Privacy policy

In the following you will find information about the use of your personal data when visiting our website.

Controller of your personal data in connection with the use of our website is HDI Global SE, HDI-Platz 1, 30659 Hannover, Germany / HR Hannover B 60320.

Should you have questions or suggestions concerning data protection beyond this information, or should you desire to assert your rights for information and correction, our contacts for data protection will gladly assist you. Furthermore, you are, under certain conditions, entitled to restrict processing, enforce deletion of your data, or demand disclosure and furnishing of all of your provided personal data in a structured, established and machine readable format. Our data protection team can be contacted at:

HDI Global SE, Branch for Belgium
Data Protection Officer
Avenue de Tervueren 273 / 1
B-1150 Brussels
E-Mail: dataprotection.be@hdi.global

The supervisory authority responsible for us is the supervisory authority Niedersachsen (Landesbeauftragte für den Datenschutz Niedersachsen). Please contact this authority should you have questions or complaints.

You may also contact the Belgian supervisory authority (Gegevensbeschermingautoriteit/Autorité de Protection des Données).

1. Log files

Upon each visit of our website, your browser automatically sends information to the servers of our website, which is temporarily stored in a so-called log file. The following data are recorded without any action on your side and stored until automatic deletion:

  • IP address of the computer issuing the request,
  • date and time of access,
  • name and URL of the file(s) accessed/retrieved,
  • website which directed you to our Internet presence (referrer page),
  • operating system and browser employed,
  • name of your internet access provider.

Collecting and processing of these data takes place to make the use of our website possible (for establishing the connection), to ensure continuous system security and stability, to allow for technical administration of our network infrastructure and optimization of our website, as well as for internal statistics use. The IP address is only used for statistical purposes, as well as in case of an attack on our network infrastructure. This does not allow any inference to your person. It takes place under consideration and within the scope of the weighing of interests according to article 6 para 1 (f) of the General Data Protection Regulation (GDPR). To the extent that further storage of log files is required for purposes of proof, these are excluded from deletion until the respective incident has been finally clarified.

The log files data collected will automatically be deleted after four weeks at the latest.

We have taken due measures to ensure that no minor may give consent to the processing of his or her data. Should we obtain knowledge that personal data of a minor have been processed, we will delete such personal data immediately.


2. Cookies and web analysis

We are continuously working on improving and optimizing our online services and offering you a pleasant visit of our website. Logging your access to our website into log files, as well as employing cookies and web analysis, are important for this. The legal basis for data processing using cookies - also for purposes of web analysis - is our legitimate interest in the analysis, the optimization and the commercially viable operation of our website pursuant to article 6 para 1 (f) GDPR.

2.1 Cookie information and cookie management

Cookies are automatically stored onto your computer when you visit our website. Cookies are text files which contain a pseudonymized alias and thus do not permit any form of attribution to a specific person. Only we are able to read these cookies.

The cookies that we employ may be categorized as follows: generally required cookies, function- related cookies, and service-related cookies.
Generally required cookies are used to make our website user-friendly. Certain actions you perform are stored for the duration of the respective visit to our website with the purpose of optimizing your user experience. These cookies are deleted when you close/exit the browser.

Function-related cookies enable us to adjust our website to the personal preferences of our users. As an example, we store the settings the user makes (e.g., country or language).
Service-related cookies help us to measure usage of our website. With these cookies, we can determine which areas of our website are visited most frequently. This information helps us to identify potentials to further improve our website.

As a user of our website, you are asked to select your own privacy settings to determine if you accept or reject cookies, or wish to be notified about receiving a new cookie. In addition, you can delete previously stored cookies. If you delete your cookies, this may result in opt-out cookies being deleted. The affected opt-outs must then be reactivated to become effective again. Deactivating cookies may lead to parts of our website not being fully functional or not being displayed correctly.

Additionally, you can adjust your cookie settings in our Privacy Center.


2.2. Web analysis

We use cookies for our website that enable the analysis of your surfing behavior (service-related cookies). For this, we use the web analysis service "Piwik Pro". This service only uses pseudonymized data with shortened IP addresses such as date and time of page view, duration of the visit, frequency of page view or pages referring you to our website. You can activate and deactivate these cookies as outlined in section 2.1.

3. Communication with us

On our website, you may find various options to contact us. The communication between your browser and our servers is encrypted via SSL. You can see this in your browser by the "https://" in the address of our website.

3.1 Newsletter

If you subscribe to one of our newsletters, we store your e-mail address, surname, first name, salutation (if applicable), and country of residence, as well as any voluntarily supplied information. We use these exclusively to provide our newsletter service.

We collect statistics about when and how often the respective newsletter issues were read. These data are collected on a pseudonymized and statistical basis. This means that we do not record or store which individual recipient has opened an e-mail.

