Data Collection and purposes of data processing

We only collect, use and disclose your personal data if this is permitted by law or if you consent to the collection of data. Personal Information is all information that is used to identify a natural person, and which can be traced back to you - such as your name, identification number, location data, email address and telephone number.

Access data

For technical and security reasons, and to optimize the use of the website, we collect data that your Internet browser provides and store them as “server log files” on the sever of the website (e.g.: time and date of access, browser, operating system, IP-Address). This data cannot be traced back to any natural person (however we must point out that under GDPR IP addresses are considered personal data)

The access data is deleted within a short period of time after serving its purpose (usually within 14 days) unless further storage is required for evidence purposes. In such cases, the data is stored until the incident is definitively resolved.

These data are processed on the legal grounds of our legitimate interest (Art. 6 par.1 lit.f GDPR) to prevent fraud and unauthorized system access. An analysis of IP-addresses for statistical or marketing purposes is not performed.

Data provided voluntarily by the User

If you contact us via the form on the website or by e-mail, the submission of your request implies the knowledge of this Privacy Policy and your consent to the processing of your personal data for the purpose of technical administration of the request as well as possible follow-up questions (Art. 6 par.1 lit. a GDPR).

Data is stored by us for six months. You may at any time request that your personal data is deleted by any of the means shown in Contact details below.

Use of the Web-based software

The access and use of the services and contents provided on the integrated Coverholder Transactions Software is reserved exclusively to registered users having a collaboration agreement with us.

Your credentials and personal data (name, contact details, company details) will be stored for as long as you remain a registered user for the technical administration of the user management process. Your consent can be revoked at any time by giving us notice by any means shown in Contact details below.

For the provision of the agreed Insurance Services (e.g. risk quotation and providing insurance documents) the User will be required to upload Personal Data of its customer on the software. In his capacity of Data Controller of such data, the User will be responsible for having informed the affected Data Subject about the terms of our privacy policy for the provision of such services and for having obtained the relevant consent from the Data Subject for the processing and transmission of personal data, as described in this policy to the other parties of the insurance business involved in the provision of the agreed service who operate as independent controllers. The User who uploads the Personal Data also undertakes to hold us harmless in case of false or reticent statements, in particular in case they have not actually obtained the consent to the processing from the relevant Data Subjects.

The required types of personal data that are processed may include the following:

• Identification details of the contractor (insured, policyholder, beneficiary)
• Identification details/reference number of the insurance intermediary
• Data of legal entities involved
• Policy Information
• Product wishes, purpose and scope of requested cover
• Financial information
• Special categories of personal data such as credit and anti-fraud data, risk relevant details, previous claims, and for certain insurance products health data, subject to explicit consent of the data subject.

This data processing takes place on the legal grounds of performance of contractually agreed services and for compliance with our legal and regulatory obligations as Insurance Broker and to (Art. 6 par 1-(b) and (c) GDPR).

We will retain the above data only for as long as is necessary for the purpose for which it was originally collected. When we no longer need your Personal Information in connection with the Services, we will then retain your Personal Information for a period of time that reasonably allows us to comply with our legal and regulatory obligations. If data in not covered by a statutory filing obligation, we will block or delete your data as soon as the purpose for which they were collected has ceased.

Data Recipients

To the extent permitted by law, and solely for the purpose of providing the agreed services, personal data may be disclosed to the following parties:

• Insurance business partners or their affiliates or sub-contractors who operate as independent controllers for the execution of the insurance contract
• Law enforcement agencies, insurance supervisory authorities, other regulators, government and/or civil authorities if so requested by law or regulatory obligations
• Third-party Service Providers who provide IT, software maintenance Infrastructure, and backup storage services on our behalf. During the provision of such services, these service providers may have limited access to your personal or other data per our instructions. We do not authorize any use or disclosure of personal information except in connection with the provision of their services. Details of our selected service providers and the respective data processing contracts will be provided upon your request.

As a general rule, we do not transfer any personal data to countries outside the European Economic Area. Where in exceptional cases data are transferred by our IT providers outside the EEA area, the transfer is performed on the basis of appropriate safeguards and by adopting standard contractual clauses approved by the EU Commission in accordance with Art. 46 par. 2 lit. c and d GDPR.

Security

As Insurance Broker we are subject to a duty of confidentiality, furthermore the Personal Data provided to us will be processed implementing all the necessary technical and organizational measures to protect the confidentiality and security of Personal Data from unauthorized access or against loss, misuse or alteration by third parties. However, we point out that the transmission of data on the internet e.g. by email can always lead to third parties taking note or falsifying your data. It is the responsibility of the User to protect the data provided or received by him by encryption or in any other way against misuse.

Your Rights

You have the right to information, correction, deletion, restriction, data portability, revocation and objection of your stored data. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to us at office@quaronikarner.com or the Data Protection Authority.

Austrian Data Protection Authority
Wickenburggasse 8, 1080 Vienna
Telephone: +43 1 52 152-0
E-Mail: dsb (at) dsb.gv.at
Webpage: https://www.dsb.gv.at

Change of privacy policy

We reserve the right to adjust the privacy policy from time to time so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, for example when introducing new services. Your new visit will be subject to the new privacy policy.

Contact

Data Controller:
QuaroniKarner GmbH
Sterngasse 2/25, 1010 Vienna - Austria
Telephone: +43 676 5707272
E-Mail: office@quaronikarner.com