Data Protection Statement

This privacy policy applies to Allianz Suisse Insurance Company Ltd and CAP Legal Protection Insurance Company Ltd with registered office in Wallisellen (hereinafter “Allianz Suisse” and “CAP”, also “we”, “us”). We procure and process personal data, in particular personal data about our policyholders, other customers, associated persons, contracting parties, injured parties, insured persons, app users, visitors to our website, participants in events, recipients of newsletters and other entities or their respective contact persons and employees (hereinafter also “you”). This privacy policy provides information on this data processing. In addition to this privacy policy, we may inform you separately about the processing of your data (e.g. in relation to forms or contractual conditions).

If you provide us with information about other people (e.g. family members), we assume that you have the authority to do so, that the data are accurate and that you have ensured that such persons are informed of this disclosure where there is a legal obligation to provide information (e.g. by making them aware of this privacy policy in advance).

Each time personal data are procured and processed, this is subject to the responsibility of one or more data (protection) controllers. In the case of the activities of Allianz Suisse and CAP, this is – unless stated otherwise – the company within Allianz Suisse or CAP which is responsible for the relevant website or area of the website where you have accessed this privacy policy and which is indicated as the operating party (e.g. in the imprint, by name or as specified in the relevant documents). If another party procures personal data on such a website in the capacity of independent data controller, we will disclose this. In addition, the responsible data controller for procuring the related personal data is the company with which you are communicating, with which you have or want to conclude a contract, with which you are an insured person or beneficiary or want to claim a benefit, to which you are applying, which you are visiting, whose social media pages you are browsing, whose apps you are using or which is addressing you (this does not include companies that are merely processing orders on behalf of one of the other companies).

“ www.elvia.ch” is the website of the direct insurer of Allianz Suisse Insurance Company Ltd, P.O. Box, 8010 Zurich, which is responsible as the insurer and underwriter for data processing in relation to the car, motorcycle, household contents and liability insurance products.

If you have any questions about the processing of your personal data in relation to the car, motorcycle, household contents and liability insurance products, please contact us at data-privacy@allianz.ch or by post to Allianz Suisse, Data Protection Officer, C RD C, P.O. Box, 8010 Zurich.

Responsibility for data processing in relation to legal protection insurance (as insurer, underwriter and subsidiary of Allianz Suisse Insurance Company Ltd) lies with CAP Legal Protection Insurance Company Ltd, Neue Winterthurerstrasse 88, 8304 Wallisellen.

If you have any questions about the processing of your personal data in relation to legal protection insurance, please contact us at data-privacy@cap.ch or by post at CAP Legal Protection Insurance Company Ltd, Data Protection Officer, c/o Allianz Suisse, C RD C, P.O. Box, 8010 Zurich.

We collect and process different categories of your personal data. Allianz Suisse and CAP unite various corporate entities that may procure and process your personal data. In the areas listed below, all or multiple divisions collect the following categories of data for the following purposes:

