Privacy statement

• Contact details, like your name, address, telephone number and e-mail address
• Date of birth and gender
• Identification data, via a passport or driving licence, for example
• Your bank and payment details
• If relevant, data about your position, such as job title and employment history
• All data relevant for your insurance application, such as previous insurance and claims. This includes all data that are specific to the type of policy you want to take out
• Data that we have collected from public sources. Newspapers or social media, for example
• All other data originating from you, your insurance adviser or someone else who is applying for the insurance on your behalf

We may need special personal data from you for some types of insurance. For example, medical or criminal data. These data may be important when applying to take out insurance, for the handling of a payment request, for the collection of a claim or for the prevention of fraud. We process special personal data with extra care: just a limited group of employees have access to these data.

We ask for personal data and other data in response to applications for insurance or a financial service or when implementing or making changes to either of the above. We use these data to enter into and perform a contract of insurance or provide a financial service (including payment transactions), to manage the customers ensuing from the above, for activities designed to expand the customer base, for marketing activities, for statistical analyses, to be able to meet statutory obligations and to safeguard the safety and integrity of the financial sector, our organisation, employees and customers.

Intermont Assuradeuren B.V. may exchange your data with third parties too. However, we will only do this if:

• necessary to handle an application and/or to enter into and perform contracts
• necessary for a compelling public interest or to protect your rights and our own
• we are required to do so (by law)
• necessary to represent a legitimate interest of ours
• a transfer is necessary to safeguard your vital interests
• you have given us your consent to do so
• necessary to handle an application and/or to enter into and perform contracts
• necessary for a compelling public interest or to protect your rights and our own
• we are required to do so (by law)
• necessary to represent a legitimate interest of ours
• transfer is necessary to safeguard your vital interests
• you have given us your consent to do so

To ensure we pursue a responsible underwriting, risk and fraud policy, we may consult your data and record them in the Central Information System of the insurance companies that operate in the Netherlands (Foundation Central Information System), Bordewijklaan 2, 2591 XR in The Hague. Foundation Central Information System processes data to ensure that insurers and authorised underwriting agents are able to manage risks and combat fraud. See www.stichtingcis.nl for more information and also for the privacy regulations of foundation Central Information System. We will not sell, resell, trade or rent your data to third parties for commercial or charitable purposes. However, we may bring in other companies to assist us with service provision. We may also provide personal data to these companies, depending on why activities have been outsourced. To safeguard your privacy, we always make written agreements with these companies about the use and handling of your personal data.

We treat your personal data as confidential and only share them with the following parties when necessary for the purposes above:

• third parties that are involved in the administration of your insurance application, including loss surveyors and valuers
• other insurers (for example, when you previously had a policy with or submitted a claim to another insurer)
• insurance brokers and other intermediaries
• the police and other institutions for the prevention and investigation of punishable offences
• external suppliers, agents and contractors appointed by Intermont Assuradeuren B.V. to help us perform our day-to-day business activities, including IT suppliers, actuaries, accountants and lawyers
• selected third parties in connection with the sale, transfer or alienation of our company
• an agent or representative who is acting on your behalf
• any other person, if necessary to perform a contract of insurance with you, to protect ourselves against risks or to ensure compliance with legislation and regulations and good governance

Personal data will not be shared with entities outside the EEA.

We will retain your personal data as long as reasonably necessary for the purposes stated in Paragraph 3 and to meet the obligations imposed on us by legislation and regulations.

We have a detailed retention policy, which determines how long we retain different types of data. The exact retention period will depend on your relationship with us and the type of personal data we have received from you.

If you would like more information about how long we retain your personal data, please contact us as set out in Paragraph 9.

Under data protection legislation, you have a number of rights in respect of your personal data. We describe these rights below.

The rights you have in connection with the processing of personal data are as follows:

• the right to access to your personal data
• the right to rectification
• the right to the restriction of processing
• the right to withdraw your consent
• the right to exchange
• the right to object to direct marketing
• the right to data portability
• rights in respect of automated decision-making
• the right to submit a complaint to the Data Protection Supervisor

Bear in mind that, although we take your rights seriously, there may be circumstances where we are not able to honour a request in respect of them. For example, if this would mean that we were not able to meet requirements imposed on us by legislation and regulations. In these situations, we will let you know that we are not able to honour your request.

If you would like more information about your rights under the GDPR, please contact us using the information provided in Paragraph 9.

Intermont Assuradeuren B.V. puts all technical and organisational measures necessary in place to protect your personal data. For example, security to protect our systems, networks and buildings. Unfortunately, we are not able to guarantee that your personal data will be protected against all risks of abuse and unauthorised access.

You can ask us for a statement of the (types of) personal data we have about you. If this statement leads you to believe that your personal data are incorrect or not being processed properly, you can request that they be corrected or make an objection. Please submit your written access, correction or objection request to our data protection officer:

Attn. Data protection officer
Intermont Assuradeuren B.V.
Arcadialaan 36c/d 1800 AE Alkmaar
compliance@intermont.nl

Intermont Assuradeuren B.V. reserves the right to make changes to its privacy statement. Naturally, Intermont Assuradeuren B.V. will update its privacy statement in line with legislative changes and case law where necessary.