Data Protection Notice
1. Introduction
We collect and use personal information about individuals so that we can provide insurance requested by our customers. This Data Protection Notice explains the most important aspects of how we use personal information and what rights individuals have. You can get more information about the terms we use and view our Privacy Policy at www.aviva.ie/privacy or request a copy by writing to the Data Protection Officer, Aviva Life & Pensions Ireland DAC, Building 12, Cherrywood Business Park, Loughlinstown, Co. Dublin, D18 W2P5 or call us on (01) 8987000.
This Data Protection Notice applies mainly to Applicants/Policy Owners and the life/lives to be insured. Where a section or paragraph in this Data Protection Notice refers to the Applicants/Policy Owners without referring to the life/lives to be insured then it only applies to the Applicants/Policy Owners and vice versa where a section or paragraph in this Data Protection Notice refers to the life/lives to be insured without referring to the Applicants/Policy Owners. Otherwise this Data Protection Notice and the terms “you” and “your” applies to both the Applicants/Policy Owners and life/lives to be insured.
The data controller responsible for processing this personal information is Aviva Life & Pensions Ireland DAC (“we”, “us”, “our”) as the insurer of the product. Additional data controllers involved in the process for obtaining and maintaining insurance cover include the intermediary/financial broker (who is responsible for the sale and suitability of the product) and applicable reinsurers.
2. Type of Information/Where Collected
We collect personal information from you and any relevant third parties (including that authorised by the Declarations) under and in relation to this Application and the administration of the policy, to include processing claims and complaints.
We may need to ask for health data relevant to your policy. We recognise that information about health is particularly sensitive information. We will only collect and use such information where we need to and where it is proportionate for the purposes of the policy of insurance.
Health data includes (with the exception of the results of genetic tests) life/lives to be insured’s health data to include, existing or previous health conditions, medical history and lifestyle (e.g. smoking habits/history) and family health history. If you are asked to provide health data, please do not send us the results of any genetic tests carried out on you or any other relevant person.
You don’t have to provide us with any personal information, but if you don’t provide the information we need we may not be able to proceed with your application or any claim you make. We will let you know what information is required to proceed with your application or any claim you make.
We may also use personal information about people other than you e.g. family health history of the life/lives insured, personal information about personal representatives, attorneys (under powers of attorney) and beneficiaries where polices are placed under trust.
We may also collect personal information:
- already held about you within the Aviva Group (identified in Privacy Policy), including details from previous, policies of insurance and claims;
- from your intermediary, financial broker or other nominated representative;
- from parties relevant to claim process (e.g. claimant, private investigators engaged by us, witnesses, solicitors and independent experts);
- from publicly available information including social media websites and online content, newspaper articles, tv, radio and other media content, court judgements, public registers and specialist databases (for example Companies Registration Office, Vision-net, Oracle, Dow Jones, SoloCheck) and (only for purposes of verifying your identity) electoral register;
- from other insurance companies.
3. Legal Basis and Purposes for Use
The legal basis we rely on to process your personal information and the purposes for which we collect and use personal information are summarised below. Further information is set out in our Privacy Policy.
(a) Personal Information (other than health data)
(b) Health Data
Health data is used for the purposes of set-up and underwriting of the policy of insurance, administering the policy (e.g. processing claims, handling complaints), reinsurance and fraud investigation in relation to the policy.
The legal basis on which we process health data in respect of the life/lives to be insured is that:
- Irish Data Protection law allows us, where necessary and proportionate, to use heath data for the purposes of a policy of insurance; and/or
- processing is necessary for the establishment, exercise or defence of legal claims.
Where we process health data for the purpose of a policy of insurance we will take suitable and specific measures to safeguard the fundamental rights and freedoms of individuals. Further information can be found in our Privacy Policy.