• Communication: In order to communicate with you and with third parties via e-mail, telephone, letter or by any other means (e.g. when answering enquiries, in the context of a consultation, or to initiate or execute a contract), we process and procure the content of the communication, your contact details and the marginal data of the communication, among other things. If you contact us through a chat feature on our website, the chat may be automated or you may be connected to a customer service representative. We may also create image and audio recordings of video/phone calls and conferences. In such cases, we will notify you separately and you will have the opportunity to let us know if you do not wish to be recorded or to terminate the communication (if you simply do not wish your image to be recorded, please turn off your camera). We may also process the data generated during the communication (including, in particular, recordings of video/phone calls and conferences as well as chat logs) for training, evidentiary or quality assurance purposes. If we need or wish to establish your identity, we will collect additional information (e.g. a copy of an identity document).
• Website, apps: In order to operate, manage, maintain, support and further develop our website and apps (e.g. the Allianz app) securely and stably, but also to improve them and understand how they are used, we collect and process personal and technical data that arise during the registration, use and administration of these services. This includes in particular: master and contact data, insofar as these are required for the registration, authentication or administration of a user account; device and technical data, such as your IP address, information on the operating system, app or browser version, your device settings, device identifiers and information on your region; protocol and usage data, such as time, duration, scope and type of use of our digital services as well as information on functions and content accessed; and security and error analysis data, which are processed to ensure system security, to troubleshoot errors and to maintain and improve our digital services. In addition, we use cookies and similar technologies. These are mostly used to ensure that the website functions as expected, but also for the purposes indicated above. This information generally does not identify you directly, but is used to offer you a more personalised web experience (e.g. by saving your language settings). For more information, see section 11.
• Registration: In order to use certain offers and services (e.g. login areas, free WLAN or newsletters), you must register either directly with us or via our external login service providers. For this purpose, we process the data disclosed during the registration process. We may also link these data with cookie data (e.g. in order to provide you with customised offers; for more information, see section 11). Furthermore, we may collect personal data about you while using the offer or service. If necessary, we will provide you with further information about the processing of these data.
• Relationship management and marketing: We also procure and process your personal data for relationship management and marketing purposes. These include, in particular, communicating with our customers, other contractual partners and other interested parties and providing personalised advertising and suitable offers in relation to our products, services and other news (e.g. on our website, by e-mail, by telephone, by post or via digital marketing channels). The processing may include, in particular, the analysis of customer relationships and customer interests, the formation of target groups and segments for marketing and advertising purposes, and the transmission of encrypted or hashed identifiers (e.g. e-mail addresses or telephone numbers) to selected providers of digital advertising platforms and social networks in order to better appeal to existing customers, display relevant advertising and measure the effectiveness of our marketing measures. We also obtain and process personal data in the context of individual marketing campaigns (e.g. events or competitions). For this purpose, we process in particular the names, e-mail addresses, telephone numbers and other contact details that we receive in the course of concluding or executing a contract or in the course of any registration (e.g. for the newsletter). You may refuse these mailings (which may be sent via any contact channels we have) at any time or refuse or withdraw your consent to be contacted for advertising purposes by notifying us accordingly (see contact details in section 2).
• Market research, improvement of our services and operations and product development: In order to continuously improve our products and services (including our website, our apps and other electronic offers), we collect data about your behaviour and preferences by analysing, for example, how you navigate our website or our apps, how you interact with our social media profiles, or which products are used by which groups of people and in which way. We may also conduct customer surveys, for example to learn whether you are satisfied with us and our services and products and/or find out ways we can improve.
• Applying for jobs: If you apply for a job with us, we procure and process the relevant data for the purpose of reviewing the application, carrying out the application process and, in the case of successful applications, for preparing and concluding a corresponding contract. For this purpose, in addition to your contact details and the information from the corresponding communication, we process in particular the data contained in your application documents and any data we are able to procure about you from other sources, for example from job-related social networks, the Internet, the media and from references supplied by other jobs, provided that you give us your consent to request such references.
• Security purposes and access control: We procure and process personal data to ensure the appropriate security of our IT and other infrastructure (e.g. buildings) and to improve this on an ongoing basis. This includes, for example, monitoring and controlling electronic access to and activity on our IT system(s) and physical access to our premises, analysing and testing our IT infrastructure, performing system and error checks, and creating backup copies. For documentation and security purposes (for preventive reasons and investigating incidents), we also keep access logs or visitor lists in relation to our premises and use surveillance systems (e.g. security cameras). We will draw your attention to any such cameras at the relevant locations with appropriate signs.
• Compliance: We procure and process personal data (in particular master data, contractual and financial data, behavioural data and technical data) to comply with applicable laws (e.g. to combat money laundering or meet tax obligations), self-regulations, certifications, industry standards, economic sanctions, our corporate governance, as well as for both internal and external investigations (e.g. by a law enforcement agency, supervisory authority or commissioned private entity).
• Risk management and corporate governance: We procure and process personal data as part of our risk management (e.g. to protect against criminal activity, monitor debtors and creditors) and corporate governance (especially contractual and financial data, behavioural data and technical data). This includes, but is not limited to, our business organisation (e.g. resource planning) and business development (e.g. buying and selling operations, assets, business activities or companies, and sharing information with third parties), profitability analyses, portfolio restructuring, and participation in and reporting on the activities of the international group to which we belong.
• Contractual relationship: With regard to initiating, concluding and executing a contract with you (or also with your contractor or employer), we may in particular procure or otherwise process your name, contact details, powers of attorney, declarations of consent, information about third parties (e.g. family details), contract contents, date of conclusion, creditworthiness and profitability data, as well as any other data that you provide to us or that we collect from third parties (e.g. references, information from previous insurer). This may also include health data or other data that provide us with information about your life situation. We also process personal data so that we can comply with our contractual obligations towards our customers and other contracting partners (e.g. service providers, project partners) and, in particular, so that we can provide and request the contractual services. Furthermore, we process personal data in order to offer you customised services and products. For customer service, contract performance (collection, legal proceedings, etc.) and accounting, we process the data we receive or have collected in the course of initiating, concluding and executing the contract, including, for example, data on contractual services and the provision of services, information on responses (e.g. details on satisfaction) and financial and payment information. We may also process personal data for the purposes of profitability analysis and portfolio restructuring.
• Other purposes: Other purposes include, for example, training and educational purposes, administrative purposes (e.g. accounting), optimisation and further development of our systems (e.g. conducting test runs for new functions to be implemented), processing and settlement of legal disputes (e.g. in court proceedings), internal reporting (e.g. on reports and further developments in the media, including social media) and public relations. In addition, we may process personal data relating to the organisation, implementation and follow-up of events, such as lists of participants, the content of presentations and discussions, as well as image and audio recordings made during these events. The protection of other legitimate interests is also one of the other purposes, which cannot be listed exhaustively.

