Privacy policy and cookies
Here you can read more about how we handle personal data and how we use cookies when you visit our website
Go directly to the part about cookies >
Introduction
Europæiske Rejseforsikring A/S, facilitated by its Swedish branch office Europeiska ERV Filial (herinafter referred to as "Europeiska ERV", "we", "us" or "our") is committed to protecting the confidentiality, integrity and availability of information about our clients, suppliers, collaborators and employees, including personal data.
When processing personal data in connection with delivery of insurance service, we consider ourselves data processors, as we are processing data in order to conclude an insurance agreement with a customer. We also enter into a data processing agreement when entering into contracts with third parties that process data on our behalf, setting out instructions and terms and conditions for our and the other party’s processing of personal data.
This Data Protection Policy provides information about Europeiska ERV’s processing of personal data in our capacity as data controller. Read more about this below.
Our processing activities
We collect and process personal data in the following situations:
- When you take out and purchase an insurance
- Administration of the policy, including claims handling and issuing documents
- When corresponding with you, in order to maintain our obligations towards you and at the same time comply with the legal requirements we have to fulfill.
We collect and process personal data in connection with our collaboration with our customers. We collect only the personal data required for the agreed purpose, and we only ask our customers to share personal data where it is strictly necessary for such purposes.
What data is collected?
Non-sensitive personal data, including information about name, address, telephone number and e-mail address of our customers as well as name, job title, phone number and e-mail address of any corporate customer. In addition, we collect social security number in order to ensure clear identification of our customers. In some cases, i.e. when handling claims, we may collect and process sensitive personal data about your health in order to ensure that your and our rights are protected.
We do not collect personal data concerning you from any third party, unless we have your consent.
The purpose of and legal basis for collecting the information
We process non-sensitive personal data for the purpose of performing the contract with the customer, including:
- Issuing of insurances
- Claims handling
- Invoicing premium
Furthermore, processing is necessary as it enables Europeiska ERV to pursue a legitimate interest in being able to develop our business and services (e.g. identify customer needs and improvement of the provided service).
Europeiska ERVs services (insurance and services hereto)
We collect and process personal data about our leisure customers and corporate customers’ employees.
What data is collected?
We process non-sensitive personal data, including name, address, email address and telephone number of the customer and the customer’s employees and sensitive data concerning your health and social security data.
The purpose of and legal basis for collecting the information
We process information for the purpose of providing the insurance you have bought from Europeiska ERV. Processing is necessary to comply with a legal obligation (the insurance contract you have entered into).
Automated decision making
In some cases when entering claims or health data on our web, you may be subjected to automated claims-approval based on the input you provide. There is no risk connected to this processing, as all cases not automatically approved are deferred to manual handling by claims and medical experts.
Supplier- and collaborator administration
We collect and process personal data in relation to our suppliers and collaborators, including personal data of their staff.
What data is collected?
We process solely non-sensitive information, including contact information.
The purpose of and legal basis for collecting the information
We process personal data in order to manage the contract, to receive goods and services from our suppliers and collaborators and, where relevant, to provide professional services to our customers.
The legal basis for our processing of personal data is to fulfil the contract to which the data subject is a party. If the data subject is not a party to the contract, we process data based on a legitimate interest in relation to being able to perform the contract with our supplier or collaborator.
Visitors to our office
We collect and process personal data about visitors, including customers and other guests.
What data is collected?
In the registration process, we collect name, company and name of the host at Europeiska ERV.
The purpose of and legal basis for collecting the information
We process information for security purposes. Our legal basis for processing personal data is the legitimate interest of Europeiska ERV to ensure a high level of security.
We require visitors to our offices to sign in at the reception. We keep a record of visitors for a short period of time. Our visitor records are securely stored and only accessible on a need to know basis (e.g. to look into an incident).
Visitors to erv.se
We collect the personal data provided by you on Europeiska ERV’s website or to which you give your explicit consent.
When is collection made?
When you visit erv.se, we inform you of the collection of your personal data. The use of services on Europeiska ERV’s website, such as taking out and purchasing of insurances, filling out health declarations and reporting claims online requires that you provide certain personal data. This also applies if you register for our newsletter.
What data is collected?
The personal data collected by Europeiska ERV may comprise your name, e-mail address, address, social security number and other identification data. We also collect information about your activity on erv.se.
The purpose of and legal basis for collecting the information
Europeiska ERV collects your personal data in order to be able to issue insurances or provide a given service to you, to send you newsletters and other information relating to our business and services. Moreover, Europeiska ERV collects your personal data for the purpose of internal market analyses, targeted marketing and statistics.