Automated Decisions
We may also use personal information to make automated decisions (involving an element of profiling) as necessary for entering into the policy or otherwise authorised by law. For example we may make automated decisions, using an automated system, to decide if we can provide insurance (without going through a manual underwriting process) and if so at what premium. In particular, our automated underwriting system processes the personal and medical information provided as part of this application process (including age, smoking status, answers to our health and lifestyle questions, including family medical history), along with the amount of cover requested. We do this to calculate how much that cover will cost. Without this information we’re unable to provide a price that is relevant to your individual circumstances and needs. We regularly check the way our underwriting system works to ensure we’re being fair to our customers. For further information please see our Privacy Policy.
4. Who we share your information with
Where relevant, we may share personal information with:
- Other Aviva Group companies, agents, professional advisers acting for us (e.g. medical practitioners, lawyers, private investigators) and third party service providers.
- The intermediary/financial broker and at its request, third party service providers who provide services to the intermediary/financial broker (e.g. software providers who give brokers an overview of customer information across different insurance providers).
- Your agents and other third parties relevant to you and/or the policy, including doctors and other relevant medical practitioners, your employer, banks, lenders, policy assignees and legal advisers.
- If we are required to do so to comply with a relevant legal or regulatory obligation; with regulatory bodies, law enforcement bodies, government departments including Central Bank of Ireland, Financial Services and Pensions Ombudsman, Revenue Commissioners/Inspector of Taxes, Gardaí, Criminal Assets Bureau, Data Protection Commission and Department of Social Protection.
- With other insurers and financial services companies, public bodies, (either directly or using shared databases) and industry bodies such as Insurance Ireland.
- With reinsurers who provide reinsurance services to Aviva and for each other. Reinsurers will use your data to decide whether to provide reinsurance cover, assess and deal with reinsurance claims and to meet legal obligations. They will keep your data for the period necessary for these purposes and may need to disclose it to other companies within their group, their agents and third party service providers, law enforcement and regulatory bodies.
Some of the organisations we share information with are located outside of the European Economic Area (“EEA”), including India. We’ll take steps to ensure that any such transfer of information outside of the EEA is managed to protect your privacy rights. For more information on this please see our Privacy Policy or contact us.
5. How long we keep your personal information for
We maintain a retention policy to ensure we keep personal information only for as long as we reasonably need it – please see our Privacy Policy for further details.
We need to retain personal information for the period necessary to administer the policy and as long as is required/permitted by law and/or in respect of any potential dispute in relation to the policy. Currently this would commonly be 7 years from the later of the date when the customer relationship ceases or a claim in payment ceases.
Where you complete an application for but do not subsequently proceed with a policy of life insurance or cover is declined, underwriting details may be kept for a period of up to 7 years to facilitate a subsequent application or as a check against non-disclosure.
6. Your rights
You have various rights in relation to your personal information, including the right to:
- request access to your personal information
- correct any mistakes on our records
- erase or restrict records where they are no longer required
- object to our use of personal information based on legitimate interests or public interests
- ask not to be subject to solely automated decision making if the decision produces legal or other significant effects on you
- move (in a structured, commonly used and machine-readable format) certain data to other providers (data portability).
We will respond to your request in writing, or orally if requested, as soon as practicable and in any event not more than within one month after receipt of your request. In exceptional cases, we may extend this period by two months and we will tell you why. We may request proof of identification to verify your request. For more details in relation to your rights, including how to exercise them, please see our Privacy Policy or contact us using the details set out below.
7. Contacting us
If you have any questions about how we use personal information, manage personal information within our business or if you want to exercise your rights stated above, please contact our Data Protection Officer by either emailing them at DPO@aviva.com, writing to the Data Protection Officer, Aviva, Building 12, Cherrywood Business Park, Loughlinstown, Co. Dublin, D18 W2P5 or call us at (01) 8987000.
If you have a complaint or concern about how we use your personal information please contact us in the first instance and we will attempt to resolve the issue as soon as possible. You also have the right to lodge a complaint with the Office of the Data Protection Commission or any other relevant data protection authority.