We procure and process your personal data in particular in the following business-specific areas for the following purposes:

• Claims: We procure and process your personal data so that we can assess, review and process claims. In addition to your contact details, we may also need behavioural, location, financial, salary and occupational data, health data and other sensitive data (e.g. on family situation, ethnicity, religion) as well as data describing an incident, its causes and its consequences (or lack thereof), which may relate to you or other persons. We collect these data, for example, from damage reports, police reports, expert opinions, surveillance reports, medical certificates, accident reports and invoice receipts, from public sources, from authorities or directly from third parties, including other insurance companies, authorities, vehicle manufacturers or other persons whose information is required for this purpose or from whom relevant information can be expected (e.g. employers, respondents). Where we consider it necessary in the event of a traffic accident, we use data recorded by the vehicle before, during and after the accident in order to clarify what happened.
• Abuse of our services: We procure and process data for the purpose of detecting or preventing insurance fraud. To this end, we may also exchange personal data with other Allianz Group companies to the extent necessary for the prevention, detection, investigation and assessment of abuse, fraud or security cases. For this purpose, we also share data with and procure data from third parties. In addition to contact details, this also includes data on when and how the damage occurred, identification numbers (e.g. serial number or vehicle identification number) or information on ownership and possession. We are connected to the Car Claims Information Pool (“CC-Info”) and the Notice and Information System (“HIS”) of SVV Solution AG (which is an independent data controller in terms of data protection). In the course of processing a claim, we can make a query in HIS and check the data provided to find out whether any information on you is saved from a previous report (detailed information on HIS can be found at www.svv.ch/his or https://www.allianz.ch/en/informationen/his.html). As part of the claims process, we can also make a query in CC-Info and use the transmitted data to check whether any previous damage has been recorded for your motor vehicle (detailed information on CC-Info can be found at https://www.svvsolution.ch/systeme/cc-info/). In addition to HIS and CC-Info, we also procure data from public sources (e.g. social media), from authorities or third parties (e.g. persons involved, witnesses, insurance companies, experts, investigative service providers); this may include, in particular, information about an incident under discussion, its causes and its consequences (or lack thereof), as well as the behaviour of the persons involved or further information about the circumstances in connection with possible abuse, a previous incident and how this was handled. We also pass on personal data to the authorities in order to clarify the facts of legal cases. Insofar as this is permissible, specifically in cases of suspicion, we may also arrange for specialists to carry out fact-finding, clarification and surveillance measures in Switzerland and abroad (e.g. observation, investigations).
• Recourse: We procure and process personal data for the purpose of asserting and enforcing our rights of recourse against third parties (e.g. insurance companies or individuals) or to investigate, settle and/or accept or reject claims that have been asserted against Allianz Suisse and CAP. In addition to contact details, we also collect information on how the accident occurred or how the damage was caused, the persons involved, location data and – if we deem it necessary – health data. We collect these data from you, from third parties (e.g. persons involved, witnesses, insurance companies), from authorities or from public sources. Together with other insurance companies, we use the recourse platform operated by the Swiss Insurance Association (SIA) (which is an independent data controller in terms of data protection). This platform facilitates the efficient digital processing of recourse cases between Swiss personal, property and liability insurers (detailed information on the recourse platform and the personal data processed can be found at https://www.svv.ch/de/regressplattform – not available in English).

