You are here: Home >About Us
  • Datenschutz-Hinweise der SAARLAND Versicherungen

Privacy Policy of Saarland Versicherungen

Thank you for visiting our website and your interest in our company. Protecting your personal data is important to us. In the following, we will inform you about how your personal data are handled when you use our website in accordance with Articles 12, 13 and 21 of the General Data Protection Regulation (GDPR).

Personal data constitute specific information on personal or factual relationships or identified or identifiable natural persons. This includes information such as your real name, address, telephone number and date of birth.

Controller

Controller within the meaning of the General Data Protection Regulation:

Company name:


Saarland Versicherungen AG

Address:

Mainzer Str. 32-34, 66111 Saarbrücken
E-Mail: datenschutz@saarland-versicherungen.de

Data protection officer

You can contact our data protection officer by post using the aforementioned  address and including - Data Protection Officer - or by email at datenschutz@saarland-versicherungen.de.

1. Purposes and legal bases for data processing

1.1 Use of the website for informational purposes

You can visit our website without providing information about you. If you are only using our website for informational purposes (i.e. you do not sign in, register or enter into a contract) or otherwise do not transmit any information about you, we will not process any personal data with the exception of data that your browser transmits in order to allow you to visit the website as well as information that is transmitted to us as part of cookies used to statistically analyse the way in which our website is used.

1.1.1 Technical provision of the website and use of cookies

For the technical provision of our website, we need to process specific, automatically transmitted information from you to allow your browser to display our website and to allow you to use it. This information is collected automatically each time our website is accessed and stored in our server log files. This information relates to the computer system of the accessing computer. The following information will be collected here:
• IP address
• Browser type/version (e.g. Firefox 59.0.2 (64 Bit))
• Browser language (e.g. German)
• Operating system used (e.g. Windows 10)
• The internal resolution of the browser window
• Screen resolution
• JavaScript activation
• Java on/off
• Cookies on/off
• Colour depth
• Time of access

We also use cookies to make our website available for you to use. Cookies are text files that are stored in your web browser or by your web browser when you access a website on your computer system. A cookie contains a characteristic string that allows the browser to be uniquely identified when you revisit a website. We only use these cookies to provide our website to you with its technical functions. Some functions of our website can be offered without using cookies. In this case, the following information will be stored in the cookies and transmitted to us:

Usercentrics Consent Manager

Our website uses the consent manager of Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, email: contact@usercentrics.com. The consent manager of Usercentrics is a solution that we use to obtain your consent to certain data processing requiring consent (e.g. tracking and the like). It will inform you about the individual cookies and tools we use and allow you to choose which of them you would like to allow or refuse on an individual basis or by category. You will also be informed about when you have allowed or refused cookies/tools. This allows you to make an informed decision on how your data is transferred while allowing us to use cookies and tools in a transparent and documented manner that complies with data protection.

The consent manager itself does not store any of your personal data. Only anonymised data stored in a cookie are generated. These data will only be processed in the European Union. These data constitute the following information:


• Date and time of your visit
• Information on the device used
• Information on the browser, e.g. browser type/version
• Your anonymised IP address
• Whether you allow or reject cookies

You can find further information and the privacy policy of Usercentrics at:  https://usercentrics.com/privacy-policy/

We will not use your information that we have collected using the above cookies to create a user profile or evaluate your browsing behaviour. We process your personal data to facilitate the technical provision of our website based on the following legal bases:

• for the performance of a contract or in order to take steps prior to entering into a contract in accordance with point b) of Article 6 (1) GDPR insofar as you visit our website in order to learn about our products and our events
• for compliance with a legal obligation to which the controller is subject in accordance with Point c) of Article 6 (1) GDPR. The legal obligation lies in collecting and documenting your consent to data processing.
• for the purposes of our legitimate interests in accordance with point f) of Article 6 (1) GDPR. 
Our legitimate interests in this respect are being able to provide you with a suitable, technically functioning and user-friendly website as well as being able to take measures to protect our website against cyber risks and being able to prevent our website from posing cyber risks to third parties.

