DATA PRIVACY STATEMENT
Below, we, the FWU Group; Boschetsrieder Straße 67, D – 81379 Munich; (FWU AG, FWU Life Insurance Lux S.A., FWU Life Insurance Austria AG, FWU Invest S.A.; as applicable according to the imprint) hereinafter also referred to as "FWU", "we", "us", "our", inform you about the processing of your personal data in connection with the use of our websites:
Should you have any other questions concerning data protection in connection with our website or the services offered on the website, please contact the relevant Data Protection Officer/ the data protection support team:
- FWU AG: email@example.com
- FWU Life Insurance Lux S.A. (Luxembourg): firstname.lastname@example.org
- FWU Life Insurance Lux S.A. (Germany): email@example.com
- FWU Life Insurance Lux S.A. (Italy): RPD@fwulife.it
- FWU Life Insurance Lux S.A. (France): DPD@fwulife.fr
- FWU Life Insurance Lux S.A. (Spain): firstname.lastname@example.org
- FWU Life Insurance Lux S.A. (Belgium): email@example.com
- FWU Life Insurance Austria AG: firstname.lastname@example.org
- FWU Invest S.A. (data protection support team): email@example.com
In the following situations, we collect and use personal data directly from our users or from other sources (as presented below):
Every time a user accesses our website, our system automatically records data and information from the requesting computer system. In this context, the following data ("technical information") are collected:
- Information on the browser type and version
- The user's operating system
- The user's Internet service provider
- The user's IP address
- Date and time of the access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
The data are also saved to our system's log files. These data will not be stored together with other personal data of the user.
In this context, we collect and use this technical information for purposes related to (network) security (e.g. to be able to combat cyber-attacks), marketing, to gain a better understanding of our users' needs, to continually improve our website and to enable the delivery of the website to the respective user's computer.
The objective of the storage in log files is to ensure the operability of the website. Moreover, we use the data to optimise the website and to ensure the security of our information technology systems. In this connection, the data are not analysed for any marketing purposes.
The legal basis for the temporary storage of the data and of the log files is Art. 6 (1) f GDPR.
Our website uses tracking tools. Tracking tools are used to boost the efficiency of our website.
For further information on the individual tools we use, their purpose and legal basis, please refer to our Tracking Tool Policy.
On our website, we use social media plugins in form of a “two-click solution”. With the "two-click solution", your data will only be transmitted to the respective social media.
The use of the plugins on our website is based on our legitimate interests in connection with marketing purposes (Art. 6 (1) f GDPR).
For further information on the individual plugins, please also refer to our Cookie/Tracking Tool Policy.
On our website, we offer various different services and applications. To render these, we need to collect and process personal data of the user or of our customer.
On our website, you can subscribe to a free newsletter. The data you enter in the input dialogue when subscribing to the newsletter will be sent to us and processed by us:
- First Name, Last Name
- E-Mail Address
- Post Code
- Telephone Number
Additionally, the following data are collected during the subscription:
- IP address of the requesting computer
- Date and time of the registration
In connection with the data processing for the transmission of newsletters, no data will be forwarded to third parties. The data will be used exclusively for the purpose of sending the newsletter.
We process your data in connection with the newsletter in order to send you news that inform you about interesting topics from the FWU Group. Moreover, we process and use the entered e-mail address for the purpose of sending you personalised offers in connection with the newsletter.
If a link from the newsletter takes you to our web pages, your use of the Link will also be deemed to have permitted us to process and use your IP address, geo-data, web beacons or similar technologies in order to check whether the offers you are sent are in accordance with your requirements.
The legal basis for the processing of data after the user's subscription to the newsletter with the user's consent is Art. 6 (1) a GDPR.
There is a possibility that your data may be analysed in order to evaluate the preferences of our members ("statistical analysis") in a data warehouse for the sake of interest-oriented marketing, an individualised approach and ongoing optimisation of our business process. The objective of this processing is to gain a better understanding of what our customers expect from us and to be able to offer you custom-tailored communication. Moreover, these analyses help us in the fields of fraud detection, audit and ensuring security; thus, we engage in this processing in order to protect our legitimate interests (Art. 6 (1) f GDPR).
2.2.3. Customer Portal
On our website you can log in to our customer portal. For the log in you’ll have to use a username and password given to you by us. Once you are logged in to the customer portal, you can change your master data as well as your contact data and your bank account details.
The objective of this processing is to make it easier for yourself to have a look at the personal data we collected from you as well as informing us about changes, e.g. changes of address due to moving.
The legal basis for the processing of your personal data in connection with the customer portal are our legitimate interests (Art. 6 (1) f GDPR) to guarantee an efficient data communication-system to our customers.
For further information on the customer portal please refer to your insurance policy contract.
2.2.4. Find an Advisor
On our website you can provide us with your post code. We are processing your post code in order to provide you with contact data of an advisor who can help you with further requests concerning our provided services.
The legal basis for the processing of your post code in order to provide you with contact data of an advisor is our legitimate interest (Art. 6 (1) f GDPR) to guarantee an excellent and efficient customer care.
2.2.5. Request a Call back
On our website you can provide us with your contact data, such as your name, e-mail address, phone number as well as your post code, in order to request us to call you back.
