Privacy Notice

AP Solutions GmbH is delighted that you are visiting the allyz website https://fr.allyz.com/ and/or using the allyz application. The protection of your personal data is important to us.

On 25 May 2018, the General Data Protection Regulation (GDPR) came into force. This regulation governs the processing of personal data carried out in the course of the activities of an establishment of a controller or processor within the territory of the European Union. As a data controller, AP Solutions GmbH is obliged to inform you about the way in which your personal data is processed: the following will inform you about the way in which we process your personal data and the rights to which you are entitled under the Data Protection Act.

This declaration may be updated regularly. We therefore advise you to consult it regularly. The last line of this Privacy Statement indicates when it was last updated.

 

1.       Data controller

AP Solutions GmbH, with registered office at: Königinstraße 28 D-80802 MUNICH, registered with the Munich District Court, no. HRB 177695, VAT ID no.: DE 275 992 658.

is responsible for processing your personal data.

You can contact the Data Protection Officer at the postal address given above or by post at the following address : dataprivacy.apsolutions.fr@allianz.com

2.      What personal data ?

Personal and contact information: such as your first and last name, address, e-mail address, date of birth, gender, title, telephone numbers and contract number.

Browsing information: IP address of the requesting computer, date and time of access, website from which access is made (reference URL), browser used.

Information about your preferences: your preferences associated with your allyz account, including specific consents you have given or refused, preferences for accepted notifications and cookies containing your advertising preferences.

Usage information and profiles: your allyz browsing history and travel preferences; how you interacted with our services, including the time you spent on our site and the pages of our site, sections or features you accessed; the links you clicked to be redirected to or from our services.

Number of your insurance contract, if your access to allyz plus is being processed

3.      Why do you process my personal data? What are the legal grounds ?

Objectives

Legal Ground

Account management :

-          Creating, managing and deleting user accounts ;

-          Duplicate user account management.

Necessary for the performance of the contract (Terms of Use)

The use of Allyz services as listed in the Terms of Use, such as :

-          Helping you plan your trips ;

-          Purchase our products or services such as CyberCare or other on-demand services.

Necessary for the performance of the contract (Terms of Use)

Customer care services :

-          help you with questions or requests concerning allyz services ;

-          Investigate our service providers to resolve certain problems.

Necessary for the performance of the contract or ;

explicit consent when necessary for a specific purpose.

Marketing activities :

-          carry out marketing and advertising activities by communicating offers, promotions and updates that may be of interest to you ;

-          Management and delivery of contextual and behavioural advertising.

Consent

Service notification :

-          The activities of the allyz application, such as instant notifications and access to your position.

Consent.

Please consult the manual for your mobile device to find out how to change your settings and control the sharing of this category of data.

 

Provision of information and advice on use of services Legitimate interest in ensuring that you use allyz services correctly
Fraud prevention and detection Legitimate interest to protect you and allyz in the event of fraudulent intent that could result in a risk to your rights and freedoms.
Fulfil any legal obligations (e.g. tax, accounting and administrative obligations) Necessary to comply with laws and regulations
4.      Categories of recipients of personal data

We will ensure that your personal data is processed in a manner compatible with the purposes indicated above. For the purposes indicated, your personal data may be

disclosed to the following parties who operate as third party data controllers:

·         Public authorities, other Allianz Group companies, other insurers, co-insurers, reinsurers, insurance intermediaries/brokers, service providers and banks. 

 

For the purposes indicated, we may also share your personal data with the following parties who act as data controllers on our instructions :

·         other Allianz Group companies, technical consultants, experts, lawyers, loss adjusters, repairers and doctors, as well as service companies for the execution of operations (claims, IT, postal services, document management); and

·         advertisers and advertising networks to send you marketing communications, to the extent permitted by local legislation and in accordance with your communication preferences. 

 

If allyz offers you third party services, we may simply provide a link to the third party's website. For the processing of personal data, only the data confidentiality charter of this third party data processor applies.

We do not share your personal data with unaffiliated third parties for their own marketing purposes without your permission. 

To comply with a legal obligation, we may share your data with the relevant ombudsman if you make a complaint about the product or service we have provided to you.