We generally process your personal data on the legal basis of your consent pursuant to article 6 para 1 (a) GDPR. If you are a supplier/partner/broker or its representative we process your personal data for direct marketing purposes based upon our legitimate interests (article 6 para 1 (f) GDPR). We believe it is important for us to inform you about the latest news and products. This information is meant to help in your relationships with HDI and with your own clientele management. You may cancel your subscription to our newsletters at any time via a link provided in each issue. We will then delete your data from our mailing list.

When you subscribe to our newsletter, we additionally store your IP address as well as the date and time of subscription and confirmation, in order to be able to provide proof that you have agreed to receiving the newsletters and to protect the e-mail address submitted, as well as to protect our services from abuse. This saving of data is carried out on the legal basis of the weighing of interests in accordance with article 6 para 1 (f) GDPR. 

3.2 Contact form

If you wish to send us a message, you may use our contact form. Data you have entered into the contact form such as surname, first name, e-mail address, phone number, insurance policy number (if applicable), and message submitted, are stored and used only for the purpose of our individual communication with you. This communication is performed by HDI Global SE, Branch for Belgium, in the chosen language. After completion of the communication process, your personal data will be, as a general rule, deleted, after ten years. Legal basis for this processing of personal data is - if consent of the user has been given - article 6 para 1 (a) GDPR.
 
3.3 Offer calculator / Online booking system

Data entered into one of our calculators or online booking systems are stored and used exclusively for the purposes of offer and policy preparation according to article 6 para 1 (b) and (f) GDPR. We are assisted with this by external service providers which are subject to existing data protection agreements in accordance with applicable legal requirements. Data protection information for specific services or products is made available - if necessary - when using the calculators or the online booking system.


3.4 Online services

Our website offers online services which require your registration, such as the "Insurance Certificate Online" for our transportation insurance. The data processing required for such registration is performed on the legal basis of article 6 para 1 (b) and (f) GDPR, and is described in more detail during the registration process.

4. Content and third-party technology

For embedding HDI videos, we use content and technology of the online video service Vimeo. This service is operated by Vimeo, LLC, with headquarters at 555 West 18th Street, New York, NY 10011, United States of America.

When retrieving pages from our website containing a Vimeo plug-in, a connection to the servers of Vimeo is established, and the plug-in displayed. This transmits information on which of our pages you have visited to the Vimeo server by transferring your IP address. If you are logged on to Vimeo as a member, Vimeo assigns this information to your personal Vimeo user account. When using the plug-in, for example by clicking the start button of a video, this information is also attributed to your account. Additional information about usage may be collected, e.g. which, when and for how long you have viewed a video. You can prevent such attribution by logging off from your Vimeo account and deleting the respective Vimeo cookies before using our website.

Vimeo accesses the tracker of Google Analytics via the iframe inside which the video is being displayed. We have no access to this tracking by Vimeo. You can prevent transmission and use of your data, which is generated by the cookie and relates to your use of the website (including your IP address), to Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Please note that we have no influence on the mode and scope of collection, use or processing of your data by Vimeo. For information on this, please consult the data protection information of Vimeo at https://vimeo.com/privacy.

5. Notice of the right to object

If we process your personal data on the legal basis of our legitimate interests pursuant to article 6 para 1 (f) GDPR, you have the right to object to the processing of your personal data pursuant to article 21 GDPR, provided that there are grounds related to your particular situation, or you object to the processing of your personal data for direct marketing purposes. In the latter case, we will comply with your objection regardless of grounds relating to your particular situation. Please contact our data protection team (contact details above) if you wish to exercise your right of revocation or objection.


Your privacy settings for our website

Your privacy is important to us! Therefore, you decide which of your data we may process. Regardless of your selection, we always adhere to the strict requirements of European data protection law (GDPR).


Data protection policy

Table of contents

1. What is this policy about? 
2. Who processes your personal data? 
3. What do we expect from you? 
4. Why do we process your personal data? 
5. With whom do we share your personal data? 
6. Are your personal data transferred outside the European Union? 
7. What are your rights? 

 

1. What is this policy about?

This policy applies to the personal data that we process about you as a natural person. This policy does not apply if we process anonymous or business data.

 

2. Who processes your personal data?

We are HDI Global SE, Branch for Belgium, hereafter referred to as "HDI", with our office at Avenue de Tervueren 273 / 1, B-1150 Brussels, and registered in the register of legal entities under the number 0542.602.657, e-mail: dataprotection.be@hdi.global.

We are the "controller" for the processing of your personal data.

 

3. What do we expect from you?

We expect that you only communicate personal data about yourself to us. If you also communicate personal data about other people to us, then you must ensure that you are entitled to do so.

We also expect that the personal data that you communicate to us are correct and that, if specific data change, you promptly inform us of this change.

 

4. Why do we process your personal data?

The purposes for which we process your personal data depend on how you enter in contact with us.

