All of the data you provide to ERV is treated confidentially and in accordance with the current data protection legislation – this includes, in particular, the collection, storage, use, provision and deletion of your data. The concept of personal data (hereinafter referred to as “personal data” or “data”) covers all information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”) (e.g. name, e-mail address, telephone number, etc.).
It is essential to process your personal data in order to provide advice tailored to your insurance needs. It is not possible to conclude or execute an insurance contract without processing your data.
Your data will only ever be used for the purpose you consented to when it was collected, which is apparent from the circumstances or provided for by law.
ERV processes personal data in particular to the extent required for business processes, such as acquisition, supporting applications, carrying out risk assessments of applications, protecting against insurance fraud, managing the customer relationship, providing its services, providing advice and support in line with needs, dealing with quotations and contracts as well as claims and benefits, invoicing, answering questions and enquiries as well as evaluating, improving and developing new products and services. In this context, ERV also processes your personal data for advertising purposes such as customer satisfaction surveys, general customer communications and customized adaptation of ERV offers, as well as creating customer profiles.
Profiling refers to any kind of automated processing of personal data to analyse specific personal aspects, such as economic situation, health, interests, reliability, behaviour, or relocation.
ERV uses profiling to set up customer segments to offer you customized advertising or offers that are tailored more closely to your needs. The use of data analysis processes also enables ERV to compile statistical information.
Should decisions be made based on the fully automated processing of personal data (such as your details when applying) which are associated with a legal consequence for you, ERV will inform you accordingly and you will have the opportunity to contact ERV so that corresponding decisions are reviewed.
Examples of such decisions include the conclusion or termination of a contract, possible risk exclusions or the amount of the insurance premium to be paid. This also allows ERV to make a fully automated decision on its obligation to pay based on your information on an insurance claim. Fully automated decisions are based on pre-determined rules for weighting the information.
The personal data processed by ERV includes data provided by the policyholder as well as publicly available data. Data categories include:
- Customer data (such as name, address, date of birth, gender, nationality, creditworthiness data, etc.)
- Data from applications, including the associated supplementary questionnaires (such as information from the applicant about the insured risk, answers to questions, expert reports, information from the previous insurer about previous claims history etc.)
- Data from contracts (such as contract term, insured risks, benefits, data from existing contracts etc.)
- Collection data (such as date and amount of premium payments, outstanding payments, reminders, assets, payment details etc.)
- Any claims data (such as claim notifications, assessment reports, invoices, data relating to injured third parties etc.)
Data about prospective or existing customers may be collected by third parties to provide optimum processing of the above-mentioned business processes and ensure the accuracy of data, to optimize the performance of business and/or customer needs, as well as to detect or prevent insurance fraud.
Your personal data may be passed on to third parties (“data processors”) for the aforementioned purposes and/or to ensure compliance with legal and regulatory provisions. ERV may also outsource divisions, individual value-creating steps of divisions and/or services (e.g. benefits settlement, IT, contract administration and product development) in part or in full to third parties in Switzerland or abroad. In this case, this will also affect the processing of personal data. ERV takes great care to ensure that your data is protected from unauthorized access, loss or misuse.
The data may be passed on to the following or other categories of third parties both within Switzerland and abroad:
- Service providers (both internal and external), including contract processors
- Insurance brokers and other contractual partners
- Experts and lawyers
- Previous insurers, co-insurers and reinsurers
- Cooperation partners of ERV
- Other customers of ERV (e.g. in the case of a claim)
- Local, national and foreign authorities and official bodies
- Other parties in possible or actual legal proceedings
If necessary, ERV or the data processors will consult third parties – with your consent – depending on the insurance cover to be reviewed (e.g. with your physician, therapist or hospital or with a previous insurance company). Based on your consent for the purpose of checking insurance coverage, these persons are explicitly released from their duty to observe confidentiality in respect of ERV and the processor.
Your personal data is only passed on to processors abroad if they are subject to adequate data protection laws. If data is transmitted to a country without adequate data protection, ERV guarantees adequate protection by means of sufficient contractual guarantees or relies on the exception of consent, contract performance or the establishment, exercise and enforcement of legal rights. Contractual guarantees are based on standard data protection clauses accepted by a supervisory authority.
Data may also be passed on for the purpose of detecting or preventing insurance fraud, especially to insurance companies both within Switzerland and abroad, as well as to law enforcement agencies.
We use cross-site tools to present you with personalized information for marketing purposes, including outside of our website. These enable personalized online ads and extended analysis and evaluation options about the target group and user behaviour. The data may also be transferred to third countries outside the European Economic Area that do not have an adequate level of protection under data protection law (in particular the USA) . There is a possibility that authorities may access the data without there being any legal remedy to counter this.
ERV processes personal data for as long as is necessary to fulfil the above-mentioned purposes. In principle, your data will be erased as soon as it is no longer required for the above-mentioned purposes. ERV stores your data in order to meet its statutory retention obligations. Furthermore, ERV stores your data for as long as claims can be brought against ERV companies.
The policyholder or beneficiary is obliged to provide the data required to assess the risk, execute the contract and handle claims. If he or she fails to meet that obligation, ERV may refuse to conclude the contract or parts thereof or to pay all or part of the claim.
With regard to processing personal data, ERV takes adequate technical and organizational measures to prevent unauthorized access and other unauthorized processing. These measures are based on the international standards in this area and are reviewed regularly and adjusted when necessary.
Please note that communication via e-mail is not usually encrypted. It is possible that data can be lost, intercepted and/or manipulated by third parties. ERV takes appropriate technical and organizational security measures to prevent this from happening within the ERV system. Your access device (PC, smartphone, etc.) is, however, located outside of the secure area over which ERV has control. As an Internet user, it is your responsibility to find out about the necessary security precautions and to take appropriate measures (e.g. up-to-date antivirus software, etc.).
If you contact ERV using the online form, the data you enter into this form is transmitted to ERV from your PC in an encrypted format in accordance with internationally recognized security standards, in order to protect it from being misused by third parties.
For ERV services, you can contact a customer service centre employee via live chat or co-browsing. This enables ERV to offer you simple and fast advice.
To grant this service, ERV relies on the following providers: