How we process personal data

Information about the General Data Protection Regulation (GDPR).

Your privacy is very important to us

Your privacy is very important to us, so we process your personal data with great care. This page explains how we collect, share and use your personal data, and the rights you have. It is important that you read this information. If you have any questions, feel free to contact us.

This is a short description in English on how we process your personal data. Complete information about how we process personal data is available in Swedish. In case of discrepancies between the two versions, the Swedish version shall prevail.

What is personal data?

Personal data means any information relating to an identified or identifiable living natural person. Examples of personal data include personal identity numbers, names, addresses, audio and video recordings, and IP addresses.

Any type of operation performed on personal data constitutes processing of personal data, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Your privacy is very important to us

Your privacy is very important to us, so we process your personal data with great care. This page explains how we collect, share and use your personal data, and the rights you have. It is important that you read this information. If you have any questions, feel free to contact us.

This is a short description in English on how we process your personal data. Complete information about how we process personal data is available in Swedish. In case of discrepancies between the two versions, the Swedish version shall prevail.

What is personal data?

Personal data means any information relating to an identified or identifiable living natural person. Examples of personal data include personal identity numbers, names, addresses, audio and video recordings, and IP addresses.

Any type of operation performed on personal data constitutes processing of personal data, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processing of personal data

We get personal data from you when you sign an agreement with Agria or from other forms of contact between you and Agria. For example, through online forms, chats, paper applications and phone calls that are recorded. We may also obtain personal data from our subsidiary Agria Vet Guide and other companies within the Länsförsäkringar Alliance, or from other partners such as animal hospitals and clinics. In some cases, we may also collect information from veterinarians and other animal health personnel, but only if this is necessary to establish insurance claims. In addition, we collect personal data on an ongoing basis from publicly available sources such as private and public registers.

Agria processes personal data about you in cases where you are, for example, a policy holder, a contact person or representative of a legal person, or a website visitor.

The personal data that we process is, for example, your name, contact information, personal identity number, information about your animal including its health information and in some cases also information about your financial circumstances. We also process online identifiers such as IP addresses or equivalent.

For Agria to be able to provide you with the product or service in question, or take other measures you request during the term of your agreement, for example in connection with claims handling, you must provide the personal data that Agria asks for and is necessary for the conclusion and performance of agreements with Agria.

In addition, you may also be required to provide personal data by law or under other rules and regulations, for example to comply with the Swedish Financial Supervisory Authority’s general guidelines and regulations.

When the legal basis for processing personal data is consent, you may give such consent for us to process your personal data. An example where consent is required is when the personal data provided to us contains sensitive personal data.

You have the right to withdraw your consent at any time. After you withdraw your consent, we no longer have the right to process the data on this basis. It can therefore no longer be used for an application or further processing.

Agria will never sell your personal data. However, we transfer personal data to Agria Vet Guide and other companies within the Länsförsäkringar Alliance for statistical purposes, marketing measures and also to coordinate and improve advice and service from these companies to you. Personal data may also be transferred to other companies that Agria or other companies within the Länsförsäkringar Alliance cooperate with to perform their services, such as Bankgirocentralen, suppliers of IT infrastructure services and insurance intermediaries. This can apply both inside and outside the EU and EEA. See below for more information about recipients outside the EU and EEA (under Transfer of personal data to recipients outside the EU/EEA).

In addition, your personal data may be transferred to public authorities, if Agria is required to do so by law. In connection with disputes and other proceedings for establishing, exercising or defending legal claims, personal data may also be transferred to courts, tribunals and counterparties. In addition, information about your insurance may also be disclosed to persons with whom you share your household.

The legal basis for providing personal data to other companies is to be able to perform our agreements with you, or legal obligation if we are required by law. In some cases, it may also be pursuit of legitimate interests, for example Agria’s or the Länsförsäkringar Alliance’s legitimate interest in marketing products and services from other companies within the Länsförsäkringar Alliance as well as Agria’s and Agria Vet Guide’s interest in coordinating and improving advice and service from these companies to you.

You can always object to us sharing personal data on the legal basis of legitimate interests. The easiest way to do this is to contact us here.

