Find information on data processing and the protection of personal data at R+V.
With this Information we would like to inform you comprehensively about the processing of your Personal Data in the context of reinsurance. We only use your Personal Data if we are legally entitled or obliged to do so.
According to the so-called Code of Conduct of the German Insurance Industry the German Insurance Industry has committed itself not only to strictly observe the laws relevant to data protection, but also to promote data protection through further measures. Explanations can be found in the Code of Conduct on the Internet.
There you will also find all other companies of R+V Insurance Group which entered into the Code of Conduct on 1st of January 2014. At your request we will send you a printout of the Code of Conduct by mail. Please contact our Data Protection Officer in this case.
If you have any questions regarding data protection, please contact the Data Protection Officer of R+V Insurance Group:
Reinsurance is the transfer of risks from a primary insurer to a reinsurance company. Reinsurance enables the primary insurer to reduce its underwriting risk.
In order to be able to assess the risk to be underwritten within the framework of a reinsurance contract before concluding a contract or in order to execute the contractual relationship, e.g. in case of a claim or benefit, it might be necessary for the primary insurer to provide us with your Personal Data.
Generally speaking the primary insurer is obliged to provide us only with such data as it is necessary for the conclusion and performance of the reinsurance contract in question.
In addition, data can be processed for purposes that are not directly related to the reinsurance contract.
This can be the case, for example, in order to
meet admissible regulatory or supervisory requirements. In this regard, our main activity is subject to further special statutory regulations which require us to process your Personal Data: e.g. money laundering, legal reporting obligations to government agencies, requests for information from authorities abroad in the context of international requests for administrative assistance, etc. The data will not be passed on to third parties.
review and optimise processes for electronic data processing
generate tariff calculations and conduct internal controlling or
in case of a legal dispute respectively defend accordingly
Generally we process your Personal Data on the basis of a general consideration of interests, i.e. we balance our interests with the respective interests of the person concerned. Our interest is usually the economic interest of concluding and performing the contract.
If in exceptional cases we receive health data from the primary insurer in connection with the assessment of risks, claims or benefit, the legal basis is usually your consent, which the primary insurer obtains from you. For example this can be the case in liability insurance or in life insurance, health insurance or accident insurance.
Generally we receive your Personal Data from the primary insurer or from the intermediary in charge of the primary insurer. In this regard we receive in particular names, addresses, gender, marital status, age and information on claims or benefits (e.g. medical reports, police and medical records).
In exceptional cases we cover a risk together with other reinsurers and receive the Personal Data from the reinsurers involved.
Within the scope of the reinsurance contract, data might be transferred to third parties:
(a) Primary Insurers
In connection with the treaty conclusion and performance we transfer your Personal Data to the primary insurer and, if applicable, to the primary insurer’s intermediary.
(b) Other Reinsurers
In rare exceptional circumstances, e.g. in the event of a high financial default risk, we may transfer parts of the assumed risks on to other reinsurers (retrocessionaires). Here it may be necessary to provide the other reinsurer with appropriate underwriting information.
In addition, data may also be transferred to other reinsurers if they reinsure a risk together with us (coinsurance).
Data is generally transmitted to these other reinsurers as part of a general balance of interests. If it is necessary to transmit health-related information to other reinsurers, the legal basis usually is your consent which the primary insurer has obtained from you. Given consents can generally be revoked with effect for the future.
(c) Contractors and Service Providers
Contractors and service providers with whom we have long-term business relationships can be found listed on the internet.
By your request we will send you a printout by mail. Please contact our Data Protection Officer in this case.
Service providers do not only fulfill "auxiliary functions" and are bound by our instructions in this case. They may also fulfill further functions for us at their sole discretion. This so-called “functional transfer” is provided for in data protection law.
If you can prove that because of your individual situation your legitimate interests outweigh our interest, you can object to the data transmission in case of “functional transfers”.
However, it is not sufficient if you object to the data transfer to service providers in general or to a specific service provider without giving specific reasons. “Functional transfers” can also be found in the above mentioned list of service providers.
We transmit Personal Data to DZ BANK AG as our superordinate financial conglomerate company if and only insofar as we are legally obliged to do so. Such an obligation may arise from the requirements on proper business organisation, e.g. an appropriate and effective risk management at Group level.
(e) Public Authorities and other bodies with public service functions
We transmit your Personal Data to authorities and other bodies with public cum legal tasks if we are legally or contractually entitled or obliged to do so.
Such data transmission may take place at the request of an authority. We will then verify whether the authority is allowed to receive the data in question.
In certain cases we are legally obliged to transmit your data to authorities, e.g. due to tax regulations or for statutory reporting requirements.
Especially in cases when the insured risk or the primary insurer is located in a non-EU/-EEA country (“third country”), it may be necessary to transfer data to a third country.
With regard to our transmission of Personal Data within the EU/EEA, we of course observe the strict legal requirements.
However, if necessary, we transfer your Personal Data to service providers in third countries outside the EU/EEA, e.g. within the framework of IT services or to authorised experts. The choice of service providers and the contractual agreements are of course based on the statutory rules.
In rare exceptional cases, we may transfer your data to other reinsurers (retrocessionaires) in third countries outside the EU/EEA.