We process your data for pre-contractual reasons, in order to comply with your contract (Art. 6 (1) b GDPR) as well as to protect our legitimate interests such as providing you with efficient customer service (Art. 6 (1) f GDPR).
2.2.6. Request a Brochure
On our website you can provide us with your e-mail-address in order to request a brochure. We process your e-mail-address to provide you with such requested brochure.
The legal basis for the processing of data for receiving a brochure with the user's consent is Art. 6 (1) a GDPR.
2.2.7. “Work with us”
On our website you can provide us with your contact data such as your name, e-mail-address, phone number and province in order to apply to work with us as an advisor. We process your data in order to contact you.
The legal basis for such processing your data are pre-contractual reasons (Art. 6 (1) b GDPR).
2.2.8. Sales Information System (SIS)
On our website brokers can log in to the Sales Information System. For the log in you’ll have to use a username and password given to you by us. Once you are logged in to the Sales Information System, you can see information on your closed contracts.
The objective of this processing is to make it easier for yourself to retain an overview on your work and closed contracts.
The legal basis for the processing of your personal data in connection with the Sales Information System are contractual purposes (Art. 6 (1) b GDPR) as well as our legitimate interests (Art. 6 (1) f GDPR) to guarantee efficient working conditions.
In case Art. 6 (1) f GDPR represents the legal basis for the processing, our legitimate interests comprise the following points apart from the purposes listed above:
- Protection of the company against material and non-material damage
- Professionalisation of our services
- Cost optimisation (control and minimisation)
If we are required by law to do so, we may process personal data e.g. in order to comply with retention obligations under commercial or tax law or to meet requirements under security law. For further information on retention periods, please refer to "Duration of the Data Processing".
With respect to mandatory statutory or contractual requirements, we have indicated the mandatory fields that need to be completed in the input dialogues on our website so that we can perform the contract or service you request.
Your personal data will be erased as soon as they are no longer needed for the said purposes. Personal data may be retained for the period during which claims may be asserted against the FWU Group (statute of limitations of three to thirty years). Additionally, the personal data will be stored insofar as and for as long as the FWU Group is required to do so by law. Among other things, the obligations to furnish evidence and the retention obligations are governed by the Commercial and Tax laws and Anti-Money Laundering laws.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1), including profiling based on those provisions.
The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
In order to be able to offer you our products and services on the basis of our contractual obligations or under consideration of our legitimate interests, we may need to forward your personal data to third parties in or outside the FWU Group. These recipients can be categorised as follows:
- Service Provider
In this context, personal data may be transmitted to third countries or international organisations. For your protection and the protection of your personal data, such data transfers are subject to appropriate safeguards pursuant to and in accordance with the statutory requirements (especially application of EU standard contractual clauses), or the EU Commission has issued an adequacy decision (Art. 45 GDPR).
For information on EU standard contractual clauses, refer to [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF]. The EU Commission makes the information on its adequacy decisions available under [https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en#dataprotectionincountriesoutsidetheeu].
If you want to request a copy of the security measures applied, please contact the above listed (1. Controller) data protection officer or the data protection support team.
Moreover, we are under the statutory obligation to provide personal data to national and international authorities ((Art. 6 (1) c GDPR) in conjunction with local and international regulations and treaties).
The FWU Group endeavours to ensure fair and transparent processing. To us, it is important that data subjects can exercise both their right of objection and, if the respective legal conditions are on hand, the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure ("right to be forgotten") (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your right, you can write an e-mail to the relevant Data Protection Officer or the data protection support team who are outlined under 1. Controller. Please note that we will process your personal data pursuant to Art. 6 (1) c GDPR in order to be able to process your request and for identification purposes.
Furthermore, you may file a complaint with a supervisory authority. Supervisory authority responsible for the FWU Group:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
D - 91522 Ansbach
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
CNPD (Commission Nationale pour la Protection des Données)
1, Avenue du Rock'n'Roll
Agencia Española de Protección de Datos
C/ Jorge Juan, 6
Tel: 901 100 099 / 91.266.35.17
GARANTE PER LA PROTEZIONE DEI DATI PERSONALI
Piazza di Monte Citorio n. 121
00186 ROMA (RM)
Fax: (+39) 06.69677.3785
Tel: (+39) 06.696771
A - 1080 Wien
Tel: +43 1 52 152-0
CNIL (Commission Nationale de l'Informatique et des Libertés)
3 Place de Fontenoy
75334 PARIS CEDEX 07, France
Tel: +33 (0)18.104.22.168.22
Fax: +33 (0)22.214.171.124.00
Commission for the Protection of Privacy
Rue de la Presse 35,
1000 Brussels, Belgium
Tel: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
If you have given us your consent to the processing of your personal data, we hereby inform you that you can revoke this consent whenever you wish.
If you have given us your consent for the newsletter, you can revoke it by clicking the "Unsubscribe" link directly in the newsletter.
In all other cases or if you have difficulties revoking your consent on this website, please feel free to contact the relevant Data Protection Officer or the data protection support team who are outlined under 1. Controller.
Please note that your revocation of consent will only apply in the future and does not affect the legitimacy of the processing that has taken place in the past. In some case, we may be entitled to continue to process your personal data despite your revocation on a different legal basis, e.g. to fulfil a contract.