If Agria transfers your data to recipients outside the EU and EEA, for example to companies that, in their capacity as data processors, process the data on our behalf, Agria puts appropriate safeguards in place to ensure that your rights and freedoms are protected, such as through the conclusion of standard data protection agreements in conjunction with additional safeguards.

Personal data is stored for as long as the contractual relationship persists, another obligation or legal claim may be exercised and thereafter for a maximum of ten years beyond the current year, taking the rules on limitation into account. In some cases, the data may be stored for a longer period on the basis of other legislation such as the Swedish Insurance Contracts Act or regulations on capital adequacy requirements that Agria and the Länsförsäkringar Alliance must meet at any given time. Other time limits may also apply when personal data is stored for purposes other than due to the contractual relationship, for example to comply with applicable legislation regarding e.g. accounting (seven years).

Data that is only processed for marketing purposes and does not lead to an agreement is normally stored for a maximum of three months.

Profiling means the automated processing of personal data that is used to evaluate certain personal aspects relating to a natural person, such as, for example, personal preferences, interests and location. Agria processes personal data for profiling for marketing purposes in order to be able to offer you customised products and services. Profiling can also be used to set premiums.

In some cases, Agria uses what is known as automated decision-making, i.e. decisions that are made without human involvement and that have legal effects for you or similarly significantly affect you. This may be done, for example, in connection with claims handling.

For what purposes do we process your personal data?

To manage agreements, applications and quotes

To perform and administer agreements

Examples:

  • To collect, record and administer the data needed for the agreement
  • To update information such as registered address
  • To manage insurance premium payments
  • To handle insurance claims, for example via direct claims settlement
  • To calculate premiums and fees
  • To answer your questions via online form, phone or chat
  • To reinsure our insurance risks where applicable
  • To establish, exercise or defend legal claims such as recourse claims

To manage applications and quotes

Examples:

  • To record the information needed to provide a quote
  • To assess an application for e.g. insurance
  • To collect, verify and record the data needed to enter into an agreement
  • To prepare and provide advice to you about our products and services

For what purposes do we process your personal data?

To manage agreements, applications and quotes

To perform and administer agreements

Examples:

  • To collect, record and administer the data needed for the agreement
  • To update information such as registered address
  • To manage insurance premium payments
  • To handle insurance claims, for example via direct claims settlement
  • To calculate premiums and fees
  • To answer your questions via online form, phone or chat
  • To reinsure our insurance risks where applicable
  • To establish, exercise or defend legal claims such as recourse claims

To manage applications and quotes

Examples:

  • To record the information needed to provide a quote
  • To assess an application for e.g. insurance
  • To collect, verify and record the data needed to enter into an agreement
  • To prepare and provide advice to you about our products and services

Legal basis: Performance of agreements and consent

This collection of your personal data is necessary for us to be able to fulfil our obligations under agreements to which you are a party or to take steps at your request prior to entering into such agreements.

Legal basis: Performance of agreements and consent

This collection of your personal data is necessary for us to be able to fulfil our obligations under agreements to which you are a party or to take steps at your request prior to entering into such agreements.

To comply with laws, rules and regulations

To meet requirements under applicable laws, rules and regulations

Examples:

  • To check personal data against sanction lists that the law or a decision by public authorities requires us to apply
  • To report to public authorities, both Swedish and foreign

To comply with laws, rules and regulations

To meet requirements under applicable laws, rules and regulations

Examples:

  • To check personal data against sanction lists that the law or a decision by public authorities requires us to apply
  • To report to public authorities, both Swedish and foreign

To improve our products and services

Examples:

  • To develop and improve our products and services, both existing and new
  • To develop and test our systems for managing our products and services safely and efficiently

To prevent injuries

Examples:

  • To give advice and tips to avoid or minimise injuries
  • To produce statistics on diseases and accidents for research and information in order to prevent and minimise injuries.

To be able to offer you customised products and services

Examples:

  • To provide services that we offer you as an insurance customer from time to time, such as advice and assistance when booking in-person veterinary visits.
  • To carry out marketing such as direct marketing via e-mail and SMS
  • Market and customer analyses, in some cases including profiling
  • To conduct customer satisfaction surveys
  • To develop statistical data for our risk assessments and insurance products

To prevent fraud

Examples:

  • We use personal data to prevent, investigate and avert fraud. 

