Our privacy notice and your personal data
We handle personal data in accordance with governmental privacy regulations, other applicable law and this privacy notice. We regularly review this policy and place any updates on this web page.
Personal data that we collect is dependent on each individual relationship and/or the insurance product concerned.
Don't worry – we do not have all below listed information about you. Below you can find information categories and examples of information pieces to help you understand, what kind of data we collect:
General information
General information is collected to identify you as a customer, to serve you better in different channels, to communicate with you or to do different type of transactions such as pay out a claim to you (financial information).
Personal information
Name, contact information, family status, date of birth, employment and employer, marketing preferences.
Identification numbers issued by government
Social security number, driver’s or other license number.
Financial information and account details
Bank account number and account details, credit information and other financial information.
Insurance and claims information
Insurance and claims information is collected to create an insurance contract or to handle a claim. We could need for example property information for your house insurance contract and medical information to handle your personal injury.
Property information
Location, property qualities and constructions, age of the property, equipment and machinery, forest information, security and surveillance, occupants, photographs.
Vehicle information
Registration number, vehicle type and qualities, driving history, bonus information, photographs.
Travel information
Hotel bookings, plane tickets, information about trips and other events.
Accident and loss history in If
Prior loss history (insurers commonly share information about their previous dealings with policyholders and claimants).
Loss information from other insurers
Information from shared loss registers (GSR).
Information about activities or animals
Sport activities, extreme sports or competitive sports, dogs, horses or other animals.
Sensitive information
Medical information
Current or former medical condition, health status, injury or disability information, medical procedures performed, personal habits (i.e. alcohol or drugs), prescription information, pregnancy, imaging results.
Legal procedure, fraud and crime information
Information about legal procedures, frauds or crimes related to you, for example, as part of liability claims or as part of physical injuries handled due to a crime. We also collect data about Anti-money laundry investigated claims and insurance frauds. We also collect data to investigate unclear insurance cases.
Trade union membership
Information about being a member of a trade union, when your insurance solution (content, price) is depending on your membership.
Other
Telephone and video recordings
Recordings of telephone and video held with our representatives, including recordings of telephone calls to our representatives and call centres as well as recordings of phone calls to you.
Interactions with us and customer contacts
E-mails, chats, online meetings, contact history, letters, information gathered during your visits on our webpage.
Social media information
Information posted on social media (i.e. customer feedback from Facebook) and made public.
Information from external sources
We may supplement information provided by you with external information sources, such as publicly available information, commercially available sources and information from our affiliates or business partners.
We collect data about you from different sources depending on your relationship with us.
Directly from you or policy holder
Example: We obtain data from you, when you interact with us through our contact channels (i.e. our homepage, phone, e-mail) and show interest in buying an insurance, buy an insurance or file a claim.
Use of services
Example: In cooperation with partners we might offer assistance on the road services to our motor insurance customers, and we collect data from such partners.
Use of our websites where we use online identifiers (like cookies)
Read more about the use of online identifiers here.
Example: we collect personal identifiers (such as social security numbers) when you perform insurance price calculations, report claims or log in to self-service platforms.
Information published by you on social media
Example: You have made publicly available information on Linkedin about your profession.
Directly from your employer, collective or other organization
Example: List of employees insured by a specific insurance policy or validation of your collective membership can be retrieved from your employer or your collective.
Directly from car partners, manufacturers, concessionaires or financial institutions
Example: We use information to administrate car manufacturers guarantee issues, present you offers tailored to your car and payment options.
Directly from car partner, other insurer, police or other public institute
Example: in collision between cars the customer insured at If can be liable for the collision and we receive information from another insurer that If is responsible for the personal injury of their customer. In collision cases we might receive contact details for the injured from another insurer, police report of the collision from the police, car repairment information from repairshop and medical information about the injury from healthcare provider.
Registers maintained by authorities, credit companies, insurers or other external parties
Example: We verify information about your car from public registers.
We use personal data in almost everything we do as that enables us to provide the best service possible. Here you can read about different ways of us using personal data.
Selling and administration of insurances
We need information to provide you insurances, to define your specific risks and to determine insurability of the risk. We use this information to give a pricing based on your risk, to determine right type of insured amounts and to tailor your coverage to suit your needs. Also we use this information for administration and to provide service in relation to your insurance.
Handling insurance claims
We use personal data to handle insurance claims, or any other claim.
Managing your relationship with you
We use personal data to identify you as a customer, to communicate with you and to send you relevant messages about our services.
Reinsurance
We can in limited cases make a reinsurance for certain risks and use personal data to reinsure those risks or file a claim to the reinsurer.
Providing services through partners
We also use your personal data to provide additional If’s partner’s services in relation to your insurance.
Developing
We use personal data, e.g. telephone recordings, to develop our business and products, to carry out market research and analysis, including satisfaction surveys.