In certain cases, there are also legal reporting obligations, which require us to transfer your data to authorities and comparable bodies in third countries outside the EU/EEA.
Such transmission may also be necessary in the event of legal disputes with foreign elements (e.g. lawyers).
If necessary, we process your Personal Data for the duration of our business relationship. This can also be the negotiation or settlement of a contract.
In addition, we are subject to various obligations to preserve records and for documentation purposes. These obligations result, among other things, from the German Commercial Code (HGB), the German Tax Code (AO), the German Money Laundering Act (GWG) or the German Insurance Company Accounting Ordinance (RechVersV). They contain specified deadlines for preservation and documentation which range from two to 30 years.
The maximum storage time is further based on the statutes of limitation which may be up to 30 years, e.g. in accordance with §§ 195 ff. of the German Civil Code (BGB). The regular limitation period is three years.
You can claim your legal rights to information, correction, deletion, restriction of processing and data transferability against our Data Protection Officer.
If data processing is based on a general balance of interests, you have the right of objection against this data processing, if reasons against data processing arise from your individual situation.
You have the right of appeal to a competent data protection supervisory authority (Article 77 of the General Data Protection Regulation).
In connection with the tracking methods used by us, we offer various options for each of specific cases listed below. Please note that if such an "opt-out cookie" is set on your device via our Consent Management Tool in order to implement your objection, you will have to object again when you delete these cookies. The cookies used on our pages are categorised as follows:
Essential cookies are inter alia used to guide you during your visit to our websites and are necessary for you to navigate through the pages and use essential functions.
Statistical cookies help us to better understand how visitors interact with the website in so-called pseudonymous usage profiles. It is not possible to draw any direct conclusions about a person from these profiles. With these cookies, we can measure the reach of our website. The legal basis for data processing is your previously given consent in accordance with Art. 6 Para. 1 lit. a DSGVO.
Marketing cookies allow us to provide you with optimised and personalised content and offers on our website or on third-party sites. These cookies are only active if you have given us your prior consent; the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Your consent or objection to the cookies listed above can be changed via the Consent Management Tool used on our website.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; "Google" for short). We use Google Analytics in the form of "Universal Analytics" and "Google Analytics Version 4". Both versions refer to Google Analytics processes, in which user analysis is carried out on the basis of a pseudonymous user ID and thus a pseudonymous profile is created with information on the use of various devices (so-called "cross-device tracking") for each user. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted and stored on a Google server in the United States. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. For the transfer of data to the USA, we have agreed with Google to uphold the standard data protection clauses approved by the EU Commission. The transfer of data to Google servers in the USA is therefore based on Art. 46 (2) c) GDPR.
The Google Analytics browser deactivation add-on gives website visitors more control over what data is collected by Google Analytics about the websites they visit. If you do not wish for your data to be stored, please install the deactivation tool provided by Google at: https://tools.google.com/dlpage/gaoptout?hl=de. The add-on can be used to deactivate both the "Universal Analytics" and "Google Analytics Version 4" tracking.
The legal basis for the processing of personal data is your previously given consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can object at any time in the cookie settings of the consent management tool.
We also use Google Analytics to evaluate data from ads for statistical purposes. If you do not wish this, you can deactivate it via the cookie settings.
As an alternative to the browser add-on or within browsers on mobile devices, please deactivate Google Analytics to prevent the collection of data by Google Analytics within this website in the future (the opt-out only works in this browser and only for this domain). This will place an opt-out cookie on your device. If you delete your cookies in this browser, you must click this link again.
We use DoubleClick for marketing and optimisation purposes, in particular to serve ads that are relevant and interesting to you, to improve campaign performance reports or to prevent you from seeing the same ads more than once.
The storage period for these cookies is 24 months.
The legal basis for the processing of personal data is your previously given consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can declare your objection at any time in the cookie settings of the consent management tool used.
Further objection options:
You can object to interest-based advertising by Google, but also by other advertising networks on advertising industry sites:
We maintain an online presence within social networks and platforms in order to communicate with our customers, interested parties and users active online, to accept their service requests and to inform them about our services, topics and campaigns.
We would like to point out that user data may be processed outside of the European Union. This may result in risks for the users because it could make it more difficult to enforce their rights, for example.
Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from usage behaviour and the resulting interests of the users. The usage profiles can then be used, for example, to place advertisements both within and outside the platforms that likely correspond to the interests of the users. For these purposes, cookies on usage behaviour and user interests are usually stored on the users' computers. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of social media platforms and are logged in to them).
For a detailed description of the respective processes and the possibilities to object (opt-out), we refer to the information supplied by the providers linked below.
In the case of requests for information and the assertion of user rights, we would also like to point out that these can be most effectively be made through the providers. Only the providers have access to the users' data, can take appropriate measures and provide information directly. Should you nevertheless require assistance, you can contact us.
The legal basis for the data processing described in each respective online platform is subject to Art. 6 Ab. S1 s. 1 lit f. GDPR. The legal basis for the data processing described in each respective online platform is our legitimate interest in providing our users and visitors with up-to-date and supportive information and interaction options.