Privacy statement

1 Who are we?

Finass Verzekert is a trade name of Finass Advies B.V. Finass Advies B.V. is the controller for the processing of personal data described in this statement.

Our details are:

• Finass Advies B.V. (trade name: Finass Verzekert)
• Marijkelaan 11, 1862 EW Bergen (NH)
• Chamber of Commerce (Kamer van Koophandel, KvK): 37131781
• Website: www. finassverzekert. nl
• E-mail: info@finassverzekert. nl
• Telephone: 072 - 509 24 56

2 What does this statement apply to?

This statement applies to the processing of personal data through our website and in the context of our services. This includes contact through forms, e-mail and telephone, quotation requests, advice, broking, policy administration, claims handling and other services relating to financial products.

The most recent version of this statement is published on our website. If we make significant changes, we will inform you where this is reasonably possible.

3 Which personal data do we process?

Depending on the service you use, we may process the following categories of personal data:

• identification and contact details, such as your name, address, date of birth, telephone number and e-mail address;
• details about your family, household, business or position, in so far as these are relevant to the financial product requested;
• details about your income, financial situation, payment details and other financial obligations;
• details about insured objects and risks, such as vehicles, homes, business premises, equipment and valuables;
• details about insurance policies, mortgages, credit, claims history, claims and other financial products;
• correspondence, notes of conversations, documents and other information you provide to us;
• technical data about the use of our website, such as IP address, device data, browser data, cookie preferences and pages visited;
• special categories of personal data, such as health data, only where these are necessary for the application for or performance of a financial product and the processing is permitted by law;
• personal data relating to criminal offences, only where this is necessary for our services and the processing is permitted by law.

4 How do we obtain your personal data?

We usually obtain personal data directly from you, for example when you complete a form, request a quotation, call or e-mail us, or become a client.

Also, in so far as this is necessary and permitted, we may receive data from insurers, authorised agents, banks, credit providers, mortgage providers, loss adjusters, service providers, comparison or application platforms and public registers.

5 For which purposes and on which legal bases do we process data?

We only process personal data where there is a valid legal basis for doing so. We may process your data for the following purposes:

• Quotations, advice and broking: to assess your request, identify your wishes and risks, prepare a comparison or advice and act as intermediary in concluding a financial product. This takes place in preparation for or in performance of a contract.
• Administration and services: to administer policies and other financial products, implement changes, answer questions and support you throughout the client relationship. This takes place for the performance of the contract and on the basis of our legitimate interest in providing a good service.
• Claims handling: to report, assess and settle a claim and to communicate about it with the parties involved. This takes place for the performance of the contract, on the basis of legal obligations and, where necessary, on the basis of a legitimate interest.
• Legal obligations: to comply with legislation and regulations that apply to financial service providers, including obligations relating to client due diligence, record keeping, supervision, taxation and fraud prevention.
• Security and fraud prevention: to prevent and investigate misuse, fraud, security incidents and other unlawful activities. This takes place on the basis of legal obligations and our legitimate interest in protecting our organisation and our clients.
• Administration and disputes: to keep our records, process invoices, establish rights and claims and deal with legal disputes.
• Improving our website and services: to analyse and improve the operation, security and usability of our website and services. For non-essential cookies we ask for your consent in advance.
• Marketing: to inform you about relevant products, services and developments. Where consent is required by law, we ask for it in advance. You can unsubscribe at any time.

Where we process your data on the basis of consent, you can withdraw that consent at any time. Withdrawing consent does not affect processing that lawfully took place before the withdrawal.

6 Who do we share personal data with?

We only share personal data where this is necessary for our services, where we are legally obliged to do so or where you have given your consent. Depending on the situation, we may share data with:

• insurers, authorised agents, banks, credit providers, mortgage providers and other financial institutions;
• loss adjusters, repair companies, medical advisers and other parties involved in an application or in claims handling;
• service providers that carry out work on our behalf, such as suppliers of hosting, CRM, e-mail, administration, security and software systems;
• supervisory authorities, government bodies, tax authorities, investigative authorities and courts where we are legally obliged to provide data;
• accountants, lawyers and other professional advisers, in so far as this is necessary.

Where necessary, we conclude a processing agreement with parties that process personal data on our behalf. These parties may only process personal data in accordance with our instructions and must take appropriate security measures.

7 Processing outside the European Economic Area

Some suppliers may process personal data in countries outside the European Economic Area (EEA). Where this happens, we ensure that there is a legally permitted basis for the transfer, for example an adequacy decision of the European Commission, approved standard contractual clauses or another appropriate safeguard.

8 How long do we keep personal data?

We do not keep personal data longer than is necessary for the purpose for which it was collected. In determining the retention period we take into account the duration of the client relationship, statutory retention obligations, supervisory rules, limitation periods and the need to deal with complaints, claims or disputes.