To improve our products and services

Examples:

  • To develop and improve our products and services, both existing and new
  • To develop and test our systems for managing our products and services safely and efficiently

To prevent injuries

Examples:

  • To give advice and tips to avoid or minimise injuries
  • To produce statistics on diseases and accidents for research and information in order to prevent and minimise injuries.

To be able to offer you customised products and services

Examples:

  • To provide services that we offer you as an insurance customer from time to time, such as advice and assistance when booking in-person veterinary visits.
  • To carry out marketing such as direct marketing via e-mail and SMS
  • Market and customer analyses, in some cases including profiling
  • To conduct customer satisfaction surveys
  • To develop statistical data for our risk assessments and insurance products

To prevent fraud

Examples:

  • We use personal data to prevent, investigate and avert fraud. 

Legal basis for our processing of personal data

Performance of agreement

The processing of your personal data is necessary for us to be able to fulfil our obligations under agreements to which you are a party or to take measures at your request before entering into such agreements. See examples of processing under To manage agreements, applications and quotes.

Legal obligation

The processing of your personal data is required by law or other regulation. This may be processing described under To comply with laws, rules and regulations.

Pursuit of legitimate interests

The processing is necessary to satisfy our or another party’s legitimate interest, such as, for example, our legitimate interest in developing and customising our offer to you, marketing, our interest in preventing insurance fraud, etc. We also carry out processing to help you prevent injuries. However, such processing is only carried out on the condition that our legitimate interest outweighs yours and that of others. See examples of processing under Processing based on pursuit of legitimate interests.

Consent

When the legal basis for processing personal data is consent, you may give such consent in order for us to process your personal data.

You have the right to withdraw your consent at any time. After you withdraw your consent, we no longer have the right to process the data on this basis. If certain processing has been carried out on the basis of consent, we are no longer able to complete the processing. This means, for example, that if an application is being handled on the basis of consent you have given and the consent is withdrawn during such handling, we are no longer able to handle your application. Withdrawing consent does not affect the right that Agria had to carry out operations while the consent was in place.

Legal claims

The processing is necessary for us to be able to establish, exercise or defend legal claims in connection with disputes and other proceedings, such as recourse claims.

Legal basis for our processing of personal data

Performance of agreement

The processing of your personal data is necessary for us to be able to fulfil our obligations under agreements to which you are a party or to take measures at your request before entering into such agreements. See examples of processing under To manage agreements, applications and quotes.

Legal obligation

The processing of your personal data is required by law or other regulation. This may be processing described under To comply with laws, rules and regulations.

Pursuit of legitimate interests

The processing is necessary to satisfy our or another party’s legitimate interest, such as, for example, our legitimate interest in developing and customising our offer to you, marketing, our interest in preventing insurance fraud, etc. We also carry out processing to help you prevent injuries. However, such processing is only carried out on the condition that our legitimate interest outweighs yours and that of others. See examples of processing under Processing based on pursuit of legitimate interests.

Consent

When the legal basis for processing personal data is consent, you may give such consent in order for us to process your personal data.

You have the right to withdraw your consent at any time. After you withdraw your consent, we no longer have the right to process the data on this basis. If certain processing has been carried out on the basis of consent, we are no longer able to complete the processing. This means, for example, that if an application is being handled on the basis of consent you have given and the consent is withdrawn during such handling, we are no longer able to handle your application. Withdrawing consent does not affect the right that Agria had to carry out operations while the consent was in place.

Legal claims

The processing is necessary for us to be able to establish, exercise or defend legal claims in connection with disputes and other proceedings, such as recourse claims.

Your rights

You have the right to request information about the personal data we process about you, or have access to about you (subject access request).

To request a subject access request, you can write to us by post. So that no one else is given access to your information, we must be able to identify you when you request such access.

 The easiest way to do this is to contact us here.

You can request to receive any personal data that you have provided and Agria processes electronically, through an electronic copy. You can also ask for the electronic copy to be transmitted directly to another data controller if this is technically feasible. Data portability requests can be made in the same way as subject access requests. To be able to obtain the electronic copy, you must have identified yourself.

 The easiest way to do this is to contact us here.