Investigating and anti-money laundering
We use personal data to prevent, detect and investigate crime, including fraud and anti-money laundering, and to analyze and manage other commercial risks.
Reporting to public authorities
We use personal data to comply with applicable laws and regulatory obligations, and respond to requests from the public and governmental authorities.
Making statistics
We use your personal data to create statistics based on e.g. location of property.
Tracking errors on customer service channels
We use personal data, which also includes online behavioral data, to make sure our systems and services work as expected and intended.
We collect and analyze personal data, such as your web behavior or location, to send insurance related communication and other messages that you might find useful. If you are our customer or a potential customer, you might receive insurance related communication that we assume is relevant and useful for you.
This might be for example telemarketing calls, e-mails, SMS, targeted advertising, traditional paper letters or product recommendations on our websites. At the same time, we try to avoid sending or displaying irrelevant communication. We never sell personal data to third parties.
We collect statistical figures on aggregated level using web behavioral data alone, or together with other information we have about you, in order to understand how our digital services perform or function. When doing statistical analyses on aggregated level, it is done in a way that individual persons cannot be identified.
Better customer experience
We also perform online behavioral analyses to develop our services and thus provide you with better experiences. An example of such experience is making the content of our websites more relevant based on data about how visitors interact with our logged-in self-service pages together with data we already have about the visitors.
As part of our quality assurance and proactive customer service processes, we may contact you by either e-mail or by calling when you calculate the price of an insurance in our webshop but do not complete the purchase. The contact channel depends on what contact information you have provided earlier to be used for contacting you. We do this as part of ensuring that we fulfill our obligations to provide smooth digital services and ensure that you are correctly insured.
You can always opt-out from this activity. We may also use contact information from other sources, such as public registers, for conducting phone calls – even if you would not have filled in your contact details in the webshop. In case you have indicated in a potentially existing state-maintained register or non-governmental official register that you do not want to be contacted for marketing purposes, we respect your will.
Read more in Automated decision-making and profiling section.
When we use personal data to determine personal features, for analysis or to predict expected behavior, it is called profiling. If you do not want us to handle your personal data or do profiling, for direct marketing purposes, please notify us. You will still receive information related to any insurances, as we are obliged to give you that.
We rely on legitimate interest for performing statistics and analytics, and for activities that ensure our customers or potential customers are being correctly insured. Meanwhile, when doing Advanced analytics & Targeting by combining online behavioral data with other information we have about you, we do it based on your consent.
How consenting to Advertising & Targeting Cookies and Advanced Analytics & Targeting affects your experience
When visitors enter our websites, we may display a notification and offer you the possibility consenting to Advertising & Targeting Cookies and Advanced Analytics & Targeting. For more information about such consents and how to manage your consent settings, please read our Cookie Policy.
This chapter describes the effects of consenting to Advanced Analytics and Targeting. We may combine data about your behavior on our website with other information we have about you for performing analyses of individual persons’ behavior and interests. We may also personalize the content of channels we serve you based on information we have about you.
Online behavioral data can be connected to data we have about you for example when you have logged in to self-service interfaces (such as MyPages / MyBusiness). These kinds of connections are based on the possibility to connect a browser to a person with other information that you have provided us and can be done for all your visits where a connection is available depending on the information that you have provided at any time when using our services.
Information you have provided us using different devices like desktop computer or mobile phone, enables also connecting multiple devices and channels into your user profile. For example, if we observe that you have bought a certain type of insurance by calling our customer service, we may stop showing sales related online ads for that type of product. We may also stitch information about you with the information third party advertisers have, for example by matching e-mail addresses, to provide you with more relevant and targeted ads.
When handling data about you, when possible, we anonymize or pseudonymize the information so that individual persons cannot be identified solely based on the stored information. For more information, please read “Data storing and security” later in this document.
Depending on the purpose and nature of information, your personal data is processed lawfully based on one of these legal grounds:
- Processing is necessary either for conclusion or for performance of an insurance contract. For instance, information about the insured property and your belongings, risk related information, provided prior contract is concluded, as well as any information provided during the claims handling process is processed lawfully based on this legal ground
- You as an individual have given us consent to process your data, such as that pertaining to health claims, or you have consented to Advanced Analytics and Targeting. You have rights to withdraw such consent for further processing at any time. However, such withdrawal may affect validity of your insurance coverage and your availability to use our services.
- Processing is necessary for the purposes of legitimate interest of us or other third parties, and your privacy is sufficiently safeguarded. Processing based on this ground takes place when we process your data to prevent fraud or to send to you as our customer direct marketing communication or to maintain security of our IT systems; or when it is necessary to cooperate with our partners
- Processing is necessary to protect your or another person's vital interest. An example would be for travel insurance in case of accident, when we exchange information with hospitals to proceed with necessary medical manipulations
- Processing is necessary for compliance with a legal obligation to which the controller is subject. For instance, we are required to submit data about your Compulsory Motor Third Party Liability insurance to the Motor Insurance Bureau.