In principle we apply the following starting points:

• data from a contact or quotation request that does not lead to a client relationship: a maximum of two years after the last substantive contact, unless a longer period is necessary or permitted;
• client, advice, policy and claim files: for the duration of the client relationship and thereafter for as long as this is necessary because of legal obligations, possible claims, complaints or disputes;
• data forming part of our tax records: in principle seven years;
• data for direct marketing: until you unsubscribe or the data is no longer relevant. We may keep a limited item of data in order to respect your unsubscription;
• cookie data: for the period stated in the cookie settings or by the provider concerned.

9 Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unlawful processing, alteration or destruction. Only employees and service providers who need the data for their work are given access to it.

10 Your privacy rights

Depending on the circumstances, you have the right to:

• request access to the personal data we process about you;
• have incorrect or incomplete data corrected;
• have your personal data erased;
• have the processing of your data restricted;
• object to processing, including processing for direct marketing;
• receive your data in a portable format or have it transferred;
• withdraw consent you have given previously;
• not be subject to a decision based solely on automated processing that has legal effects for you or otherwise significantly affects you, subject to statutory exceptions.

You can send a request to info@finassverzekert. nl, marking it "privacy request". In principle we respond within one month. For complex or extensive requests this period may be extended by up to two months in accordance with the GDPR. In that case we will inform you within the first month.

To prevent misuse, we may ask you to provide additional information so that we can verify your identity. We do not routinely ask for a full copy of your identity document. If a copy is necessary and legally permitted in a specific case, we advise you to shield data that is not required, such as your citizen service number (BSN) and passport photo, unless the law requires an unedited copy.

11 Automated decision-making

Finass Verzekert does not take decisions based solely on automated processing that have legal effects for you or otherwise significantly affect you. Online calculations and premium indications may be produced automatically, but they are indicative. Final acceptance of an application may also depend on the assessment and conditions of the financial institution concerned.

12 Complaints

Do you have a complaint about the processing of your personal data? Please contact us first, so that we can investigate the complaint and try to resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

You will find more information at www. autoriteitpersoonsgegevens. nl.

13 Commercial communication

We may inform you about products and services that fit your existing relationship with us. You can unsubscribe at any time using the unsubscribe option in the message or by sending an e-mail to info@finassverzekert. nl. Once you have unsubscribed, you will no longer receive the commercial messages covered by the unsubscription.

14 Cookies and similar techniques

Our website uses cookies and similar techniques. Cookies are small files that may be stored on your device when you visit the website. Some techniques are necessary for the website to function. For non-essential cookies and similar techniques we ask for your consent in advance.

We use the following categories:

You can accept or refuse non-essential cookies through the cookie banner. Refusing is just as easy as accepting. You can change your choice or withdraw your consent later using the "Cookie settings" link on the website. Withdrawing consent does not affect the lawfulness of earlier use of cookies.

External providers may process data using cookies and similar techniques in accordance with their own privacy terms. The current cookies, providers, purposes and retention periods are shown in the cookie settings on our website. See also our cookie statement.

15 External websites and third-party content

Our website may contain links to other websites and content from external parties, such as maps, application modules or comparison and quotation software. As soon as you use an external website or service, that party's privacy statement may apply. Finass Verzekert is not responsible for the processing of personal data by external parties that are independently responsible for their own processing.

16 Use of the website and intellectual property

The website and the information offered on it are intended for personal and informative use. Without the prior written consent of Finass Advies B.V., it is not permitted to exploit the content of the website commercially, to collect it systematically, to copy, publish or otherwise use it, except in so far as this is permitted by law.

Texts, trade marks, images, illustrations, videos, software, design and other elements of the website may be protected by intellectual property rights of Finass Advies B.V. or of third parties.

17 Availability and information on the website

We take care over the content and operation of the website. Even so, we cannot guarantee that the website is always free of errors, complete, up to date or available without interruption. We may maintain, change, restrict or temporarily take out of use the website or parts of it.

The information on the website is general in nature and does not constitute personal financial advice. No rights can be derived from calculations, premiums, product descriptions, images and other information on the website. The quotation, contract, policy and conditions of the financial institution concerned are decisive for the final cover, premium, acceptance and conditions.

In so far as permitted by law, Finass Advies B.V. is not liable for loss arising solely from temporary unavailability, obvious errors or the use of general information on the website. This limitation does not apply in the event of intent or wilful recklessness and does not affect mandatory statutory rights.

18 Applicable law

Dutch law applies to the use of the website and to this statement. Disputes will be submitted to the court that has jurisdiction by law.

19 Changes

We may amend this statement when our services, website, cookies or legal obligations change. The date at the top of this page shows when the statement was last updated.

20 Contact

Do you have questions about this statement or about the processing of your personal data? Please contact us at:

• Finass Advies B.V. / Finass Verzekert, attn. privacy
• Marijkelaan 11, 1862 EW Bergen (NH)
• E-mail: info@finassverzekert. nl
• Telephone: 072 - 509 24 56