AGL Data Privacy Notice – Genial Life Iceland


Allianz Global Life dac (“AGL”), a part of the Allianz Group, is an Irish authorised insurance company providing insurance products and services on a cross-border basis. It operates through distribution agreements with investment firms, insurance brokers and banks, as well as online.

AGL is committed to safeguarding the personal information collected from our Policyholders/Insured Persons and their Beneficiaries. In accordance with article 13 of Regulation (EU) 2016/679 (hereinafter the “General Data Protection Regulation” or “GDPR”), this Data Privacy Notice explains how and what type of personal data will be collected, why it is collected and to whom it is shared or disclosed.

GenialLife is an AGL product sold via an online platform. GenialLife cares about the privacy and security of its customers' data. For this reason, it complies with current regulations for privacy protection and uses the most sophisticated security systems for online transmission and storage of your personal data.

Please read the following information carefully.

1. Who is the Data Controller?

A data controller is the natural or legal person, public authority, agency or other body which (alone or jointly with others) determines the purposes and means of the processing of personal data. Allianz Global Life dac, with registered office in Maple House, Temple Road, Blackrock, Dublin, A94 Y9E8, Ireland, phone no. +353 1 2422300 e-mail dataprivacy-agl@allianz.com. is the Data Controller as defined by the GDPR.

2. What type of personal data is collected?

AGL processes (collects, records, stores, shares and otherwise uses) the personal data of the Insured Person and the Beneficiaries (hereinafter each one of these may also be identified as the “Data Subject”), such as their name, address, gender, date of birth, place of birth, telephone number, e-mail address, tax identification number, identity document number and bank details (the “Data”). AGL respects your right to privacy and will ensure that your personal data is kept securely and is processed in accordance with applicable data protection laws, including the GDPR, and the AGL’s data protection policies.

AGL may also collect and process “special categories of personal data” about Data Subjects, such as health data, searches of public sources for evidence of criminal convictions or political position holders.

Genial Life only asks for the personal data necessary to provide its services. Therefore, you can visit our site, get information about us, and even quote your life insurance premium completely anonymously. This is because Genial Life requests your personal data only when you decide to save your quote or purchase a policy: these data are necessary to offer you a locked-in price quote for the policy contract.

3. What is the legal basis for the processing of the Data?

The personal data provided by the Data Subject or by other authorized individuals, will be processed for the following purposes:

For those purposes indicated below where it is indicated that AGL does not require Data Subject’s explicit consent, the personal data will be processed based on performance of a contract (refer to 3A & 3B below) and/or to comply with the legal obligations (refer to 3C above). The Data Subject may, at any time, withdraw any consent granted as set forth in section 8 of this Data Privacy Notice.

Please note that if you fail to provide accurate information or object to processing of your data it may result in a delay or an inability to process a claim for benefits under the pension product.

Purpose
Is explicit consent required?
Is provision of data mandatory?
What are the consequences of the refusal to provide personal data?
3.A INSURANCE RELATED PURPOSES
Fulfilment of pre-contractual and contractual obligations and obligations deriving from the insurance relationship with the Data Subject. Execution of the Contract, including risk evaluation, premium collection, prevention, and identification of fraud as well as purposes in connection with the handling and settlement of claims and disbursement for other reasons. Handling of specific requests of the Data Subject, as well as for the provision of the benefits related or ancillary to the Contract. Yes – AGL will obtain express consent only for “special categories of data” such as data concerning the health of the Data Subject and processed inside or outside the European Economic Area (EEA) in order to execute and administer the Contract. Yes – the provision of the personal data, including granting of the consent to processing of health-related data, is mandatory. In case of refusal to provide the data, AGL may not be in position to execute and administer the Contract.
3.B ADMINISTRATIVE PURPOSES
Carrying out of administrative - accounting activities and those concerning the performance of insurance activity, to which AGL is authorized such as the redistribution of the risk through co-insurance and/or reinsurance No Yes - the provision of the personal data, is mandatory. In case of refusal to provide the data, AGL may not be in position execute and administer the Contract and the related benefit request.
3.C PURPOSES SET FORTH BY THE LAW
Compliance with legal obligations (e.g. fiscal, accounting and administrative obligations) required under EU regulations or orders issued by the competent national authorities and other public bodies. No Yes - The provision of personal data is mandatory for the purposes set forth by the law. The refusal to provide the data would prevent AGL from the fulfilment of the obligations set forth by the law.
3.D MARKETING PURPOSES
Carrying out of marketing activities by the Data Controller or the other companies of the Allianz Group or by selected third parties through the sending of advertising material, direct sale, carrying out of market research, commercial communications concerning services and products of AGL as well as products and services of the Allianz Group or third companies (business partners of AGL) by traditional and/or distance communication means (such as email , phone and any other form of electronic communication). Yes – AGL shall obtain explicit consent from the Data Subject No - The provision of data for marketing purposes is optional. In absence thereof, the Data Subject shall not be able to receive marketing communications specific for their profile.
3.E PURPOSE OF SENDING COMMUNICATIONS IN THE ELECTRONIC FORMAT
Sending pre-contractual, contractual and ongoing documentation through electronic means of communication Yes - AGL will obtain the express consent of the Data Subject. No - The provision of personal data for sending electronic communications is optional. In absence of the option, the Data Subject should not receive electronic communications.

4. How is the Data collected and processed?

AGL will obtain the personal data directly from Data Subject and/or from the distribution chain, professional associations, and public authorities.

In relation to all the purposes mentioned above, the personal data will be processed manually or by using electronic means which are adequate for the storage, safeguard, and communication of such data. For such purpose, all the necessary security measures will be taken to ensure that there is a sufficient level of protection from non-authorized accesses, loss, or accidental destruction of the data.