• From you: You disclose much of the data we process yourself (e.g. in connection with our services, when using our website and apps, or when communicating with us). You are not obliged to disclose your data, subject to exceptions in individual cases (e.g. legal obligations). However, if you want to conclude contracts with us or use our services, for example, you must provide us with certain data.
• From third parties: We may also obtain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, the media or the Internet, including social media) or receive such data from (i) public authorities in Switzerland and abroad, (ii) your employer or customer, insofar as the latter either has a business relationship with us or is otherwise associated with us, and (iii) other third parties (e.g. general agencies, brokers, cooperation partners, previous insurers, lawyers, appraisers, other insurance companies, vehicle manufacturers, credit agencies, address brokers, associations, contracting partners, Internet analysis services, investigation service providers). The data that we collect from third parties include, in particular, data that we obtain and process while initiating, concluding and processing contracts (in particular in the context of the assessment and processing of claims/benefit cases), as well as data from correspondence and meetings with third parties, but also all other data categories arising from sections 3 and 4.

In connection with the purposes listed in sections 3 and 4, we may transfer your personal data in particular to the following categories of recipients:

• Group companies and general agencies: Group companies may use your data for the same purposes as we do, as described in this privacy policy (see sections 3 and 4). The same applies to our general agencies. The recipients may also process the data under their own responsibility.
• Service providers: We work with service providers in Switzerland and abroad who (i) process data on our behalf (e.g. IT providers), (ii) process data jointly with us or (iii) process data under their own responsibility that they have received from us or collected for us. These service providers include, for example, IT providers, brokers, advertising agencies, banks, insurance and reinsurance companies, debt collection companies, credit agencies, address checkers, consulting firms, appraisers, investigation service providers, doctors and lawyers. We enter into agreements with these third parties regarding the use and protection of personal data, depending on the nature of our relationship, the law and other circumstances.
• Customers, cooperation partners and other contractors: This primarily refers to customers and other contractual partners of ours where the transfer of your data arises out of the contract (e.g. because you work for a contracting partner or they provide services for you, such as brokers). This category of recipients also includes contractual partners we work with (e.g. HIS, CC-Info, SIA recourse platform, earthquake claims organisation) or which advertise on our behalf. The recipients generally process the data under their own responsibility.
• Authorities: We may pass on personal data to administrative bodies, courts and other authorities and social security providers in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary or expedient to safeguard our interests. These recipients process the data under their own responsibility.
• Other persons: This refers to other cases where third parties are involved by reason of the purposes stipulated in sections 3 and 4. This applies, for example, to payees specified by you, to third parties within the context of relationships established with representatives (e.g. your lawyer or your bank) or to persons involved in official or legal proceedings. If we work with the media and provide them with material (e.g. photos), you may also be affected. In the course of developing our business, we may sell or acquire businesses, operations, assets or companies or enter into partnerships, which may also result in data (including data pertaining to you, e.g. as a customer or supplier or as their agent) being disclosed to the parties involved in these transactions. Data concerning you may also be exchanged in the course of communicating with our competitors, industry organisations, associations and other bodies.

All of these categories of recipients may in turn involve their own third parties, as a result of which your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers) but not by other third parties (e.g. authorities, banks, etc.).

We reserve the right to disclose data even if these data contain confidential data (unless we have expressly agreed with you that we will not disclose these data to certain third parties, or we would be legally obliged to refrain from such disclosure; duties of confidentiality pertaining to social security shall continue to apply). Notwithstanding the foregoing, your data will continue to be subject to appropriate data protection in Switzerland, the European Economic Area (EEA) and the United Kingdom after disclosure. Disclosure to other countries is subject to the provisions of section 9. If you do not wish certain confidential data to be disclosed, please let us know so that we can check whether and to what extent we can accommodate your wishes.

We also allow certain third parties to collect personal data from you on our website and at events organised by us, including under their own responsibility (e.g. media photographers, providers of tools that we have embedded in our website, etc.). To the extent that we do not have a decisive hand in these data collections, these third parties shall be solely responsible for the data collected. If you have any concerns or wish to exercise your data protection rights, please contact these third parties directly. We have listed them in section 12.

Based on your data, we perform automated evaluations of certain of your personal characteristics for the purposes specified in sections 3 and 4 (“profiling”). In doing so, we may combine personal data from various internal and external sources, in particular data from existing customer relationships, contracts, claims, forms, marketing campaigns, the use of our websites, apps and other digital services and from other interactions with Allianz Suisse. One such instance is in connection with our premium calculator, where the data required for the insurance application is used to create an automated risk profile which serves as a basis for determining your individual insurance premium. Automated processing may also be used to identify interests, preferences and needs, analyse the use of our products and digital services, perform statistical evaluations, carry out operational planning or tailor our communications, services and marketing and advertising measures to the interests of our customers and prospective customers.

