 |
Legal Notices
|
ALWEN HOUGH JOHNSON PRIVACY AND CORE USER INFORMATION NOTICE
Alwen Hough Johnson (which includes AHJ Holdings Limited, Alwen Hough Johnson Limited, AHJ Europe AS and AHJ Denmark ApS) (“we” or “us” or “our”) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
The primary service provided by Alwen Hough Johnson is (re)insurance broking and specialised underwriting for specific classes of business. Our business practices are to enable the consideration of, access to and administration of (re)insurance contracts and the servicing of claims on such contracts. In addition Alwen Hough Johnson provides servicing support to our clients. Alwen Hough Johnson may also collect personal data in relation to shareholders of the company. Alwen Hough Johnson takes your privacy very seriously and will never disclose or share your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice.
Alwen Hough Johnson and other participants in the (re)insurance industry are required to process and share personal data. We endeavour to protect the privacy and the confidentiality of the personal data that we process in respect of the services we provide to our clients and in respect of individuals’ use of the Alwen Hough Johnson website (www.ahjltd.co.uk).
CONTACT DETAILS
Alwen Hough Johnson’s registered office is at 2 Minster Court, Mincing Lane, London, EC3R 7BB and we are a company registered in England and Wales under company number 01195076. We are registered on the Information Commissioner’s Office Register; registration number Z5731803, and act as the joint data controller when processing your data. We are authorised and regulated by the Financial Conduct Authority under number 308774.
AHJ Europe AS’s registered office is at Grundingen 6, 0250 Oslo, Norway and we are a company registered in Norway under company number 922 037 922. We are registered with the Norwegian Data Protection Authority, Datatilsynet, and act as a joint controller when processing your data. We are authorised and regulated by the Norwegian Financial Supervisory Authority, Finanstilsynet.
The designated Data Protection Officer of both companies listed above is Rollin Barton, who can be contacted in writing at Alwen Hough Johnson, 2 Minster Court, Mincing Lane, London, EC3R 7BB or via email at dpo@ahj-ltd.co.uk.
The following list is not exhaustive and is subject to change. We collect and process the following personal data:
- Personal information – name(s), date of birth, place of birth, location data, address, email address, telephone details, marital status, relationship to the policyholder, (re)insured, beneficiary or claimant.
- Biographical data – age, photograph, gender, height, eye colour.
- Identification details - identification numbers issued by government bodies or agencies (e.g., depending on the country you are in, social security or national insurance number, passport number, ID number, tax identification number, driver’s license number). Photocopies of identification documents such as passport, national identity card and driver’s licence.
- Employment data - employer, job title, employment history and qualifications.
- Financial information – bank details, credit history, fraud convictions, sanctions details received from various anti-fraud and sanctions databases, or regulators or law enforcement agencies.
- (Re)insured risk, previous claims and current claims information - information about the (re)insured risk and claims may contain personal data and may include, only to the extent relevant to the risk being (re)insured:
- Health data - current or former physical or mental medical conditions, health status, injury or disability information, medical procedures performed, relevant personal habits (e.g., smoking or consumption of alcohol), prescription information, medical history, drugs test results;
- Criminal records data - criminal convictions, including driving offences; and
- Other special categories of personal data - in very limited circumstances, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning an individual’s sex life or sexual orientation.
- Where we collect such information directly from individuals, we will inform them of why the information is required and the consequences of not providing it on the relevant form.
We collect and receive personal data at various points and from various sources, including but not limited to:
- when you contact Alwen Hough Johnson, for example when requesting or obtaining a (re)insurance quote; purchasing a (re)insurance product, using our website, or when telephoning, or writing (by post or email) to us;
- in the event of a claim, third parties including the other party to the claim (claimant/ defendant), witnesses, experts (including medical experts), loss adjustors, lawyers and claims handlers;
- other (re)insurance market participants, such as (re)insurers and other intermediaries;
- anti-fraud databases and other third party databases, including sanctions lists;
- government agencies, such as vehicle registration authorities and tax authorities;
- claim forms;
- publicly available information from sources such as the internet;
- business information and research tools;
- third parties who introduce business to us;
- contact form on our website.