1.1.2 Statistical analysis of the use of the website and increasing reach

To statistically analyse the way in which our website is used, we use cookies which allow your browsing behaviour to be analysed. This allows us to improve the quality of our website and your content. We learn how the website is used, which allows us to constantly optimise our offering.

The information obtained from statistically analysing our website is not kept together with your other data collected in the context of the website.

1.1.2.1 Adobe Tag Manager (Adobe Experience Platform Data Collection)

We use Adobe Tag Manager (Adobe Experience Platform Data Collection) from Adobe Systems Software Ireland Limited (”Adobe”) in order to implement analysis and online marketing software on our website in a controlled manner as well as to allow better control over it and to increase our website’s technical performance. The Tag Management System allows us to determine which software components (tags) will be used on the website in accordance with this privacy policy based on defined rules. This allows us to ensure that only the specified tags are used and that these only collect data to the extent described here. 

The Tag Management System transmits data to the specified tags in the specified form. Placing cookies is blocked in the current configuration. However, cookies may be set by the connected services. You can find further information on this topic under the individual services. The individual data collected when using Adobe Tag Manager (Adobe Experience Platform Data Collection) is client information necessary for communication between two services online. This involves the anonymised IP address with the final eight digits removed being transmitted to Adobe when loading tags and before geolocation. The data are, however, not stored in the Tag Management System.

This does not, however, fully rule out ultimate reference to a person in individual cases. In this case, a contract for contractual data processing has been concluded with the service provider. This strictly binds Adobe to our instructions in the context of tracking. The information is processed in the EU (Ireland) and countries with an adequacy decision (currently the UK).

Generally, you are not obliged to share your personal data with us. You can, for example, prevent cookies from being stored and your information from being processed/transferred by configuring your browser software accordingly or by refusing consent using the cookie banner or revoking your consent via the cookie settings.

We would like to point out, however, that you may not be able to use all functions/services of this website should you do this. For example, if you do not consent to Adobe Tag Manager (Adobe Experience Platform Data Collection), Adobe Analytics will also not be loaded.

1.1.2.2 Adobe Analytics

This website uses Adobe Analytics, a web analysis service of Adobe Systems Software Ireland Limited (“Adobe”). Adobe Acrobatics uses cookies (e.g. cookies to store a randomly generated session and user ID) which allow your use of the website to be analysed (tracking). If the information on the use of the website generated by the cookie is transmitted to an Adobe server, the settings ensure that the IP address will be anonymised prior to geolocation and replaced with a generic IP address before it is stored. This does not, however, fully rule out ultimate reference to a person in individual cases. In this case, a contract for contractual data processing has been concluded with the service provider. This strictly binds Adobe to our instructions in the context of tracking. The information is processed in the EU (Ireland) and countries with an adequacy decision (currently the UK). Adobe will use this information on our behalf in order to assess the way in which users use the website in order to compile reports on website activities. The IP address transmitted by your browser as part of Adobe Analytics will not merged with Adobe’s other data.

Adobe Systems Software Ireland Limited will also use the information for its own purposes such as further development, improving or modifying products and services and their publication as well as displaying and distributing anonymous information (i.e. information that cannot be used to identify either customers or visitors to its website which can be aggregated with the anonymous data of other customers) which can be derived from the information. This information will be transmitted to Adobe Analytics as soon as you provide your consent.
We process your personal data based on your consent, point a) of Article 6 (1) GDPR in conjunction with Section 25 (1) TTDSG (Telecommunications-Telemedia Data Protection Act).

Generally, you are not obliged to share your personal data with us. You can, for example, prevent cookies from being stored and your information from being processed/transferred by configuring your browser software accordingly or by refusing consent using the cookie banner or revoking your consent via the cookie settings.