 

You surf on our website
We process information about your use of our website, in order to remember your choices, manage and improve our website, based upon our legitimate interests. We refer to "Part 1 : Data protection when visiting our website" for more information about this.
 
You contact us
We process your identification data in order to answer and manage your request for information, based upon our legitimate interests. We believe it is important to properly answer your requests. Your personal data are retained for as long as you are in contact with us (e.g. you ask for information), and for up to maximum 10 years after the end of this relationship.


You are a candidate

We process your personal data (curriculum vitae) in order to answer and manage your solicitation, based upon our legitimate interests. We believe it is important to properly answer your solicitation. Your personal data are retained for as long as you are in contact with us and for up to maximum 5 years after the end of your solicitation.

This information is either provided by you or by our partners (such as recruitment agencies).


You are visiting our offices

We process your identification data for security reasons, based upon our legitimate interests. We believe it is important to maintain security of the persons and goods within our offices. Your personal data are retained for a period of maximum 5 years as from the date of your visit.

In addition, we also process your personal data (images and video recording only) through our surveillance cameras for security reasons based upon our legitimate interests. We believe it is important to maintain security of the persons and goods within our offices. These personal data are retained for a period of maximum 14 days as from their recording.


You are a supplier/partner/broker or its representative

We process your identification data in order to properly manage our business relationship with you, based upon our legitimate interests. We believe it is equally important for you to maintain the quality of our business relationships. Your personal data are retained for as long as you are in relation with us and for up to maximum 10 years after the end of this relationship.


We also process your personal data for direct marketing purposes, based upon our legitimate interests. We believe it is important for you to be informed about the latest news and products. This information is meant to help you in your relationships with us and with your own clientele management.

Your personal data are retained for as long as you are in contact with us and for up to maximum 10 years after the end of this relationship.


You are a client (policyholder, insured or beneficiary) or its representative

We process your personal data (identification data, personal characteristics, financial particulars, property features, professional activity, family composition, education, physical information, leisure activities, pictures and other personal data related to the insurance production or claims) for clientele management (production of insurance policies and claims handling), market survey and fight against fraud purposes. This processing is based upon one of the following grounds: execution of the insurance contract, compliance with our legal obligations or our legitimate interest (only for market surveys). We believe that surveys and market/business analysis/statistics are important to maintain and even develop the quality of the services that we offer you.

We also process your health data which are necessary to properly manage the insurance production and claims, based upon your consent.

This information is either provided by you or by our partners (brokers, loss adjusters and other subcontractors), doctors, witnesses, public services (police, etc.), third insurers, policyholders, insured or beneficiaries.

Your personal data are retained for as long as you are in contact with us and for up to maximum 10 years after the end of this relationship, unless legal provisions require us to retain your data for a longer period.


You are a third party (victim, witness or other third party)

We process your personal data (identification data, personal characteristics, financial particulars, property features, professional activity, family composition, education, physical information, leisure activities, pictures and other personal data related to insurance claims) for clientele management (claims handling), market survey and fight against fraud purposes. This processing is based upon one of the following grounds: execution of the insurance contract, compliance with our legal obligations or our legitimate interest (only for market surveys). We believe that surveys and market/business analysis/statistics are important to maintain and even develop the quality of our services.

We also process your health data which are necessary to properly manage the insurance claims, based upon your consent.

This information is either provided by you or by our partners (brokers, loss adjusters and other subcontractors), doctors, witnesses, public services (police, etc.), third insurers, policyholders, insured or beneficiaries.

Your personal data are retained for as long as you are in contact with us and for up to maximum 10 years after the end of our contact, unless legal provisions require us to retain your data for a longer period.

 

5. With whom do we share your personal data?

We can transfer your personal data to companies that are a part of the HDI group, to companies that process personal data in our name and on our behalf (known as 'processors' such as loss adjusters, claims handlers or brokers), to other controllers (such as third insurers or reinsurers), to third parties when there is a legal obligation to do so, and to the police or judicial authorities at their request if they are entitled to request the personal data.

 

6. Are your personal data transferred outside the European Union?

We can transfer your personal data to countries outside the European Union, including the United States. Each transfer will be based on an adequacy decision or on standard data protection clauses of the European Commission.

 

7. What are your rights?

You can contact us to exercise the following rights, in accordance with the conditions laid down in the applicable legislation:

  • Withdrawing your consent for the processing of personal data, to the extent that the processing of your personal data was initially based upon your consent.
  • Seeking access to, or any correction, deletion or restriction of your personal data.
  • Objecting to any direct marketing and/or research, development and improvement of our products.
  • Seeking the portability of your personal data, which you have communicated to us.

You can exercise all of these rights by contacting us at the address stated above (article 2) or via dataprotection.be@hdi.global.

You also have the right to file a complaint with the Data Protection Authority.