Privacy Policy

Depending on the situation, we may process the following personal data: your identity data, your contact data, health data, financial data, social security number, etc. We process this personal data solely for one of the reasons listed under point 4.

If you want to know whether Vanbreda processes your personal data, and if so which data, you can ask to view it. Vanbreda will then provide you with the most comprehensive list possible of the personal data being processed in its open files. Given the large volume of personal data processed by Vanbreda, we ask you to specify which information or which processing activities your request relates to. Personal data which only exists in back-up or log files, or which cannot be directly linked to you, will not be included. Given the sensitivity of health data, this is not sent by default. In this case, we ask that you give us details of a doctor to whom we can send the data, so that they can make the data available to you.

If it appears that the personal data we are processing about you is incomplete or not (or no longer) correct, you can correct or complete said data (or have this done).

Your personal data is automatically deleted over the course of time. You will find a more detailed explanation of this in point 6. If you believe that your personal data should not be processed, you can ask Vanbreda to delete said data sooner.

Due to a certain situation in which you find yourself, it may that you cannot agree to any processing on the basis of Vanbreda's legitimate interests. In this case you can raise an objection to the processing of your personal data and Vanbreda will have to consider the merits of your specific interests as well as its own. Only if there are imperative, legitimate reasons that outweigh your interest (e.g. combating fraud) or in the context of a (future) legal action, will Vanbreda continue to process your personal data.

If you object to the processing of your personal data for direct marketing, Vanbreda will end all processing for this purpose.

You can ask Vanbreda to restrict the processing of your personal data if, for example, time is needed to check the accuracy of your personal data, where the processing is not legal, if Vanbreda no longer requires this personal data (but you do in the context of a legal action) or if you have raised an objection to a specific type of processing and the consideration of competing interests still needs to be carried out.

For personal data that you have provided to Vanbreda, and data that was obtained with your consent or on the basis of a contract and which is being processed by an automated procedure, you can ask that it be transferred to you or someone else.

In some of our processes, decisions are taken without any human intervention. An example of this is the reimbursement of a claim for which it is clear even to a computer that for the specific situation a reimbursement is obviously the outcome. You are informed of the existence of this kind of automated decision-making, and of the underlying logic used as part of the process itself. You can always get in touch with your contact person at Vanbreda if you have any questions about these automated decision-making processes or if you do not agree with a decision and wish to provide additional information.

You can withdraw your consent at any time for the personal data processed by Vanbreda on the basis of your consent. If you withdraw your consent, Vanbreda may no longer be able to provide certain services.

If you wish to exercise one of these rights, it is important for you to :

• formulate your question to Vanbreda clearly (including which information or activity your request relates to, which type of insurance, your customer number, etc.);
• identify yourself (e.g. using the secure online platforms or a copy of your identity card).

Depending on the scope and impact of your request, Vanbreda may ask for additional information.

The best idea is to send your request to your contact at Vanbreda.

For questions or complaints about exercising your rights, you can also address the Vanbreda Data Protection Officer using our form, by e-mail at dpo@vanbreda.be or by post to Vanbreda Risk & Benefits NV, attn. Data Protection Officer, Plantin en Moretuslei 297, 2140 Antwerp, Belgium.

You can find more information about the legislation relating to the protection of personal data at cnpd.public.lu, the website of the Luxembourgish Data Protection Authority. You can also submit complaints to them.

Vanbreda needs certain personal data in order to meet its legal obligations. If it does not have this data available, it cannot sign or renew any contracts with you, or carry out a transaction that was requested by you or by a third party for your benefit.

Legal provisions that cause Vanbreda to process your personal data include :

• Insurance legislation, in particular the law dated 4 April 2014 and the law dated 2 August 2002 relating to the supervision of the financial sector and financial services
• Anti-money laundering legislation, in particular the law dated 18 September 2017
• Sanctions legislation, in particular the European Regulation No 2580/2001/EC
• Accounting and tax requirements.

Some personal data is needed in order to be able to sign a brokerage contract or to provide the service that you expect from Vanbreda when implementing the contract.

Vanbreda's services include, among others, providing advice, offering and recommending insurance contracts, the performance of preparatory work for concluding insurance contracts and the actual conclusion of insurance contracts. Finally, Vanbreda will also help you manage the implementation of insurance contracts. It assists with the preparation of claims and may, if necessary, appoint experts or contact other affected parties and provide them with your personal data.

If you want to make use of a third-party payment system, Vanbreda will also need to process your personal data.

Vanbreda will also process your personal data in order to further its legitimate interests.

Processing for this reason includes, among other things :

• Customer management
• Central administration within the Vanbreda Group
• General business management, including tracking profitability
• Risk management, combating fraud and compliance
• Legal support and defence of our rights
• Quality control and improvement of our services
• Internal audit
• IT support for other purposes (such as use of pseudo-anonymised data for testing programs, searching for the causes of and solutions for IT problems, etc.)
• Network and information security, including access controls
• Studies and statistics
• Analysis and use of the website, apps, etc. with a view to improving our products and services
• Direct marketing to existing customers (commercial mailings, invitations to events and seminars, sending out surveys, etc.)