The data collected in Adobe Analytics will be automatically erased 25 months after your last visit to the website.

Further information on processing your information can be found in the Adobe Privacy Centre using the following link:
Adobe Privacy Centre:  https://www.adobe.com/de/privacy.html

1.1.3 Active use of the website

In addition to using our website for purely informational purposes, you can also actively use our website to enter into an insurance contract with us, sign up for an event, register for our newsletter or get in touch with us. In addition to the processing of your personal data described above when using the website for purely informational purposes, in this case, we will also process additional personal data from you which we need in order to implement your contract and/or process and answer your query.

1.1.3.1 User queries

In order to process and answer your queries submitted to us, for example via the contact form or our email address, we process the personal data you share with us in this regard. This will in any case include your name and email address, to allow you to receive a response, as well as other information which you send to us as part of your message.

We process your personal data in order to respond to user queries on the following legal bases:

• processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract according to point b) of Article 6 (1) GDPR;

1.1.3.2 Quotes

If you would like to apply for one of our insurance services using our website, we will process your personal data in order to receive the application on the website, process it and provide you with the insurance services. In this case, we will process the information visible from the relevant input forms (voluntary information is labelled accordingly):

• E-mail address
• Title
• Position
• First name and surname
• Address
• Postcode
• City
• Country
• Telephone
• Date of birth (if required in order to submit a quote)

We process your personal data for the aforementioned purposes based on the following legal bases:

• for the performance of a contract or in order to take steps prior to entering into a contract in accordance with point b) of Article 6 (1) GDPR insofar as you use our portal to learn about our quote and to enter into insurance contracts;
• for insurance quotes subject to the obligation to contract in accordance with point c) of Article 6 (1) GDPR

1.1.3.3 Credit assessment

If we provide advance payment, we reserve the right, in order to safeguard our legitimate interests, to obtain a credit assessment if necessary based on mathematical statistical procedures from the following company/companies:
Infoscore Consumer Data GmbH, Rheinstraße 99 76532 Baden Baden
To do this, we will transmit the personal data specified by you which are necessary to conduct a credit assessment and use the information received about the statistical likelihood of non-payment. Creditworthiness information can include probability values (score values) which are calculated based on recognised mathematical statistical procedures. This will be used to decide on the customer’s future risk of non-payment based on a number of characteristics such as, for example, income, address data, profession, marital status and previous payment behaviour. The result will be printed out in the form of a payment value (score). The information obtained in this way forms the basis of our decision on the creation, implementation or termination of the contractual relationship. The option to select one of the offered payment methods is, however, not dependent on this information.

We process your personal data for the credit assessment based on the following legal bases:

• for the performance of a contract or in order to take steps prior to entering into a contract in accordance with point b) of Article 6 (1) GDPR;
• for the purposes of our legitimate interests in accordance with point f) of Article 6 (1) GDPR insofar as we are asserting legal claims or defending ourselves in the event of legal disputes or we are preventing or clarifying criminal offences.

1.1.3.4 Payment

We use a payment service provider in order to process payments for your insurance contract. We process your personal data to implement the contract on our website based on the following legal bases:
• for the performance of a contract or in order to take steps prior to entering into a contract in accordance with point b) of Article 6 (1) GDPR.

1.1.3.5 Compliance with statutory provisions

We also process your personal data in order to fulfil other statutory provisions to which we are subject in connection with implementing the contract. These include in particular trade, commercial or tax retention periods.

We process your personal data in this regard based on the following legal bases:

• for compliance with a legal obligation to which we are subject in accordance with point c) of Article 6 (1) GDPR in connection with trade, commercial or tax law insofar as we are obliged to collect and store your data.

1.1.3.6 Legal implementation

We also process your personal data in order to assert our rights and to be able to implement our legal claims. Likewise, we process your personal data to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary in order to defend against or prosecute criminal offences.
We process your personal data for these purposes based on the following legal bases:

• for the purposes of our legitimate interests in accordance with point f) of Article 6 (1) GDPR insofar as we are asserting legal claims or defending ourselves in the event of legal disputes or we are preventing or clarifying criminal offences.