Automated decision-making and profiling means that we can make decisions with no manual interference. For example, it can mean automatic pricing in our sales system based on the information inserted to the system or it can be automatically paying out a webclaim based on the information given by you as you fill in our webclaims form. In this way, we can offer our customers better and smoother service. We inform our customers about fully automated decision-making in advance, if those automated decisions can affect you significantly.
Insurance claims handling
We use automated decision-making in our claims handling process as part of our webclaims service and other claims handling. Automated decisions are based on the information given to us, and can be used to i.e. automatically calculate right amount of compensation. You cannot object to such automated decision making, however, you can contact us and ask as to review the claim’s decision.
Insurance sales process
We use automated decision-making in our insurance sales process as part of our webshop and other channels. Automated decisions are based on the information given to us, and our systems then automatically calculate the price based on information such as vehicle model, claims history, age, region or other factors. This is mandatory when buying insurance; when buying insurance, you cannot object to such automated decision making. If you have any questions regarding your offer you can contact us.
Direct marketing
Profiling means predicting your expected behavior based on information about you. In marketing, we use profiles to send communication that we believe is most relevant to you and avoid sending or displaying irrelevant communication. You have the right to object to profiling related direct marketing.
We ensure your privacy with good information management and careful processing of personal data. We keep your personal data as long as necessary, to fulfil the purposes outlined in this privacy notice unless a longer retention period is required or permitted by law.
The retention period of your personal data is dependent on the law for the particular type of potential claim, accounting law requirements and other factors. If holding your personal data is not mandatory for us, you can request us to delete the data. Unnecessary or irrelevant personal data is deleted or made anonymous.
We always take appropriate technical, physical, legal and organizational measures, which are consistent with applicable privacy and data security laws. Any service providers acting as data processors are selected carefully and are required to use appropriate measures to protect the confidentiality and security of your personal data.
For example, when required from a security perspective, before storing personally identifiable information (such as social security numbers or vehicle registration numbers), we anonymize or pseudonymize the information so that individual persons cannot be identified solely based on the stored information.
As an insurance company, we are obliged by law to maintain secrecy about personal customer information, and other personal data. We can disclose personal data to others, but only when we are allowed to do so by law or by your prior consent. Use of suppliers that we control with data processing agreements is not regarded as disclosure.
Depending on the insurance product concerned and nature of the information, your personal data can be disclosed to:
Bank or leasing company
If relevant institution is indicated as a beneficiary in the policy – the information about the status of the policy and possible claim can be shared.
To intermediary
Agent, tied agent or broker) who has mediated the insurance contract – the information about the policy and the claim; it is only shared in extent that it is necessary for performance of the contract.
Claims partner
Such as repair shop or constructor, in case of the claim – information about validity of the policy as well as claims information can be shared in extent that it is necessary to handle the claim.
Motor insurance bureau
We register information about concluded compulsory motor third party liability insurance policies and reported traffic accident claims.
Medical institution and doctor
In case of health claim, health evaluation or personal injury we may share your information with health centers or doctors.
Other insurers
We provide information to other insurers in claims handling in case it is necessary to handle the claim.
Governmental institutions
We may be required to share your personal data with other governmental institutions or third parties, if that is required based on the law or to fulfil the contract.
Service partners
We may share your data with our service partners to provide you additional services such as help in a claims situation or to provide you an additional service.
Your personal data is primarily stored within territory of European Union and European Economic Area. Due to the global nature of our business and to technological solutions, for the purposes set out above, in certain cases we may transfer personal data to parties located in other countries.
For example, we may transfer personal data to a data processor providing online cloud services located in United States. Any such transfer is performed according to the applicable privacy rules for such international data transfers.
We want to be transparent regarding the information we hold about you and we want to make sure it is accurately updated. As a private customer you can access your own information at Mypages and in case you need more information, you have the right to request a copy of the personal information we have about you by e-mailing (registerutdrag@if.se) or sending a letter to If Skadeförsäkring AB, Rekisterutdrag, 106 80 Stockholm. We always identify our customers before enabling access to their information.
You may ask us to correct or remove information you think is inaccurate. You may also ask us to delete information about you if there is no legal basis for further processing.
Since under insurance and accounting laws we as an insurer are under obligation to store policies and other information for strictly defined periods, please take into account that large part of your information may be exempt from correction and deletion rights. Upon your request, a copy of your personal data can also be transmitted directly to another company, if it is technically feasible.
Please see more about your rights as a customer from your country's Data Privacy Notice
If you have any questions concerning our handling of your personal data you may contact her and her team on DPO@if.se.
We are your data controller and you can write to us:
If Skadeförsäkring AB, registration number 516401-8102
Address: 106 80 Stockholm, Sweden
This page was updated 9 December 2019