For this processing, Vanbreda will always balance its own interests against your rights and reasonable expectations. If you do not agree with one of the above forms of processing, you may lodge an objection as described in point 3.

Vanbreda will also process your personal data in order to further the legitimate interests of third parties such as clients, employers and insurers. This will only occur when the interest of the other party outweighs the impact on your rights and reasonable expectations,

Processing for this reason includes, among other things:

• Reporting statistics to clients and employers, for example in order to improve working conditions, provide targeted training, etc.
• Requesting and comparing insurance products
• The provision and membership of insurance policies (such as accident-at-work insurance)

Wherever possible, this data is communicated to the parties involved on an anonymised basis.

Vanbreda wants to offer you products and services that are relevant to you. In addition, we also see it as our job to inform you of new business risks that may, for example, threaten the continuity of your company.

In order to give you the best possible advice, Vanbreda will use the data that it has available. Vanbreda uses your personal data in order to carry out direct marketing. By analysing your personal data, you can enjoy a personalised approach and Vanbreda can present you with specialised proposals. If you would prefer this not to be the case, you can always let us know.

Certain personal data will only be processed because you have provided Vanbreda with your consent for us to do so. You can remove your consent at any time, without providing any justification.

The withdrawal of consent means that these processes, based on your consent, will no longer be possible in future. The withdrawal of your consent does not mean that processing that occurred in the past on the basis of your consent is suddenly no longer valid.

Your personal data can reach Vanbreda in a number of ways :

• You may have shared them yourself, initially or in the course of our collaboration
• Vanbreda received your personal data from someone close to you (such as your family)
• Vanbreda received your personal data as part of the implementation of a contract with your employer, where you were an insured person/beneficiary/contact
• Vanbreda found said personal data in a public source (e.g. the Belgian Official Gazette, LinkedIn, etc.)
• Vanbreda purchased said data from third parties, e.g. prospect databases to which you had given your consent;
• Someone else provided your personal data to Vanbreda as part of the implementation of an insurance contract, or the management of a claim;
• Someone else provided your personal data to Vanbreda as part of a contract between Vanbreda and said third party (e.g. a hospital invoice that AssurCard passed directly on to Vanbreda);
• Indirectly (for example from surfing our website).

If you provide Vanbreda with someone else's personal data, it is important that this person is informed about it and referred to this privacy statement.

Your personal data can be transferred to other companies within the Vanbreda Group. In this way, each Vanbreda company can see the information relating to customers, and does not need to ask for the same information every time.

This obviously does not apply to your medical data. This is only processed by the company within which it was collected.

Within the Vanbreda Group, only those people who need the information for processing will have access to your personal data. The data they can access will depend on the reason why they need this access.

Vanbreda may provide your personal data to parties who are involved in implementing a contract or policy. This may be, for example, (potential) insurers, the contact person at a company, (medical) experts and consultants, banks, health insurance funds, etc.

Your medical data is handled with particular care. In order to avoid processing any unnecessary data, we ask everyone to respect the agreements in the insurance policy. In some cases, therefore, you may be asked to send medical information directly to the consulting physician of the insurance company.

If Vanbreda shares this data with a third party (e.g. the insurer or your own doctor), this is only in the context of implementing a contract or paying for a claim.

Vanbreda may also provide your personal data to parties who are involved in handling a claim. These may be, for example, the other party (or their insurers), (medical) experts and consultants, banks, etc.

In order to provide its services as smoothly as possible, Vanbreda uses a number of suppliers and subcontractors. In order to perform their tasks correctly, it may be that they are given access to your personal data. By signing a data processor contract with them, Vanbreda defines some very clear limits about what your personal data may be processed for, and where. In addition, Vanbreda imposes the necessary security standards.

If Vanbreda is legally required to do so, it will share your personal data with the public authorities.

Important: Vanbreda will never sell your personal data.

Vanbreda endeavours to process your personal data within the European Economic Area as far as possible, unless otherwise required to implement a contract (e.g. contact with a local expert for a claim abroad). If this is not the case, Vanbreda will inform you about it.

Vanbreda will only retain your personal data for as long as Vanbreda needs said data for the implementation of its tasks, and representing its interests.

We will delete your data in our active systems at the latest on the expiry of the liability period for potential complaints.

Your data is stored in our back-up systems until it is removed from the storage system. When a back-up system needs to be used, the data that is no longer needed for the defined tasks is first removed from the active systems.

Please contact us via email at simplomus@vanbreda.lu or by writing to Vanbreda Risk & Benefits S.A. / 2-4, rue du Château d'Eau / L-3364 Leudelange / Luxembourg. Alternatively, you can call us under +352 46 54 03.

For any questions and problems relating to the processing of your personal data, you can also contact our Data Protection Officer (DPO) at dpo@vanbreda.be, using our form or by post to Vanbreda Risk & Benefits NV, attn. DPO, Plantin en Moretuslei 297, 2140 Antwerp, Belgium.