Legal Notice
PERSONAL DATA
A – To whom is your personal data sent?
B – Why do we need to process your personal data?
C – How long is your data retained?
D – What cookies are used on our site?
E – What rights do you have?
A – To whom is your personal data sent?
Your personal data is processed by your Insurer and by the Covéa Group to which it belongs, the data controllers.
Your Insurer’s contact information can be found on the contractual and pre-contractual documents given or made available to you. The Covéa Group is represented by Covéa, a mutual insurance group company governed by the French Insurance Code, Paris Trade and Companies Register 450 527 916, with registered office at 86-90, rue St Lazare – 75009 Paris. To obtain information about the Covéa Group, you may visit the website at http://www.covea.eu.
Your personal data may be sent to the staff of the data controllers, its contractually bound partners and subcontractors, reinsurers, professional organisations, insurance agencies or social agencies of the persons involved, insurance intermediaries and the persons concerned by the policy.
These recipients may be located outside the European Union based on an adequacy decision or negotiated contractual conditions. These mechanisms are available from your Data Protection Officer.
For additional information, you may contact the Data Protection Officer at protectiondesdonnees@mma.fr, or by sending a letter to:
MMA IARD SA “Protection des données personnelles ” 160 rue Henri Champion - 72030 Le Mans Cedex 9 France
B – Why do we need to process your personal data?
1 – Your personal data is processed by your Insurer and the Covéa Group in order to:
– enter into, manage and provide coverage under your insurance policy; – conduct marketing campaigns; – allow the exercise of remedies and complaint management; – carry out research and development in connection with the above purposes; – take preventive measures; – prepare statistics and actuarial studies; – combat insurance fraud; – take anti-money laundering and terrorism financing actions; – fulfil its current legal, regulatory and administrative obligations.
Your Insurer may use automated decision-making for risk assessment in order to underwrite or manage your policy. In this case, you may ask your Data Protection Officer what criteria were used as the basis for the decision.
2 – The legal basis of this processing is as follows: the legitimate interest of the data controllers for the purposes of marketing, combating insurance fraud, research and development, preparing statistics and actuarial studies and preventive measures; and your policy for the other purposes mentioned. When the legal basis is the policy, the refusal to provide your data results in the inability to enter into the policy.
3 – In an effort to combat insurance fraud, your Insurer may, in case of detection of an anomaly, an inconsistency or an alert, enter you on a list of persons posing a risk of fraud in order to control our costs and protect our solvency. Before being entered on such a list, you will be notified individually.
C – How long is your personal data retained?
Personal data processed in the course of entering into and managing your policy is retained in accordance with the statutory limitation periods based on the type of policy. For marketing purposes, personal data is retained for three years from the collection date or from the last contact with the person which did not produce a response.
In case of entry on a fraud prevention list, your personal data will be retained for five years.
Your consent to store cookies/tags is retained for 13 months from the date on which they are stored.
D – What cookies are used on our site?
When consulting this website, information regarding browsing on your terminal (computer, tablet, smartphone, etc.) may be saved in “cookies” files installed on your terminal, some of which require your consent which you may modify at any time. The information we collect is used for our own purposes. This information is not communicated outside our group. We do not transfer your information, either free of charge or in return for payment. We will not disclose any of your information without your consent or unless a law or regulation requires us to do so.
E – What rights do you have?
First of all, you have a right of objection, which allows you to object to the use of your data for marketing purposes, at any time, at no cost.
You also have:
1 – a right of access, which allows you to obtain:
– confirmation that data concerning you is (or is not) processed;
– a copy of all personal data concerning you in the possession of the data controller;
This right pertains to all data that is (or is not) processed by us.
2 – a right to request the portability of certain data. More limited than the right of access, this right applies to personal data that you provided (actively, or which was observed in connection with your use of a service or device) in the course of entering into and managing your policy.
3 – a right of objection: this right allows you to opt out of marketing by your Insurer or its partners.
4 – a right to request rectification: this right allows you to have information concerning you rectified when it is obsolete or incorrect. It also allows you to add information concerning you when your information is incomplete.
5 – a right to request erasure: this right allows you to have your personal data erased subject to the statutory retention periods. In particular, it may apply if your data is no longer required for processing.
6 – a right of limitation, which allows you to limit the processing of your data (it is then no longer actively processed):
– in case of unlawful use of your data;
– if you dispute the accuracy of your data;
– if you need to have the data to establish, exercise or defend your rights.
You may exercise your rights by sending a letter to:
MMA IARD SA “Protection des données personnelles” 160 rue Henri Champion - 72030 Le Mans Cedex 9 France
or by sending an email to: protectiondesdonnees@mma.fr.
You will be asked to show proof of your identity when requesting to exercise your rights.
You may register on the telemarketing opt-out list free of charge at www.bloctel.gouv.fr. In this case, you will not be solicited by phone and we will contact you only when absolutely necessary in connection with the management and performance of your policy.
You may give general instructions to a trusted third party or specific instructions to the data controller concerning the retention, erasure and communication of your personal data after your death. These instructions may be modified or revoked at any time.
In case of a disagreement regarding the collection or use of your personal data, you may file a complaint with a supervisory authority.