1.1.3.7 Data use for email advertising and your right to object

When we receive your email address in connection with entering into a contract and providing our products and you have not objected, we reserve the right to regularly send you offers on similar products from our range by email. You can object to this use of your email address for the future at any time by messaging the contact described below or by using a link provided for this purpose in the promotional email without incurring costs other than the transmission costs according to the basic tariffs.

1.1.3.8 Competitions

In order to implement and process competitions, we will process participants’ personal data. Depending on the nature and scope of the competition, you must specify and/or provide, among other data, a valid email address, contact data (surname, first name, address, telephone number etc.), date of birth, sex and image data (e.g. photos).

We will collect these data in order to determine whether you are entitled to participate and to decide on and contact the winner as well as to ship prizes.

You data will generally not be transmitted to third parties unless they must be transferred in order to carry out the competition in question or ship prizes and we have a data protection transmission authorisation for this. In the event that we involve partners or service providers when carrying out the competition or implement this initiative together with them, we will enter into the agreements necessary for this in the context of contractual data processing in accordance with Article 28 GDPR or joint responsibility in accordance with Article 26 GDPR.

Should we carry out competitions with partners or cooperation partners which are providing the prizes or independently arranging the shipping, personal data will be transmitted to the relevant cooperation partners for this purpose. If we commission service providers to carry out competitions by way of contractual processing, we will select them with care. The privacy policies of the service providers give further detailed information on specific forms of processing at the cooperation partners regarding the relevant survey, competition or advertising campaign.

Personal data will be processed as part of the competition for the performance of a contract in accordance with point b) of Article 6 (1) sentence 1 GDPR.

Insofar as relevant, we will process your personal data if this is necessary for compliance with a legal responsibility, cf. point c) of Article 6 (1) sentence 1 GDPR or if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller, cf. point e) of Article 6 (1) sentence 1 GDPR. We will also process the personal data you have shared with us insofar as relevant in accordance with point f) of Article 6 (1) sentence 1 GDPR.

Your data will generally be erased once the purpose no longer applies - once the competition ends. Beyond this, we will store your personal data in accordance with the statutory retention periods.

2. Categories of recipients

Furthermore, only our employees will become aware of your personal data. Insofar as this is permitted or provided for by law, we also share your personal data with other recipients who provide services for us in connection with our website. We restrict the transfer of your personal data in this regard to what is necessary, specifically in order to be able to implement your insurance contract. Our service providers may sometimes obtain your personal data as contractual processors and, in this case, are then strictly bound by our instructions when handling your personal data. Recipients may sometimes act independently with your personal data that we transmit to them.

The following is a list of categories of recipients of your personal data:

• if applicable, payment service providers and banks, when processing payments,
• external service providers for shipping by post
• service providers for sending newsletters in a personalised manner
• IT service providers for administrating and hosting our website,
• debt collection companies and legal advisors for asserting our claims
• if applicable, further recipient categories.

3. Transfer to a third country

Should personal data be transmitted to service providers or group companies outside the European Economic Area (EEA), it will only be transmitted insofar as the EU Commission has confirmed an appropriate level of data protection in the third country or other data protection guarantees (e.g. the agreement of EU standard contractual clauses) are in place. You can also request information via the contact information listed at the start.

4. Duration of storage

4.1 Use of the website for informational purposes

When using our website for purely informational purposes, we will store your personal data on our servers exclusively for the duration of your visit to our website. After you leave our website, your personal data will be erased immediately.
Cookies which we have installed will generally also be erased after you leave our website. This does not apply to cookies from Google. These will remain stored depending on the cookie category for the duration of 7 days to 38 months.  You can also erase installed cookies yourself at any time.

Usercentrics’ consent manager will retain proof that previously granted consent has been revoked for a period of three years.