In addition, automated processing can be used in connection with the examination, processing and settlement of claims, for example to check the plausibility of information, to support claims assessment or to identify abuse and fraud risks, and for the partial or complete automated assessment and processing of certain claims.

We also use automated processing to identify risks of abuse and security risks; for example, we are required to take certain measures due to legal and regulatory requirements (e.g. to combat money laundering or terrorist financing). We may also create profiles for these purposes.

In certain situations, for reasons of efficiency and consistency in decision-making processes, it may be necessary for us to automate discretionary decisions affecting you (“automated individual decisions”). We do this in particular to initiate and perform contractual relationships; for example, automated decisions are made on the basis of the information you provide in connection with taking out an insurance policy, possible excluded risks, the amount of the insurance premium or the obligation to pay benefits. If the automated discretionary decisions have legal implications or potentially significant disadvantages, we will inform you and give you the opportunity to express your point of view, as required by the law. If we grant your request in full, this right shall not exist within the scope of the Data Protection Act.

In connection with the purposes listed in sections 3 and 4, we may process and evaluate your personal data with the help of artificial intelligence (AI).

We use AI in particular to improve and increase the efficiency of our business processes, e.g. when creating and translating texts, summarising documents or analysing data, identifying patterns and trends, and preparing recommendations.

AI-generated outputs are interpreted and reviewed by humans before they are used for significant decisions. If an AI used by us interacts directly with you, we will inform you accordingly.

AI-generated content can be used to support processes and decisions. We ensure an appropriate, risk-based level of human control and classification of results, in accordance with the specific application. If AI applications are used for profiling or automated individual decisions, the information in section 7 also applies. If an AI used by us interacts directly with you, we will inform you accordingly. 

We process and store personal data primarily in Switzerland and in the EEA, but potentially in any country in the world.

Data transfers to Allianz Group companies outside of Switzerland or outside the EEA are made on the basis of the “Allianz Privacy Standards” (Allianz BCR), which ensure adequate data protection and are binding on all Allianz Group companies. You can view the Allianz BCR and the list of all Allianz Group companies that comply with them at https://www.allianz.com/en/privacy-at-allianz.html#bindingcorporaterules and https://www.allianz.com/en/privacy-at-allianz.html#bcrcompanies. 

In the case of other recipients in a country without adequate data protection, we generally contractually oblige the recipient to comply with an adequate level of data protection (for this purpose, we generally use the revised standard contractual clauses of the European Commission [which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?]), unless the recipient is already subject to a legally recognised set of rules to ensure data protection. Exceptions may apply specifically in the case of legal proceedings abroad, but also if there is an overriding public interest, if the performance of a contract that is in your interest requires such disclosure, if you have provided your consent or if obtaining your consent within a reasonable period of time is not possible and the disclosure is necessary to protect your life or physical integrity or that of a third party, or if the data concerned have been made generally accessible by you and you have not objected to the processing of such data.

You have specific rights in connection with our data processing. In accordance with applicable law, you may, in particular, request information about the processing of your personal data, have inaccurate personal data corrected, request the deletion of personal data, object to data processing, request the release of certain personal data in a conventional electronic format or request the transfer of such data to other data controllers.

If you wish to exercise your rights in respect of these matters, please contact us; our contact details can be found in section 2. In order for us to rule out abuse, we must identify you (e.g. with a copy of your ID, if necessary).

Please note that these rights are subject to conditions, exceptions and limitations (e.g. to protect third parties or business secrets). We reserve the right to black out copies for reasons of data protection or confidentiality, or to supply only excerpts or to postpone or refuse to provide information.

Our cookie policy supplements our privacy policy. It provides information about the use of cookies and similar technologies and about the associated integration of service providers and advertising partners. You can find our cookie policy policy here.

Some of the third-party providers we use may be located outside of Switzerland. Information on disclosure of personal data abroad can be found in section 9. In terms of data protection law, some of the third-party providers are “only” data processors on our behalf, and some are data controllers. Further information on this can be found in the third-party providers’ privacy policies.

We operate pages and other online presences on social networks and other platforms operated by third parties and process data about you in this context. We receive data from you (e.g. when you communicate with us or comment on our content) and from the platforms (e.g. statistics). The platform providers can analyse your use and process these data together with other data they have about you. They also process these data for their own purposes (e.g. marketing and market research purposes and to manage their platforms) and act as separate data controllers for this purpose. For further information on processing by the platform operators, please refer to the privacy policies of the relevant platforms.

