Policy for the personal
data protection

What personal data do we collect and how do we collect it? 

The data we use is collected directly from you or is in some cases obtained indirectly from third parties.

The indirect collection of personal data is done from the following sources:

1. Media and information freely accessible on social networks that are clearly made public by the person concerned;

2. Our business partners, known as "business introducers", who only send us the contact details of people identified in their network and interested in the Allianz Privée offer; 

3. Browsing the customer portal (via the deposit of cookies)

 

Personal data is processed in accordance with the principle of minimisation imposed by the GDPR. The nature and quality of the personal data processed vary according to the relationship you have with Allianz Privée, the main ones being:

1. Identification and contact data : title, surname, first name, date of birth, nationality, postal address, email, telephone number, etc.

2. Data relating to the monitoring of the commercial relationship : your requests and exchanges with our services including identification data, our telephone conversations, our correspondence, requests for information, satisfaction surveys and any other information that you may have wished to send us.

3. Connection and browsing data

4. Data relating to your professional situation : professional category, profession, type of contract, inactivity, working hours, high-risk work

5. Data relating to your family situation,  including information relating to marital status (marriage, civil partnership, marital life), household composition (number of people in the household, age), capacity and protection regime (minority, guardianship, curatorship);

6. Data relating to the economic, patrimonial and financial situation (income from work, movable and immovable assets, tax data, bank details/IBAN, composition of the tax household);

7. Data relating to lifestyle habits and uses of goods in relation to the risks insured or the services offered;

8. Data necessary for the conclusion of the contract between Allianz Privée and you;

9. In general, all the data that is essential for underwriting, managing insurance contracts, and complying with regulatory obligations.

 

Allianz Privée does not collect or process any "sensitive" data within the meaning of the GDPR. In addition, bank data is managed exclusively by our service provider; we do not have access to it.

​

The recipients of your personal data

Within the framework of the stated purposes, the recipients of your personal data are: 

1. Allianz Privée employees (only persons who need to know data in the context of their assignment) and its subcontractors who process your data on its behalf;

2. the selected insurers and their intermediaries: the relevant data is transmitted to these insurers in the context of the preparation of quotes and the subscription of contracts 

3. Allianz Privée's business partners (business introducers)

 

Allianz Privée may also be required to communicate your data to third parties when such communication is required by law, a regulatory provision or a judicial decision, or if such communication is necessary to ensure the protection and defence of our rights.

​

They may be transmitted to public bodies such as TRACFIN (Intelligence Processing and Action against Clandestine Financial Circuits) for suspicious transaction reports, etc.

In the event of the transfer of your personal data outside the European Economic Area to countries that are not suitable within the meaning of the GDPR, Allianz Privée puts in place appropriate safeguards to ensure the protection of personal data. If you would like information about these guarantees, please send your request to the address given in the "Your contacts" section.

​

Technical and organisational measures to protect your data

To protect your personal data, Allianz Privée implements appropriate technical and organisational measures depending on the case.

In particular, these measures may include:

1. The implementation of confidentiality commitments, in particular with service providers,

2. Training of Allianz Privée employees and its delegates on the protection of personal data, or the confidentiality of health data,

3. The prohibition of employees and subcontractors from copying personal data on mobile devices, 

4. Preservation of data integrity to protect against malicious acts or accidental events through redundant backups (disaster recovery plan, logical or physical partitions, etc.),

5. A business continuity plan in order to be able to resume processing within a reasonable time frame and thus limit the consequences for the management of customers' contracts and for commercial activity, in the event of serious external incidents (natural or industrial disasters, strikes or social unrest, pandemics, etc.),

6. Conducting external audits and carrying out process controls to remedy any deficiencies observed,

7. The granting of individual authorisations to employees to information systems, and the authentication of access to its systems,

8. The establishment of access controls to the company's premises and the surveillance of these premises,

9. Logging of connection traces on information systems,

10. The storage of data is limited in time, with deletion of this data at the end of the appropriate retention period.

 

These technical and organizational measures are evolving, and adapted to each information system in the environment of the processes implemented.

 

The security of our website is ensured by the implementation of solutions for managing and blocking malicious bots. These measures may involve the use of cookies to identify and prevent suspicious activity. A regular evaluation of these practices is carried out to refine the detection of malicious bots. This transparency is essential to ensure optimal protection while respecting your privacy rights.

How long we keep your personal data 

Your personal data is kept at least during the execution of the processing related to our contractual relationship.  Beyond this relationship, these periods are increased to take into account the rules of legal prescription and the legal and regulatory retention obligations.

For prospects who have consented to be contacted, the maximum possible retention period for the data collected to exchange information on our offer is 3 years, from the last contact between Allianz Privée and the prospect, unless you request to withdraw your consent or delete your data.

When you exercise your rights, our Data Protection Officer processes your personal data for the purpose of managing your request (title, surname, first name, copy of identity document, nature of the request, response provided). This data is kept for a period of 6 years, with the exception of a copy of your identity document, which is kept for the time it takes to carry out verifications or to comply with a legal obligation.

More detailed rules on storage periods are available on a case-by-case basis on request under the right of access (see chapter "Your rights over your personal data").

 

Your rights over your personal data

At any time, you can exercise your rights with Allianz Privée by contacting the address indicated in the "Your Contacts" section.

​

1. Right to object: you can request that your personal data no longer be subject to specific processing except where the legal basis for the processing is the regulatory obligation or the performance of the contract.

2. Right to withdraw your consent: For all processing operations that require your express consent, you have the right to withdraw your consent at a later date.

3. Rights of access to your personal data and processing: you can ask Allianz Privée for access to your personal data and additional information relating to the processing carried out.

4. Right to rectification: you can exercise your right to rectification when your personal data is inaccurate or incomplete.

5. Right to erasure: You can request the erasure of your personal data at any time. However, this deletion is only possible if the purpose pursued has been completed, and if the regulatory retention periods allow it.

6. Right to restriction of processing: you can request the restriction of the processing of your personal data, when you wish to suspend ongoing processing in order to preserve the integrity of this data for a given period until further notice.

7. Right to data portability:  You can request a copy of the personal data you have previously provided in a structured format to have it sent to the person of your choice. This data will then be transmitted by the data controller to this person in a digital format.

8. Right to determine the post-mortem fate of your data: you can provide instructions for the storage, deletion or disclosure of your data after your death. 

 

To find out more about your rights, you can visit the CNIL.

If you are not satisfied with the response you receive or if there is no response, you can send your complaint to the CNIL according to the terms and conditions on their website.

​

Your contacts

To exercise your rights or for any additional information or complaint, you can contact the Data Protection Officer (DPO) of Allianz Privée Privée. All you have to do is write to us by email at dataprivacy@allianzprivee.com. 

The exercise of your rights is a strictly personal right and only concerns the applicant on his or her own behalf, or a legal guardian on behalf of a minor or a protected adult such as a person placed under curatorship or legal guardianship. It cannot be applied to another family member or someone living in the applicant's household without proof of a legal mandate given to the applicant by the person concerned or relevant proof.

The exercise of rights requires proof of identity, either by sending a copy of a valid identity document if you consent, or by other authentication methods that may be requested by Allianz Privée.

​

Changes to this Policy

Allianz Privée may modify the data protection policy as necessary. We will ensure that you are informed of any material changes (e.g. by a special mention on our website).

​

Updated: September 2025