For such purpose, access to AGL’s databases and records will be limited to i) the employees of AGL specifically identified and authorized to carry out the processing; ii) individuals external to the organization of AGL such as business partners, Allianz Group companies, agents, and suppliers where contractually or legally required. We may also communicate your data to government agencies or entities, supervisory authorities, or other authorities where required by law.

5. Who will have access to the Data?

For the purposes set forth in section 3A, 3B and 3C of this Data Privacy Statement, the Data of the Data Subject may be disclosed to the following entities acting as independent data controllers: public authorities and organisations, consortia and trade associations, insurance brokers, banks, and asset management companies.

For the purposes set forth in section 3A, 3B and 3C of this Data Privacy Statement, the Data of the Data Subject may also be shared with the following parties who operate as data processors under our instruction: members of Allianz Group, companies in the distribution chain; technical consultants and other persons providing auxiliary services on behalf of AGL, such as legal advisers; financial settlement agencies; claims management; legal protection consultants and support centres; data storage companies or IT service providers; mail delivery companies; audit companies and consultants; business information companies for financial risk analysis; fraud control agencies.

For the purposes set forth in section 3D of this Data Privacy Statement, the Data of the Policyholder may be shared with the following parties who operate as data processors under our instruction: Advertisers and advertising networks to send marketing communications, as permitted under local law and in accordance with Policyholder’s marketing preferences. An up-to-date list of those entities may be requested, free of charge, by contacting AGL as set forth in section 9 of this Data Privacy Notice.

6. Where will the Data be processed?

The personal data may be processed both inside and outside of the European Economic Area (EEA) by the parties specified in Section 5 above, subject always to contractual restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. AGL will not disclose personal data to parties who are not authorized to process them.

Whenever AGL transfers personal data for processing outside of the EEA by another Allianz Group company, it will do so on the basis of Allianz’ approved binding corporate rules known as the Allianz Privacy Standard (Allianz BCR) which establish adequate protection for personal data and are legally binding on all Allianz Group companies. Allianz BCR and the list of Allianz Group companies that comply with them can be requested as set forth in section 9 of this Privacy Notice. Where the Allianz BCR do not apply, AGL will instead take steps to ensure that the transfer of the personal data outside of the EEA receives an adequate level of protection as it does in the EEA. Details of what safeguards AGL relies upon for such transfers (for example, Standard Contractual Clauses) can be requested by contacting AGL as detailed in section 9 of this Data Privacy Notice.

7. How long will the Data be kept for?

The personal data collected, pursuant to paragraphs 3A, 3B, 3C and 3D of this Privacy Notice, will be retained for a period of time which is equal to the duration of the Contract (including any renewals thereof) and for the following 7 years from the expiry, termination, withdrawal from the latter, save for cases where a longer retention period is required for possible disputes, requests of the competent authorities or pursuant to the applicable legislation. Data submitted as an application but does not materialise into a policy will be retained for 12 months.

Once the retention period is over the data will be deleted or anonymized.

8. What are the rights of the Data Subject in respect of their personal data?

As set forth by the applicable legislation on data protection, the Data Subject has the right to:

  • Access a copy of the personal data held about them and to learn the origin of the data, the purposes and ends of the processing, the details of the data controller(s), the data processor(s) and the parties to whom the data may be disclosed;
  • Withdraw the consent at any time where the personal data is processed based on their consent; provided that such withdrawal shall not affect the lawfulness of processing conducted on the basis of consent prior to its withdrawal. This does not include cases where the processing is required to fulfil a legal obligation of the Data Controller or to execute a public interest task or is in connection with exercising official authority by the Data Controller;
  • Request to have the data updated or corrected so that it is always accurate;
  • Right to erase your personal data (in limited circumstances);
  • Right to data portability of the personal data you have provided to us;
  • Right to object to the processing of your personal data;
  • Request to restrict the processing of the personal data in certain circumstances;
  • Obtain your personal data in an electronic format for own use or for a new insurer; and
  • File a complaint with us and/or the Data Protection Commission as AGL’s supervisory authority. We ask that you first engage with us to provide us with the opportunity to address any concerns.

The Data Subject may exercise these rights by contacting AGL as detailed in section 9 of this Data Privacy Notice providing their name, email address, account identification and purpose of the request.

9.How can AGL be contacted?

Any queries about how the personal data is used or how to exercise the Data Subject’s rights can be addressed to the Data Protection Officer by telephone, email or post as follows:

Mail
Phone
email
DPO
c/o Allianz Global Life dac
Maple House
Temple Road
Blackrock
Co. Dublin, A94 Y9E8
00 353 1 242 2300 dataprivacy-agl@allianz.com

10. Third Party Websites

Please note that other websites that you may access from the Genial Life Website may collect information that can personally identify you. The information practices of such Third-Party Websites linked to www.geniallife.is are not covered by this Privacy Policy, and we, therefore, invite you to visit the respective websites and review their privacy policies.

11. How often is this Data Privacy Notice updated?

AGL regularly reviews this Data Privacy Notice. AGL will ensure that the most recent version is available on the company’s website https://www.allianzgloballife.com/en/disclaimers/privacy_statement/ https://www.allianzgloballife.com/en/disclaimers/privacy_statement/ and will inform the Data Subjects directly of any important amendments that may impact him/her or require his/her consent

In the event that your query is not resolved to your satisfaction, you have the right to raise the matter with the Data Protection Commission at 21 Fitzwilliam Square South, Dublin, D02 RD28 or via its website, https://www.dataprotection.ie/en/contact/how-contact-us

This Data Privacy Notice was updated on 24/10/2024.


Contact us
Email