We currently use the following platforms; the identity and contact details of the platform operators can be found in the relevant privacy policy:

Facebook
Provider: Meta Platforms, Inc.
www.facebook.com
Privacy policy: https://www.facebook.com/privacy/policy

Instagram
Provider: Meta Platforms, Inc.
www.instagram.com
Privacy policy: https://privacycenter.instagram.com/policy

Youtube
Provider: Google LLC
www.youtube.com
Privacy policy: https://www.youtube.com/intl/en/howyoutubeworks/our-commitments/protecting-user-data/#privacy-guideline

LinkedIn
Provider: LinkedIn Corporation / Microsoft
www.linkedin.com
Privacy policy:  https://www.linkedin.com/legal/privacy-policy

Google MyBusiness
Provider: Google LLC
Use: advertising, video tracking, conversion tracking, ad personalisation
www.google.com
Privacy policy:  https://policies.google.com/terms?hl=en-GB

TikTok 
Provider: ByteDance
www.bytedance.com / www.tiktok.com
Privacy policy:  https://www.tiktok.com/legal/page/eea/privacy-policy/en 

Medallia (ehem. Kampyle) 
Provider: Medallia Inc.
Privacy policy:  https://www.medallia.com/legal/privacy-policy/

Microsoft Corporation (Bing Ads)
Privacy policy:  https://www.microsoft.com/en-us/privacy/privacystatement

OpenAI (ChatGPT)
Provider: OpenAI, LLC
Privacy policy: https://openai.com/policies/row-privacy-policy/

We are entitled, but not obliged, to check third-party content before or after its publication on our websites and webpages, to delete content without notice and, if necessary, to report it to the provider of the platform in question.

Some of the platform operators may be located outside of Switzerland. Information on the disclosure of data abroad can be found in section 9.

The GDPR does not apply to the majority of our customer and third-party relationships. To the extent that it does (e.g. with respect to customers in the Principality of Liechtenstein addressed by us), the following additional information shall apply:

We base the processing of your personal data in particular on the fact that

• it is necessary for the initiation and conclusion of contracts and the subsequent administration and performance thereof (Art. 6 (1) (b) GDPR; see also sections 3 and 4),
• it is necessary, where no other legal grounds apply, for the protection of our overriding legitimate interests or those of third parties, specifically to communicate with you or with third parties, to operate our website, to improve our online offers and registration for certain offers and services, for security purposes, for compliance with Swiss law and internal regulations, for our risk management and corporate governance (Art. 6 (1) (f) GDPR; see section 3) and for other purposes such as training and education, administration, evidentiary or quality assurance, organisation, implementation and follow-up for events, and other legitimate interests (sections 3 and 4),
• it is legally required or permitted in the individual case under the law of the EEA or of a member state,
• it is necessary in individual cases for the protection of your vital interests or those of other natural persons,
• it is necessary in an individual case for the performance of a task which is in the public interest or in the exercise of official authority vested in us,
• you have given your separate consent to processing, e.g. in response to a corresponding query on our website (Art. 6 (1) (a) and Art. 9 (2) (a) GDPR).

We generally process your data for as long as is required for our processing purposes (see sections 3 and 4) as governed by the statutory retention periods and our legitimate interests, in particular for documentation and evidentiary purposes, or for as long as storage is technically necessary (e.g. in the case of backups or document management systems). If there are no legal or contractual obligations or technical reasons to the contrary, we generally delete or de-identify your data after the storage or processing period has expired within the context of our usual procedures and in accordance with our retention policy.

If you do not provide specific personal data, this may mean that it is not possible to provide the related services or conclude a contract. We generally indicate where personal data requested by us are mandatory.

The right to object to the processing of your data as set out in section 10 applies in particular to data processing for the purpose of direct marketing. The right to object also includes your right to restrict data processing under the GDPR.

If you do not agree with our treatment of your rights or data privacy, please let us know (see contact details in section 2). If you are located in the EEA, you also have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A list of authorities in the EEA can be found here: https://www.edpb.europa.eu/about-edpb/our-members_en.

Our representative in the EEA pursuant to Article 27 GDPR (if required) is: Data Protection Officer of Allianz Insurance Company Ltd, Data-Privacy@Allianz-Suisse.ch, and Data Protection Officer of CAP Legal Protection Insurance Company Ltd,  Data-Privacy@cap.ch

This privacy policy does not constitute part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.