5.      Where is my personal data processed ? Your personal data may be processed within and outside the European Economic Area (EEA) by the parties specified in section 5 above, always subject to contractual restrictions on confidentiality and security, in accordance with applicable data protection laws and regulations. We will not disclose your personal data to parties who are not authorised to process it. Where we transfer your personal data for processing outside the EEA by another Allianz Group company, we do so on the basis of binding corporate rules approved by Allianz, known as the Allianz Privacy Standard (Allianz' BCR), which establish adequate protection for personal data and are legally binding on all Allianz Group companies. The Allianz BCR and the list of Allianz Group companies that comply with them can be accessed at the following address: Binding Corporate Rules (allianz-partners.com). Where Allianz BCRs do not apply, we will take steps to ensure that the transfer of your personal data outside the EEA has an adequate level of protection in relation to the EEA. You can find out about the safeguards we rely on for such transfers (for example, the Standard Contractual Clauses) by contacting us as set out in section 2.

6.      Use of cookies

We use cookies on our website. These are small files created automatically by your browser and stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojan horses or other malicious software. 

 

Information is stored in the cookie in relation to the specific end device used. However, this does not mean that we have any direct knowledge of your identity.

 

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. Complete deactivation of cookies may mean that you cannot use all the functions of our website. The legal basis for data processing for technically necessary cookies is Art. 6 para. 1 lit. b GDPR in conjunction with Art. 25 para. 2 no. 2 TTDSG. For other cookies, the legal basis is Art. 6 para. 1 lit. a in conjunction with Art. 25 para. 1 TTDSG. § 25 (1) [1]

7.      Duration and storage

We will retain your personal data for as long as necessary to provide the services to you, for as long as you have an active account with us, for the purposes of our legitimate interests and business operations, to comply with existing legal obligations and/or to exercise our rights and defend against claims.

The specific length of time we keep your personal data depends on the reason we collect it and the purpose for which it is processed. We will retain your personal data for the statutory limitation periods set out in the regulations applicable to the services provided. 

 

We will not keep your personal data any longer than necessary and will only retain it for the purposes for which it was obtained.

Inactive accounts

Accounts not activated

If your account remains inactive for 2 years, we will send you a communication to remind you of this inactivity and offer you the opportunity to reactivate your account. If you do not reactivate your account, it will be closed within 6 months of the date of sending the the communication.

When you register with allyz, you will receive a confirmation link that allows you to activate your account. If you do not activate your account immediately by clicking on the link provided, you will be given 15 days for confirmation. If you do not activate your account within 15 days, your account will be considered non-existent (i.e. not created).

For further information, please contact us

8.      My rights in respect of my personal data

Where permitted by applicable law or regulation, you have the right to :

-          Access your personal data and find out about the origin of the data, the purposes and aims of the processing, the contact details of the data controller(s), the data processor(s) and the parties to whom the data may be disclosed ;

-          Withdraw your consent here https://fr.allyz.com/membre/profil/parametres-notifications at any time when your personal data are processed with your consent ;

-          Update or correct your personal details at https://fr.allyz.com/membre/profil/mon-compte to ensure that they are always accurate ;

-          Delete your personal data from our records if they are no longer required for the purposes indicated above ;

-          restrict the processing of your personal data in certain circumstances, for example where you have challenged the accuracy of your personal data, for the period during which we are able to verify its accuracy ;

-          Obtain your personal data in electronic format for you or for your new insurer ; and 

-          File a complaint with us and/or the competent data protection authority. 

You can exercise these rights by adjusting your privacy preferences here: https://fr.allyz.com/membre/profil/mon-compte when you have created an online account with us, or by contacting us as indicated in section 1 above, providing your name, e-mail address, account identification and the purpose of your request.

9.      Object to the processing Where permitted by applicable law or regulation, you have the right to object to our processing of your personal data or to ask us to stop processing your personal data (including for direct marketing purposes). Once you have informed us of this request, we will no longer process your personal data, except as permitted by applicable laws and regulations. You may exercise this right in the same way as your other rights set out in section 8 above.

10.  Security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

 

[1] Telekommunikation-Telemedien-Datenschutz-Gesetz

 

We regularly revise this privacy policy.

This privacy policy was updated in : August 2023