The table below sets out the purpose for which we process personal data, explains how we share such information, and identifies the “lawful basis for processing” such data.
Each “lawful basis for processing” has been determined by the General Data Protection Regulation (the GDPR), these allow companies to process personal data only when the processing is permitted by one of the specific lawful bases (the full description of each of the grounds can be found in Appendix 1).
| PURPOSE OF PROCESSING |
LAWFUL BASIS |
DISCLOSURES |
| Quotation/ Inception |
|
|
| Establishing a client relationship with an insurance company or other commercial entity |
- Compliance with a legal obligation
- For the performance of a contract
|
- Regulators
- Errors and Omissions Insurers
- Legal advisers
|
| Evaluating the risks to be covered and matching to the appropriate (re)insurer(s), policy and premium |
- For the performance of a contract
For processing special categories of personal data (e.g. health information) and criminal records data:
- Substantial public interest – for insurance purposes
|
- (Re)insurers
- Third party service providers to the insurance market
- Errors and Omissions Insurers
- Legal advisers
|
| Policy Administration |
|
|
| General client service, including communicating with clients |
- For the performance of a contract
For processing special categories of personal data (e.g. health information) and criminal records data:
- Consent (allergies)
- Substantial public interest - for insurance purposes
|
- Errors and Omissions Insurers
- Legal advisers
|
| Collecting or refunding of premiums, paying on claims, and processing and facilitating other payments |
- For the performance of a contract
|
- (Re)insurers
- Banks
- Third party service providers to the insurance market
- Errors and Omissions Insurers
- Legal advisers
|
| Claims processing |
|
|
| Managing (re)insurance claims |
- For the performance of a contract
For processing special categories of personal data (e.g. health information) and criminal records data:
- Substantial public interest - for insurance purposes
|
- (Re)insurers
- Claims handlers
- Lawyers
- Loss adjustors
- Experts
- Third parties involved in handling or otherwise addressing the claim, such as health care professionals
- Third party service providers to the insurance market
- Errors and Omissions Insurers
- Legal advisers
|
| Renewals |
|
|
| Contacting individuals at our clients in order to arrange the renewal of the (re)insurance policy |
- Legitimate interests of Alwen Hough Johnson (to correspond with clients to facilitate the continuation of (re)insurance cover)
|
- (Re)insurers
- Errors and Omissions Insurers
- Legal advisers
|
| Throughout the (re)insurance lifecycle |
|
|
| General risk modelling |
- Legitimate interests of Alwen Hough Johnson (to build risk models that allow placing of risk with appropriate (re)insurers and to advise clients of the most appropriate product)
|
- Errors and Omissions Insurers
- Legal advisers
|
- Reviewing legal claims, investigating fraud and complying with our legal or regulatory obligations
|
- Compliance with a legal obligation
For processing special categories of personal data (e.g. health information) and criminal records data:
- To establish, defend or prosecute legal claims
- Consent
- Substantial public interest - for insurance purposes
|
- Insurance, data protection and other regulators
- Police
- (Re)insurers
- Auditors
- Lawyers
- Errors & Omissions insurers
- Third parties involved in the investigation or prosecution, such as private investigators
- Legal advisers
|
| Website activities |
|
|
| To communicate with you regarding any queries you raise via the website |
- Legitimate interests of Alwen Hough Johnson (to correspond with website users)
|
|
As noted in the ‘Sharing, Disclosing and Using Your Personal Data’ section of this notice, we occasionally process your personal information under the legitimate interests’ legal basis. Where this is the case, we have carried out a thorough Legitimate Interests’ Assessment (LIA) to ensure that we have considered your interests and any risk posed to you against our own interests and obligations; ensuring that they are proportionate and appropriate.