Agria is required to ensure that personal data about you is correct and up to date. If your personal data is incorrect, you can ask for it to be rectified or for additions to be made. You also have the right to request that we restrict certain processing about you, for example if you have objected to the processing of personal data based on legitimate interests.

 The easiest way to do this is to contact us here.

Under certain conditions, you can request that data about you be deleted when it is no longer needed for the purpose it was collected. Agria deletes information about you when it is no longer needed, but may be required by other legislation to store data about you in order to comply with legal requirements.

 The easiest way to do this is to contact us here.

You have the right to object to processing of personal data based on legitimate interests. You also have the right to object to direct marketing such as offers via SMS.

The easiest way to do this is to contact us here.

You have the right not to be subject to a decision based solely on a form of automated decision-making, if the decision may produce legal effects for you or significantly affect you in another way. However, Agria has the right to use automated decision-making if this is necessary for the conclusion or performance of an agreement between you and Agria or you have given your consent.

 The easiest way to do this is to contact us here.

The data controller is the company within the Länsförsäkringar Alliance with which you have entered into an agreement or to which you have otherwise provided personal data, or which has received your personal data from a third party, such as your employer.

Companies within the Länsförsäkringar Alliance also have joint customer registers containing general information about you, such as your name, contact information and information about your engagements. This data is processed, among other things, to automatically update addresses and to coordinate information and marketing to you from the companies. With respect to joint customer registers, the companies within the Länsförsäkringar Alliance are joint controllers for personal data and have therefore drawn up what is known as a data sharing agreement.

 The easiest way to do this is to contact us here.

Contact us if you have any questions

If you have any questions about data protection or want to exercise any of your rights, please contact us.

Data Protection Officer

We have appointed a Data Protection Officer to monitor compliance with the General Data Protection Regulation and other regulations applicable to the processing of personal data.

Contact the Data Protection Officer

E-mail: dataskyddsombud@lansforsakringar.se
Address: Länsförsäkringar Stockholm, Box 27076, SE 102 51 Stockholm
Phone number: +46 8-562 830 00

If you are unhappy with our processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection, IMY, www.imy.se. If you live or work in a country other than Sweden, you can also contact the supervisory authority in that country.

Data controller

The data controller with respect to the processing of personal data about you is the company or companies within the Länsförsäkringar Alliance with which you have entered into an agreement or to which you have otherwise provided personal data, or which have obtained personal data about you from a third party, such as your employer.

Companies within the Länsförsäkringar Alliance such as Agria and Agria Vet Guide also have joint customer registers containing information about you, such as your name, contact information and information about your engagements and your animals. This data is processed, among other things, to automatically update addresses and to coordinate information, advice and marketing to you from the companies. With respect to processing in joint customer registers, the companies concerned are joint controllers. The companies have therefore drawn up what is known as a data sharing agreement.

Data controllers within the Länsförsäkringar Alliance

Contact us if you have any questions

If you have any questions about data protection or want to exercise any of your rights, please contact us.

Data Protection Officer

We have appointed a Data Protection Officer to monitor compliance with the General Data Protection Regulation and other regulations applicable to the processing of personal data.

Contact the Data Protection Officer

E-mail: dataskyddsombud@lansforsakringar.se
Address: Länsförsäkringar Stockholm, Box 27076, SE 102 51 Stockholm
Phone number: +46 8-562 830 00

If you are unhappy with our processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection, IMY, www.imy.se. If you live or work in a country other than Sweden, you can also contact the supervisory authority in that country.

Data controller

The data controller with respect to the processing of personal data about you is the company or companies within the Länsförsäkringar Alliance with which you have entered into an agreement or to which you have otherwise provided personal data, or which have obtained personal data about you from a third party, such as your employer.

Companies within the Länsförsäkringar Alliance such as Agria and Agria Vet Guide also have joint customer registers containing information about you, such as your name, contact information and information about your engagements and your animals. This data is processed, among other things, to automatically update addresses and to coordinate information, advice and marketing to you from the companies. With respect to processing in joint customer registers, the companies concerned are joint controllers. The companies have therefore drawn up what is known as a data sharing agreement.

Data controllers within the Länsförsäkringar Alliance