in conjunction with § 27 BDSG.
We also process your data to safeguard our legitimate interests or those of third parties (Art. 6 para. 1 f) GDPR/DSGVO). This may be necessary in particular:

  • to ensure IT security and IT operations
  • to promote our own insurance products
  • to prevent and investigate criminal offences, in particular we use data analytics to identify patterns that may indicate insurance fraud

Furthermore, we process your personal data to fulfil legal obligations such as regulatory requirements, commercial and tax law retention obligations or our duty to advise. In this case, the legal basis for processing data is the respective legal regulations in conjunction with Art. 6 para. 1 c) GDPR/DSGVO.

If we wish to process your personal data for a purpose not mentioned above, we will inform you in advance within the scope of the legal provisions.

Reinsurers:
We also insure risks assumed by us with specialist insurance companies (reinsurers). For this it may be necessary to submit your contract data and any claim data to a reinsurer, so that they can form their own opinion about the risk or the insured event. Furthermore, we may work with the reinsurer on the basis of its special expertise in risk or performance reviews, or evaluating procedures. We transmit your data to the reinsurer only insofar as this is necessary for the fulfillment of our insurance contract with you, or to the extent required to safeguard our legitimate interests.

Mediator:
If you are looked after by an intermediary with regard to your insurance contracts, your intermediary will process the application, contract and claim data required to conclude and execute the contract. Our company also transmits this data to the intermediary who looks after you, as far as they need the information to support and advise you on insurance and financial services matters.

External service providers:

Advigon Versicherung AG works when necessary with service providers (companies/individuals) to meet its contractual and legal obligations using health data and other data protected under § 203 StGB (German Criminal Code).  A list of the contractors and service providers we use, which are not just temporary business relationships, can be found here:

contractor-list.pdf

When necessary, Advigon also works together with the following bodies, who collect, process and use health data and other data protected under § 203 StGB:

Jobs Activities
Doctors, psychologists, psychiatrists, reinsurers Appraisers and experts
Rehabilitation services, care and nursing services Assistance services
Lawyers General service in justified individual cases
External IT suppliers Application development and provision of technical resources
Mailing houses Mailshots

Reference agencies (e.g. Creditreform, Infoscore, Schufa)

Obtainin information during the application process and, if necessary, for processing services
Detectives Case-based fraud in justified individual cases
Debt collection company Judicial enforcement procedures, debt collection

 

Further recipients:
Furthermore, we may transfer your personal information to other recipients, such as government agencies, to comply with legal reporting obligations (e.g. social security funds, tax authorities or law enforcement agencies). 

We delete your personal information as soon as it is no longer necessary for the purposes above. Personal data could be kept as long as claims can be lodged against our company (legal limitation period of three or up to thirty years). In addition, we store your personal data if we are legally obliged to do so. Corresponding duties of proof and retention arise from, among other things, personal and company law, tax law and the Due Diligence Act. The related retention periods are up to ten years.

You can obtain information about the data stored about you from the address above. Furthermore, under certain circumstances, you may request the correction or deletion of your data. You may continue to have the right to restrict the processing of your data and have the right to obtain the data you provided in a structured, common and machine-readable format.

You have the right to object to the processing of your personal data for direct marketing purposes. If we process your data to safeguard legitimate interests, you may object to this processing if your particular situation gives rise to reasons that counter the processing of data.

You have the option to complain to the Data Protection Officer mentioned above or to a Data Protection Supervisory Authority. The Data Protection Supervisory Authority responsible for us is:

Datenschutzstelle (DSS)
Städtle 38
Postfach 684
9490 Vaduz
Liechtenstein

The insurance industry uses informa HIS GmbH’s reference and information system (HIS - Hinweis- und Informationssystem) to support risk assessments during an application, to clarify the facts in the performance review and to combat insurance fraud. This requires an exchange of certain personal data with HIS. For more information, please refer to the following website:

informationsblatt_eu-dsgvo_anfrage.pdf

In order to check and, where needed, supplement your information when the insurance contract is concluded - or your details when an insured event occurs – we may carry out an exchange of personal data with the former insurer specified by you in your application insofar as this is required.

If we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or providing other appropriate data protection guarantees (e.g. binding internal data protection regulations or EU standard clauses).

For some of our products, we make fully-automated decisions based on the risk information which we ask you during your application: for example, on the conclusion or termination of the contract, possible exclusions of risk, or on the amount of the insurance premium you pay. On some of our products, we also make fully-automated decisions about our obligation to pay based on your information about the event insured, the data stored about your contract and any information received from third parties. The fully-automated decisions are based on binding payment regulations for medical treatment. You have the right for a person to intervene on the part of the responsible entity, to explain your own position and to contest the decision.