In order to facilitate the provision of (re)insurance cover and to administer (re)insurance claims, unless another legal ground applies, we rely on the data subject’s consent to process special categories of personal data and criminal records data, such as medical and criminal convictions records, as set out in the table above. This consent allows us to share the information with other (re)insurers, intermediaries and third parties that need to process the information in order to undertake their role in the (re)insurance market.
The affected individual’s consent to this processing of special categories of personal data and criminal records data may be necessary for Alwen Hough Johnson to be able to provide the services a client requests. Where you are providing us with information about a person other than yourself, you agree to notify them of our use of their personal data and to obtain such consent.
Individuals may withdraw their consent to such processing at any time by contacting the Alwen Hough Johnson Data Protection Officer using the contact details in the Contact Details section above. However, doing so may prevent Alwen Hough Johnson from continuing to provide the services to the client. In addition, if an individual withdraws consent to a (re)insurer’s processing of their special categories of personal data and criminal records data, it may not be possible for the (re)insurance cover to continue.
At Alwen Hough Johnson we do not carry out marketing activities, however if you have provided your consent, we may from time to time provide you with a newsletter.
We have in place physical, electronic, and procedural safeguards appropriate to the sensitivity of the information we maintain. These safeguards will vary depending on the sensitivity, format, distribution and storage of the personal data, and include measures designed to keep personal data protected from unauthorised access. If appropriate, the safeguards include the encryption of communications via Secure Sockets Layer (SSL) and Transport Layer Security (TLS) where possible, firewalls, access controls, separation of duties, and similar security protocols. We restrict access to personal data to only personnel and third parties that require access to such information for legitimate, relevant business purposes.
COLLECTION AND RETENTION OF PERSONAL INFORMATION
We collect, use, disclose and otherwise process personal data that is necessary for the purposes identified in this privacy notice or as permitted by law. If we require personal data for a purpose inconsistent with the purposes we identified in this privacy notice, we will notify clients of the new purpose and, where required, ask that they obtain individuals’ consent to process personal data for the new purpose(s).
Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the information was collected. For example, we retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired, or to comply with regulatory requirements regarding the retention of such data. When personal data is no longer needed, we either irreversibly anonymise the data (in which case we may further retain and use the anonymised information) or securely destroy the data.
Following the withdrawal of the United Kingdom (UK) from the European Union (EU) and European Economic Area (EEA) the EU Commission has found the UK GDPR to be adequate, thus Alwen Hough Johnson can continue to freely transfer personal data between the UK and EEA.
Certain countries outside the UK and EEA have been approved by the UK and European Commission as providing essentially equivalent protections as the UK and EEA data protection laws. UK and EU data protection laws allow Alwen Hough Johnson to freely transfer personal data to such countries.
Alwen Hough Johnson transfers personal data to, or permits access to personal data from, countries outside the UK and European Economic Area (EEA) or countries approved by the UK and European Commission. These countries’ data protection laws do not always offer the same level of protection for personal data as offered in the UK and EEA. We will, in all circumstances, safeguard personal data as set out in this privacy notice and in compliance with the General Data Protection Regulations and its equivalent UK Data Protection legislation.
If we transfer personal data to other countries outside the UK, EEA, or countries approved by the UK and European Commission, we will establish legal grounds justifying such transfer.
Individuals can request additional information about the specific safeguards applied to the transfer of their personal data.
You have the right to access any personal information that Alwen Hough Johnson processes about you and to request information about:
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to object to or to restrict processing (where applicable) in accordance with the data protection laws. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
You are not required to provide your personal data to Alwen Hough Johnson, however, as this information may be relevant for us to provide you with a contract of (re)insurance, we will not be able to offer some, or all, our services without the required personal data.
