privacy and COOKIE notice

Background

We are committed to protecting and respecting your privacy in accordance with the current Data Protection Legislation (“Legislation”). This notice sets out the basis on which we will process any personal data that we collect from you, or that you provide to us.  For the purposes of the Legislation, the Data Controller in relation to any personal data you supply to us will be the Group Company to whom you have provided your data.

INFORMATION WE MAY COLLECT OR RECEIVE ABOUT YOU

We collect and process personal data that you provide directly to us by filling in forms, via our website, over the phone or via e-mail, or that we receive via third parties (for example – public records, brokers, agents, claims investigators, claims handlers and business partners). This includes the following categories of data:

• General identification and contact information: Name; address; e-mail and telephone number; personal identification number or similar identity number; gender; marital status; relationship with the policyholder, insured or claimant (information that we receive from you or a third party).
• Financial information and account details: For home purchase bonds; bank account number and account details; credit history and credit score; assets; income; and other financial information (Information that we receive from you or a third party).
• Information which is necessary to discover, prevent or investigate fraud or investigations towards financial sanctions lists: We may process personal data to enable us to discover, prevent or investigate fraud or fulfil our duty to check all transactions against financial sanctions lists before providing services or processing payments.

How We use your information

All data that you supply or we receive from third parties are normally necessary for entering into a contract with us and for us to be able to carry out our obligations towards you under the contract. We also need to process the data for other purposes described below:

DISCLOSURE OF YOUR PERSONAL DATA

To enable us to provide you with financial services, to manage claims and to support our general business activities and regulatory obligations, we disclose your data to; (a) companies within the AmTrust Group; (b) external parties or our businesses partners who are involved in offering products and services to you; (c) our service providers; and (d) governmental or other public authorities. These categories include:

• Companies within AmTrust Group – You will find a list of the companies included in the AmTrust Group at www.amtrustinternational.com.
• Distribution partners – Intermediary and tied agents, brokers, affinity/business partners and other distributors, reinsurers, administrators, financial institutions and other business partners.
• Our service providers – External service providers, such as accountants, actuaries; call centre service providers; auditors, experts, lawyers and other outside professional advisors; IT systems, support and hosting service providers; printing and analysis service providers; banks and financial institutions; third-party claim administrators; claim investigators and adjusters; and outsourced service providers that assist us in carrying out business activities.
• Governmental or other public authorities – AmTrust may share personal data with governmental or other public authorities (including, but not limited to supervisory authorities, courts, law enforcement, tax authorities and criminal investigations agencies and to authorities we are obligated to provide information to).

AmTrust may also disclose your personal information:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If any AmTrust company or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• In order to enforce or apply our terms of use set out in the terms of use or terms and conditions page and other agreements; or to protect the rights, property or safety of AmTrust, our customers or others.

INTERNATIONAL TRANSFERS OF DATA

For the purposes stated above, we may transfer your personal data to destinations outside the European Economic Area (“EEA”). Where we transfer your personal data outside of the EEA, we will ensure that it is treated securely, and in accordance with this privacy notice and the Legislation. We only transfer data to countries deemed as having adequate protection by the European Commission or, where there is no adequacy decision, we use the European Commission approved ‘Standard Contractual Clauses’ with such parties to protect the data. A copy of the ‘Standard Contractual Clauses’ can be obtained by writing to The Data Protection Officer, AmTrust International, Minster Court 2, London, EC3R 7BB.

YOUR RIGHTS

You have the right to:

1. Refuse/change marketing preferences – You may at any time ask us not to process your data for marketing purposes or change your preferences for marketing.
2. Request copy of personal data we hold about you – You may request access to the personal data that we store about you.
3. Erasure of personal data – You may request to have your personal data erased. In some cases, we may have the right to retain certain personal data despite your request of erasure.
4. Correction – You have the right to request correction of or erasure of inadequate, incomplete or incorrect personal data.
5. Right to restriction and object to future processing – You are under certain circumstances entitled to restrict the processing of your personal data to only comprise storage of the personal data. You can do so for instance during the time when we assess whether you are entitled to have personal data erased. If the processing of your personal data is based on a balancing of interests and you deem that your integrity interest overrides our legitimate interest, you may also, on grounds related to your particular situation, object to the processing. To do so contact Controller on the contact details stated below. AmTrust must have a compelling reason in order to continue to process the personal data for the relevant purpose.
6. Right to data portability – When personal data is processed electronically, and on the basis of your consent or on the basis that the processing is necessary in order to perform under a contract with you, and provided that the personal data have been provided or generated by you, you are entitled to receive a copy of your personal data in a common machine-readable format.
7. Rights in relation to automated decision-making, including profiling – You have the right to not be subject to fully automated decision-making, including profiling, if such decision-making has legal effects or similarly significantly affects you. This right does not apply if the decision-making is necessary in order to perform under a contract with you, if the decision-making is permitted under applicable law or if you have provided your explicit consent.
8. Complaints to the supervisory authority – You are welcome to contact us with any enquiries and complaints that you may have regarding the processing of your personal data. You also have the right to lodge complaints pertaining to the processing of your personal data to the local Data Protection Authority.

To exercise any of your rights listed above, please write to: The Data Protection Officer, AmTrust International, Minster Court 2, London, EC3R 7BB.       

COOKIES

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For example, we are interested in the number of visitors and the pages they visit; which pages are most and least popular. By applying what we learn about site visitor habits, we can adapt the content to try and make it more easily accessible, relevant and interesting to site visitors. In some cases, cookies are used to remember information about your visit to our site between visits. We may need to do this to improve your use of the web site, such as remembering any feature preferences.  By continuing to browse the site, you are agreeing to our use of cookies.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
• Analytical/performance cookies. These are cookies that allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

The cookies we use do NOT hold any personally identifiable data about you.

RETENTION

Your data will not be retained for longer than is necessary, and will be managed in accordance with our data retention policy. In most cases the retention period will be for a period of seven (7) years following the expiry of the contract, or our business relationship with you, unless we are required to retain the data for a longer period due to business, legal or regulatory requirements. In any case, where data is retained we will endeavour to delete or to anonymise any personal elements, in order to maintain your privacy and security.

CHANGES TO OUR PRIVACY POLICY

We may revise the privacy policy at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we make.

If you have any questions concerning our use of your personal data, please contact the European Data Protection Officer, AmTrust International Limited, 5th Floor, Exchequer Court, 33 St Mary Axe, London, EC3A 8AA