Security policy
Alles op één plek: onze kennisdossiers, hulp bij schade, een begrippenlijst en de officiële instanties waar u terecht kunt. Onafhankelijk samengesteld door Finass Verzekert.
Kennisdossiers per verzekering
In onze kennisdossiers leggen we per verzekering uit wat er precies gedekt is, wat de premie bepaalt en waar u op moet letten — zonder verkooppraat.
Particulier: auto · motor · camper · caravan · woonhuis · inboedel · aansprakelijkheid · kostbaarheden
Zakelijk & zzp: zzp · bedrijfsaansprakelijkheid · beroepsaansprakelijkheid · cyber · rechtsbijstand · verzuim · bedrijfsschade · gebouwen
Waar begin ik als ik iets wil verzekeren?
Hulp bij schade
Schade gehad? Op deze pagina’s leest u precies wat u moet doen en wat u nodig heeft:
Schade melden (particulier) · schade beheren · schadedocumenten
Schade melden (zakelijk) · schade beheren zakelijk · documenten zakelijk
Stap voor stap: het autoschadeclaimproces en de procedure bij schade aan huis.
Spoed buiten kantooruren?
Hulp bij kiezen & controleren
Een paar hulpmiddelen die vaak van pas komen: de herbouwwaardemeter (opstal) en inboedelwaardemeter voorkomen onderverzekering, en uw schadevrije jaren staan geregistreerd in Roy-data. Voor bedrijfspanden werkt u met een taxatie conform Art. 7:960 BW.
Bekijk ook onze merkenoverzicht, de verzekeringsmaatschappijen waarmee wij werken en het bestaande kennisbankoverzicht.
Hoe weet ik of ik onderverzekerd ben?
Waar vind ik mijn schadevrije jaren?
Officiële instanties
Onafhankelijke en officiële bronnen waar u terecht kunt:
- AFM — toezichthouder financiële dienstverlening (register van adviseurs)
- Kifid — klachteninstituut financiële dienstverlening
- Verbond van Verzekeraars — brancheorganisatie, o.a. Bedrijfsregeling 11 (Roy-data)
- RDW — kentekenregistratie en verzekeringsplicht
- Waarborgfonds Motorverkeer — bij schade door een onbekend of onverzekerd voertuig
- Nivre — register van schade-experts (o.a. voor contra-expertise)
- Autoriteit Persoonsgegevens — melden van datalekken
- Nederlandse Arbeidsinspectie — melden van ernstige arbeidsongevallen
Deze partijen staan los van Finass Verzekert; wij verwijzen ernaar voor onafhankelijke informatie.
Waar kan ik een klacht indienen?
Hoe controleer ik of een adviseur betrouwbaar is?
Wij nemen het traject met de verzekeraar voor u over.
Neem contact opBegrippenlijst
De termen die u het vaakst tegenkomt, kort uitgelegd.
Eigen risico
Dagwaarde vs. nieuwwaarde
Herbouwwaarde
Bereddingskosten
Onderverzekering
Bonus-malus & schadevrije jaren
Contra-expertise
Zuivere vermogensschade
Veelgestelde vragen
Wat vind ik in de kennisdossiers?
Waar meld ik schade?
Wat is Roy-data?
Bij welke instantie kan ik klagen?
Werkt Finass met vaste verzekeraars?
Responsible disclosure · data breach · phishing
Security policy: reporting vulnerabilities
Have you spotted a weakness in our website or in the application process? Report it to us before you do anything with it. This page explains how to report and what is and is not permitted.
- Several insurers compared objectively
- 9.5 customer rating for a new policy
- AFM licence 12016589
- Personal 072 - 509 24 56, weekdays 9–17
Deze pagina in het Nederlands: Security policy: kwetsbaarheden melden.
Calculate your premium or request a quote
Without obligation; a reply within one working day.
The calculator and the quote form below are in Dutch. Prefer to do this in English? Email info@finassverzekert.nl or call 072 - 509 24 56 and we will take it from there.
Work out your own premium with the calculator.
Enter your details; you will receive a proposal within one working day.
- We compare the offerings of several insurers
- An adviser checks whether the cover suits your situation
- We arrange the switch, including cancellation
A premium indication, not personal advice. Prefer to talk it through? Call 072 - 509 24 56.