Links to third party websites on this website are provided solely for your convenience. If you use these links, you leave this website. Alwen Hough Johnson has not reviewed all of these third party websites and does not control and is not responsible for these websites or their content or availability. Alwen Hough Johnson therefore does not endorse or make any representations about them, or any material found there, or any results that may be obtained from using such websites. If you decide to access any of the third party websites linked to this website, you do so entirely at your own risk.
No endorsement or approval of any third parties or their advice, opinions, information, products or services is expressed or implied by any information on our website.
You may create links to this website provided you have first obtained permission in writing from Alwen Hough Johnson. You shall fully indemnify Alwen Hough Johnson for any loss or damage suffered by Alwen Hough Johnson for breach of this paragraph.
Alwen Hough Johnson only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your personal data, you have the right to complain.
Alwen Hough Johnson
Data Protection Officer
2 Minster Court, Mincing Lane, London, EC3R 7BB
020 7 398 2600
dpo@ahj-ltd.co.uk
Information Governance Dept - United Kingdom
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Information Governance Dept - Norway
The Data Protection Authority
P.O. Box 458
Sentrum
NO-0105 Oslo
Norway
For any further details about our privacy policy please email us at dpo@ahj-ltd.co.uk.
Please note we reserve the right to change this privacy notice with any changes being posted onto this page.
FOR PROCESSING PERSONAL DATA
| Legal Ground |
Details |
| Consent |
The individual has given clear consent to process their personal data for a specific purpose. |
| Contract |
The processing is necessary for a contract with the individual. |
| Legal obligation |
The processing is necessary to comply with the law (not including contractual obligations). |
| Vital interests |
The processing is necessary to protect someone’s life. |
| Public task |
The processing is necessary to perform a task in the public interest or for official functions, and the task or function has a clear basis in law. |
| Legitimate interests |
The processing is necessary for legitimate interests of the company or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. |
FOR PROCESSING SPECIAL CATEGORIES OF PERSONAL DATA
| The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject. |
| Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject. |
| Processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent. |
| Processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects. |
| Processing relates to personal data which are manifestly made public by the data subject. |
| Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity. |
| Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. |
| Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3. |
| Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. |
| Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. |
TERMS OF USE
This website is provided on behalf of Alwen Hough Johnson Limited whose registered office is at 2 Minster Court, Mincing Lane, London EC3R 7BB, Company No 01195076
Please read the details set out below carefully before using this website.
For the purpose of these Terms and Conditions of Use, ‘you’ or ‘your’ means the person or persons accessing the website and ‘our’ or ‘we’ refers to Alwen Hough Johnson Limited.
By registering with, using or visiting our website you are deemed to have agreed to comply with and be bound by these terms and conditions (‘Terms’) and our Privacy Policy (above), without limitation or qualification.
You may only use our website if you agree to these terms and conditions. If you do not agree to them, you must stop using our website.
Changes may be made to the terms and conditions at any time without notice by updating this posting. You agree to review the terms regularly and your continued access to or use of the website will mean you agree to any changes.
The following clauses exclude or limit our legal liability for the website. You should read them carefully.
Whilst we have taken reasonable steps to ensure the accuracy, currency, availability correctness and completeness of the information contained on the website, information is provided on an "as is", "as available" basis and we do not give or make any warranty or representation of any kind, whether express or implied. The use of the website is at your sole risk. We will not be liable for any loss or damage whatsoever and howsoever arising as a result of your use of or reliance on the information contained on the website to the maximum extent permitted by law.
We do not represent or warrant that the website will be available and meet your requirements, that access will be uninterrupted, that there will be no delays, failures, errors or omissions or loss of transmitted information, that no viruses or other contaminating or destructive properties will be transmitted or that no damage will occur to your computer system. You have sole responsibility for adequate protection and back up of data and/or equipment and for undertaking reasonable and appropriate precautions to scan for computer viruses or other destructive properties.
We make no representations or warranties regarding the accuracy, functionality or performance of any third party software that may be used in connection with the website.
