Data Protection Policy
Data Protection Policy for Brookfield Underwriting AB
We value your privacy and take the processing of your personal data very seriously. We process your personal data in accordance with the General Data Protection Regulation (GDPR), the Swedish Data Protection Act, and other applicable legislation and regulatory requirements. This data protection policy describes how we collect, use, store, and share personal data, as well as what rights you have and how you can exercise them.
We primarily process personal data in order to enter into, administer, and fulfil insurance agreements. When you contact Brookfield and use our services, you accept our data protection policy and consent to our use of electronic communication channels to communicate with you.
Data Controller
Brookfield Underwriting AB
Company reg. no. 556799-5351
Box 5775, 114 87 Stockholm
Brookfield is the data controller for the processing of your personal data.
How we use your personal data
Insurance quotations, purchase and renewal: Brookfield processes personal data in connection with insurance quotations or the purchase of insurance, or when renewing the insurance agreement. Legal basis: contractual obligation.
Customer administration: We process personal data to manage the customer relationship and communicate important changes. Legal basis: contractual obligation.
Enquiries: Data is processed to respond to questions by telephone, email, or other channels. Legal basis: legitimate interest.
Customer satisfaction: We process personal data for customer surveys and analyses. Legal basis: legitimate interest.
Statistics and service development: We analyse claims statistics and develop insurance products. Legal basis: legitimate interest.
Comply with legal obligations: We process personal data in accordance with applicable laws, such as accounting and anti-money laundering legislation. Legal basis: legal obligation.
What personal data we collect
Which data is collected depends on which insurance you have or are applying for. It may include:
- General identification: name, address, email, telephone number, date of birth, etc.
- Identification numbers: personal identity number and registration number.
- Financial information: bank and account numbers, billing address.
- Insurance information: claims history, ownership details, and information about the insured property.
Cookies
We use cookies on our web pages. Read more about how we use them here: brookfield.se/cookies. Our full cookie policy is available here: brookfield.se/cookie-policy-eu.
Sources from which we obtain personal data
We collect data from you, your insurance intermediary, or partners. Where necessary, information may be obtained from public registers.
Who we may disclose your personal data to
Brookfield applies confidentiality. Data may be shared with:
- Insurers and intermediaries in order to fulfil agreements.
- Claims service providers in connection with claims handling.
- Other insurance companies where shared cover is required.
- Authorities where there is a legal obligation.
Use of data processors
We enter into data processing agreements with companies that process data on our behalf. They may only process data in accordance with our instructions, e.g. providers of financial services.
Where your personal data is processed
Personal data is processed mainly within the EU/EEA/United Kingdom. When transferring to a third country, we ensure that the level of protection corresponds to the EU standard.
Storage and deletion of personal data
We retain data for as long as required by the purpose or by law. Examples:
- Contact, quotation and free one-month insurance: data is deleted after 3 years if no insurance is taken out.
- Existing customer: data is retained for the duration of the agreement.
- After the customer relationship ends: data is retained for at least eleven years, taking limitation periods into account.
Rights and access to your data
You have the right to:
- Request access to and rectification of your data.
- Request erasure when the data is no longer needed.
- Restrict processing in certain cases.
- Object to processing based on legitimate interest.
Complaints
If you have complaints about our processing of personal data, please contact our Data Protection Officer at dataskydd@brookfield.se. You may also contact the Swedish Authority for Privacy Protection via www.imy.se.
Data Protection Officer
Brookfield has a Data Protection Officer who monitors that personal data is handled correctly. Contact us via dataskydd@brookfield.se.
Changes to Brookfield’s data protection policy
We update this policy as needed. The latest version is always available on our website.