4.2 Active use of the website

When actively using our website, we also store your personal data for the period required to answer your query and/or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the processing of a contract.

We also store your personal data until any legal claims arising from the relationship with you expire in order to use them as proof if necessary. The limitation period is generally between 12 and 36 months, but can extend up to a period of 30 years.

Once expiry occurs, we will erase your personal data unless they are subject to a statutory retention period, for example arising from the Commercial Code, Insurance Contracts Act, Banking Act and Money Laundering Act or from the Fiscal Code. These retention obligations can range from two to ten years.

5. Your rights as a data subject

In accordance with the statutory requirements, you are entitled to the following rights as a data subject which you can assert against us:

Information: You are entitled at any time, in the context of Article 15 GDPR, to request confirmation from us on whether we are processing your personal data; if this is the case, you are also entitled in accordance with Article 15 GDPR to receive information on this personal data as well as specific additional pieces of information (e.g. the purposes for the processing, categories of personal data, categories of recipients, envisaged period of storage, the origin of the data, the use of automated decision-making and, in the event of transfer to a third country, the appropriate guarantees) and a copy of your data.

Rectification: In accordance with Article 16 GDPR, you are entitled to request that we rectify personal data stored on you if they are inaccurate or incorrect.

Erasure: In accordance with the requirements of Article 17 GDPR, you are entitled to request that we erase your personal data immediately. You are not entitled to erasure if, for example, the processing of personal data is necessary (i) for exercising the right of freedom of expression and information, (ii) for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the establishment, exercise or defence of legal claims.

Restriction of processing: In accordance with the requirements of Article 18 GDPR, you are entitled to request that we restrict the processing of your personal data.

Data portability: In accordance with the requirements of Article 20 GDPR, you are entitled to request that you receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or transmit them to a third party. Revocation: You are entitled to withdraw consent which you have granted to the processing of personal data with effect for the future (Article 7 (3) GDPR)

Objection: In accordance with the requirements of Article 21 GDPR, you are entitled to object to the processing of your personal data, which requires us to cease processing your personal data. The right to object only exists within the limits provided for in Article 21 GDPR. Our interests can also prevent cessation of processing, which results in us being entitled to process your personal data despite your objection.

Complaints to data protection supervisory authorities: In accordance with the requirements of Article 77 GDPR, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR. You have the right to lodge a complaint without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

Unabhängiges Datenschutzzentrum Saarland
Fritz-Dobisch-Straße 12
66111 Saarbrücken, Germany
E-mail:  poststelle@datenschutz.saarland.de 

We do, however, recommend that you always contact our data protection officer with your issue first.

Your applications to exercise your rights should, where possible, be made in writing to the following address:
Scope of your obligations to provide data

Generally, you are not obliged to share your personal data with us. However, if you do not do this, we will not be able to provide our website to you, be able to answer your queries or enter into a contract with you. Personal data that we do not strictly require for the aforementioned processing purposes are labelled as voluntary information by an “if necessary” mark or another mark.

6. Automated decision-making/profiling

If we use purely automated processing procedures to make a decision, including profiling, we will inform you of this when these are used.

6.1 Information on your right to object under Article 21 GDPR

You are entitled to object to the processing of your data which is carried out based on point f) of Article 6 (1) GDPR (data processing based on a balancing of interests) or point e) of Article 6 (1) GDPR (data processing in the public interest) on grounds relating to your particular situation. This also applies to any profiling carried out based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

We also process your personal data in individual cases to carry out direct marketing. If you would not like to receive marketing, you are entitled to object to this at any time; this also applies to profiling to the extent that it is related to such direct marketing. We will observe this objection for the future.
Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

7. Amendments

We reserve the right to amend this privacy policy at any time. Any amendments will be announced by publishing the amended privacy policy on our website. Unless stated otherwise, these amendments will be effective immediately. Please therefore review this privacy policy regularly in order to view the most recent version.