Links to third party websites on this website are provided solely for your convenience. If you use these links, you leave this website. Alwen Hough Johnson Limited has not reviewed all of these third party websites and does not control and is not responsible for these websites or their content or availability. Alwen Hough Johnson Limited therefore does not endorse or make any representations about them, or any material found there, or any results that may be obtained from using them. If you decide to access any of the third party websites linked to this website, you do so entirely at your own risk.
No endorsement or approval of any third parties or their advice, opinions, information, products or services is expressed or implied by any information on our website.
You may create links to this website provided you have first obtained permission in writing from Alwen Hough Johnson Limited. You shall fully indemnify Alwen Hough Johnson Limited for any loss or damage suffered by Alwen Hough Johnson Limited for breach of this paragraph.
Messages sent over the Internet cannot be guaranteed to be completely secure as they are subject to possible interception or loss or possible alteration. Alwen Hough Johnson Limited is not responsible for them and will not be liable to you or anyone else for any damages or otherwise in connection with any message sent by you to Alwen Hough Johnson Limited or any message sent by Alwen Hough Johnson Limited to you over the Internet.
Copyright in the pages, screens, information and material in their arrangement included in this website is owned by or licensed to Alwen Hough Johnson Limited unless otherwise noted. You may imprint, copy, download or temporarily store extracts from our website for your personal information or when you use our products and services. You must not alter anything. Any other use is prohibited unless you first get our written permission.
Save for third party trademarks, all Intellectual Property Rights including, without limitation, all database rights, rights in design, rights in know-how, trademarks, patents & rights in inventions (in all cases whether registered or unregistered & including all rights to apply for registration) & all other intellectual or industrial property rights in any jurisdiction in any information, content, materials, data or processes contained in or to this web site belong to Alwen Hough Johnson Limited. All rights of Alwen Hough Johnson Limited in such Intellectual Property Rights are hereby reserved.
The Terms and Conditions of Use contain the entire agreement between us in connection with this website. The agreement will be governed by and construed in accordance with the laws of England. You agree to submit any dispute arising out of your use of this website or associated services to the exclusive jurisdiction of the English Courts.
COOKIE POLICY
This website uses cookies. A cookie is a small text file that is placed on a device by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. For example, cookies are used to remember users’ preferences; to help navigate between pages efficiently and can help determine if a user is a returning visitor, or whether the current user is logged in to the website that they are visiting.
In general there are two types of cookies; persistent cookies and session cookies.
A persistent cookie consists of a text file sent by a web server to a web browser, which will be stored by the browser and will remain valid until its expiry date (unless deleted by the user before the expiry date).
A session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
The list below explains the cookies we use and why:
o 'ASP.NET_SessionId': This cookie is necessary for the site to function normally and is held temporarily in memory and is automatically deleted when the web browser is closed. This cookie contains no personally identifiable information.
o '__utma; __utmb; __utmc; __utmt and __utmz': These five cookies are used by Google Analytics to collect anonymous traffic data about your use of this website. This information is stored by Google and subject to its privacy policy, which can be viewed below.
Google Analytics collects information such as pages you visit on this site, the browser and operating system you use and time spent viewing pages. The purpose of this information is to help us measure a users’ level of engagement and to also help improve the site for future visitors.
Many websites use Google Analytics to collect traffic data and Google itself has produced a browser plug-in, which allows you to disable the collecting of information for all the websites you visit.
Should you wish to restrict or block the cookies which are set by Alwen Hough Johnson Limited, or indeed any other website, you can do this through your browser settings. The “Help” function within your browser should tell you how.
Alternatively, you may wish to visit www.allaboutcookies.org which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your computer as well as more general information about cookies. For information on how to do this on the browser of your mobile device, you will need to refer to your device manual.
Please be aware that restricting cookies may impact on the functionality of the Alwen Hough Johnson Limited website.