Our basis for processing personal data is your consent or that Europeiska ERV aims to pursue a legitimate interest in developing its business and adapting its marketing.
Europeiska ERV’s use of cookies
Our website uses “cookies”.
A cookie is a small text file that is stored in the web browser on your computer, smartphone, iPad or any other device you use for net surfing when you visit our website. Cookies enable the recognition of your computer etc. and the collection of information about your net activity, including what sites and features are visited by your browser, and ensure the technical function of the website. In some cases, the use of cookies is the only way to make a website work as intended. A cookie is a passive file and it cannot collect information on your computer, spread computer virus or other malware. Cookies are anonymous and contain no personal data. Cookies are used by almost all websites.
Security of processing
Europeiska ERV takes information security very seriously. We have security measures in place to ensure data protection of customer information, personal data and other confidential information.
Source
Europeiska ERV collects personal data directly from you and/or any third party or public authorities.
Disclosure of personal data
We only disclose your personal data if we have your consent to such disclosure or if the law requires it for a specific purpose.
Other in the ERV-group
Europeiska ERV is a wholly owned subsidiary of the German insurance company Europäische Reiseversicherung AG, part of the German group ERGO. Europeiska ERV, in its capacity as Data Controller, does not release any personal data to Europäische Reiseversicherung AG/ERGO without the necessary security guarantees.
Other third parties providing goods or services
Europeiska ERV may engage third parties, e.g. subcontractors, in connection with our delivery of services. To this end, personal data necessary for the delivery of the agreed services may be disclosed to such third parties.
When we share data with others, we put contractual arrangements and security mechanisms in place to protect the personal data and to comply with our data protection obligations.
Professional advisers
We may disclose personal data to professional advisers like lawyers, medical advisers etc. to be able to receive advice and counselling.
Public authorities or third parties as required under and in accordance with applicable law or regulation
Occasionally, we may be ordered to disclose personal data to public authorities or third parties which we comply to if required by applicable law and regulation. The purpose may be to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights.
We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
Security guarantees and third party countries
In cases where data is transferred to third party countries (outside the EU / EEA), this is done with due regard to extra security measures where needed, including EU Standard contract clauses. You can read more about this here.
Data retention
Europeiska ERV deletes personal data when we no longer have a work-related need to process them. The retention period is fixed in relation to the obligations of Europeiska ERV under applicable law, supervisory authorities on auditing, other public authorities and to secure documentation.
Individuals’ rights
As an individual, you have certain rights over your personal data, which Europeiska ERV as data controller are obligated to fulfil.
You can contact us to get access to personal data held by us as a data controller. Similarly, you are entitled to have any inaccurate or inadequate personal data rectified. Please contact Europeiska ERV if you want to have your personal data deleted or you want to restrict or object to Europeiska ERV’s processing of such data. If you wish to exercise your right to data portability, please let us know.
Where we process personal data based on consent, individuals have a right to withdraw consent at any time. To withdraw consent to our processing of your personal data please contact us. If you no longer wish to receive e-mails with information or marketing material about Europeiska ERV, please click on the unsubscribe link in the relevant e-mail received from us.
Contact information
The data controller is Europæiske Rejseforsikring A/S, CVR no. 62 94 05 14, Frederiksberg Allé 3, DK-1790 Copenhagen V, Denmark.
If you want to exercise your rights as described above, or if you have any questions about this privacy statement or how and why we process personal data, please contact us at:
Europeiska ERV
Box 1
172 13 Sundbyberg
Telephone: +46 770 456 900
E-mail: info@erv.se
You are always entitled to know whether we process personal data about you and, if so, when including possible additional information about you. Additional information includes details about the purpose of the processing, the types of personal data and the recipients of your personal data.
Provided that the rights of others are not affected, you may receive a copy of the personal data we hold about you. You also have the opportunity to get any incorrect and incomplete personal information about you corrected.
Complaints and questions
In case of questions in regards to the processing of personal data you can send an email to dpo@erv.se.
We hope that you won’t ever need to, but if you do want to complain about our use of personal data, please send an e-mail with the details of your complaint to our customer embassy at kundambassaden@erv.se. We will consider the complaint and return.
You also have the right to lodge a complaint with the Swedish Data Protection Agency in relation to your rights and to Europeiska ERV’s processing of your personal data. For further information about how to complain to the Swedish Data Protection Agency, please refer to the Swedish Data Protection Agency website datainspektionen.se.