In brief
We process personal data you entrust to us for an application or a claim: name, address, date of birth, bank details, sometimes medical or criminal record information. If you find a vulnerability in our website or forms, report it to us before you share it with others. Describe as precisely as possible which page or form is concerned, what you did and what the result was. We confirm receipt, investigate the report and let you know what we are doing about it.
A clear limit applies when investigating a vulnerability. Not permitted are: viewing, copying, altering or deleting other people's data, planting a back door to demonstrate that access is possible, automated password guessing, a denial-of-service attack, social engineering of our staff or customers, and physical access to our office or our equipment. Use only the data needed to demonstrate the problem, and no more than that.
This page is about the security of our own services. How we handle your personal data, for what purpose and how long we keep it is set out in our privacy policy. If your business is at risk of a hack or a data breach, that is an insurable risk that belongs on a cyber insurance and not on an ordinary liability insurance.
This page deals with one situation. The full overview is on Compare personal liability insurance (AVP).
What you need to know before you report
Four points about the report itself and about what is and is not covered in insurance terms.
What happens to your report
We confirm receipt and let you know whether we assess the report as a vulnerability. If there proves to be a data breach involving personal data, the notification periods under the GDPR apply towards the Dutch Data Protection Authority and, where necessary, towards the individuals concerned. Only make the vulnerability public once it has been resolved, and discuss the timing with us.
What falls outside this scheme
Reports about missing best practices without demonstrable risk, such as a missing header or an expired certificate on an unused subdomain, we do look at but do not treat as a vulnerability. Nor do spam, phishing emails not originating from us and complaints about the content of pages fall under this; those go through contact.
Administrative fines cannot be insured
A fine from the Dutch Data Protection Authority is a penalty and not compensation. Such fines and penalty payments are excluded on almost every policy, including under a cyber insurance policy. What is insurable are investigation costs, remediation, notification of those concerned and liability towards the people whose data has been leaked.
Intent always falls outside cover
Anyone who steals data or causes damage themselves cannot insure against it. Article 7:952 of the Dutch Civil Code excludes damage the insured has caused intentionally or through recklessness. Where an insurer is misled, Article 7:941 of the Dutch Civil Codealso applies: an intention to mislead when reporting a claim causes the right to payment to lapse.
What does your premium depend on?
- Volume of data processed — the number of records and how sensitive they are
- Nature of the business — an online shop, a service business or manufacturing weigh differently
- Security measures taken — back-ups, two-factor authentication and patching policy
- Dependence on systems — determines the risk of business interruption
- Sum insured — per claim and capped per insurance year
- Excess and waiting period — in the event of an outage, a waiting period in hours often applies
Insurers weigh these details differently. That is why comparing pays off.
Where to take which report
| Situation | At Finass Verzekert | With the provider |
|---|---|---|
| You discover a vulnerability in the application form on this website | Yes | No |
| You receive a phishing email using our name and logo | Yes | No |
| Your personal data has been leaked at the company with which your policy is placed | No | Yes |
| You want your no-claims years retrieved from Roy-data | Yes | Yes |
| You disagree with a position on a claim and want an opposing adjuster appointed | Provided that | Yes |
| You want to recover an administrative fine after a data breach under an insurance policy | No | No |
The AFM, Kifid, the Dutch Data Protection Authority and the Waarborgfonds Motorverkeer are separate from our office and handle their own reports.
Frequently asked questions
The questions we are asked most often about this.
Do I get a reward for a report?
We do not offer a fixed payment. A serious report that leads to an improvement is acknowledged and, if you wish, credited by name alongside the fix. So do not expect an advertised sum. The main commitment runs the other way: report to us first, go no further than is needed to demonstrate the problem and make nothing public before it has been resolved.
I have received a suspicious email using your name. What now?
Do not click on links and do not open attachments. Forward the email with the full header and call us to check whether the message really comes from us. We never ask by email for a full account number with a PIN or for login details. If you have entered something, report it immediately to your bank and to us.
Does my liability insurance cover the loss after a hack?
Usually not. Liability insurance is designed for injury and property damage you cause to others. The costs of a data breach are pure financial loss: investigation, remediation, notification and claims from those concerned, without anything being broken. Cyber insurance exists for that. Also check whether your policy imposes requirements on back-ups and updates, because those are often included as conditions.
What happens to the data I send with my report?
We use it only to investigate and resolve the vulnerability. If your report contains third parties' personal data that you have seen unintentionally, mention that and do not include the data. We keep the report for as long as is necessary for the investigation and its handling. The general retention periods and your rights are set out in our privacy policy.
