Ensurly's privacy policy

Personal data is information that can be used to identify you. Ensurly is committed to securing that the processing of your personal data follows data protection regulations and will ensure that the personal data is processed in accordance with legal regulations.

Ensurly's privacy policy applies to those who use our website, those who purchase insurance products from us and those who register deductible refund claims with us. Ensurly reserves the right to change our current privacy policy and only notify of and make the changes available on our website.

Ensurly does not knowingly collect personal data about minors. If Ensurly becomes aware of unintended collection of information about individuals under the age of 18, such personal data will be deleted immediately.

1About our privacy policy and the data controller

Ensurly's privacy policy explains which personal data the company processes, how the data is processed, and the purpose and means of the processing. The policy also explains which rights you have and how these rights can be exercised.

The controller for all personal data is Ensurly Scandinavia AS, organisation number 915 907 288. This means that we are responsible for defining the purpose of the processing of personal data in connection with the processing activities and for complying with the privacy legislation.

If you have questions about how we process personal data, we recommend you to direct such inquiries via e-mail to personvern@ensurly.no.

2The purpose of the processing and the personal data that is processed

The overall purpose behind Ensurly's processing of personal data is the marketing and sale of insurance products covering insurance deductibles and deductibles associated with accidents or incidents when using rented means of transport.

We must based on this purpose process personal data in the administration of those who use our website, those who purchase insurance products from us, those who register deductible refund claims with us and in communication with insurance and rental companies.

2.1 Administration of those who use Ensurly's website

If you use the contact form on our website, Ensurly will process the following personal data about you:

• Name
• E-mail
• Information provided in the message field which is considered to be personal data

Ensurly will save the information received via the contact form in order to process inquiries regarding the same or other matters later, and requests not to provide personal data in the message field.

2.2 Administration of those who purchase insurance products from Ensurly

Ensurly must process personal data in order to register and manage customers. To be able to become a customer of Ensurly, you must provide the following personal data:

• Name
• National ID number
• E-mail
• Mobile phone number
• Address
• Payment information

Once you have become a customer of Ensurly, you may choose to receive newsletters and other marketing from us via e-mail. In order to send you this, we need your consent. You can at any time withdraw this consent on the account information page or by clicking the unsubscribe link at the bottom of such an e-mail.

2.3 Administration of those who register deductible refund claims with Ensurly

Ensurly must process personal data in order to receive and process deductible refund application forms and to comply with our insurance policy. To be able to register a deductible refund claim with Ensurly, you must provide the following personal data:

• Name
• National ID number
• Bank account number
• Insurance company or rental company
• Claim number or rental reference number
• Date of accident or incident
• Information about your insurance or rental conditions

3The legal grounds for processing

Ensurly's legal grounds for collecting and processing personal data is:

• Conveying relevant information to inquiring website users

  Legitimate interest, cf. GDPR article 6 no. 1 letter f)

• Establishing and following up on customer relations

  Legitimate interest, cf. GDPR article 6 no. 1 letter b)

• Processing deductible refund application forms

  Legitimate interest, cf. GDPR article 6 no. 1 letter b)

• Keeping payout information

  Legal obligation, cf. the Accounting Act § 13 and GDPR article 6 no. 1 letter c)

• Distribution of news and other marketing via email

  Consent, cf. GDPR article 6 no. 1 letter a)

• Keeping customer data after cancellation of customer relations

  Legitimate interest, ref. point 6 below

4Recipients of personal data

To the extent necessary, Ensurly will share personal data with our partners and subcontractors, who are subject to confidentiality obligations. We may also be required to share personal data with government agencies if disclosure obligations follow a decision made in accordance with law or legal regulations.

5Data processors

In order to offer insurance products to you, Ensurly uses partners and subcontractors for, among other things, data management and storage, user behaviour analysis, marketing, and systems for accounting and to process payments. In line with the data protection requirements, we have data processing agreements with such suppliers, who can process data on behalf of Ensurly to the extent necessary.

Our partners and subcontractors are not permitted to use the personal data they have access to for other purposes than those associated with the services they provide to Ensurly.

6Deletion of personal data

Ensurly will delete personal data when it is no longer necessary to keep it for the purposes for which it was collected.

If you cancel your customer relationship, Ensurly will delete all your personal data no later than 3 years after the insurance coverage you have paid for has expired. The reason we keep your personal data after the customer relationship has been ended, is to be able to preserve your and our interests and process any inquiries related to your cancelled customer relationship and deductible refund application forms that have not been submitted.

Ensurly reserves the right to keep certain personal data for longer periods of time if keeping it is necessary to resolve disputes or comply with our insurance policy, the Accounting Act, or technical and legal requirements or restrictions related to our security, integrity or operations.

8Information security

Ensurly processes personal data in a secure way and has established procedures that meet the requirements described in the privacy legislation. The security measures are technical, contractual and organisational. Only personnel who need access to perform their work tasks can look into the personal data processed by Ensurly. We regularly assess the security of all central systems Ensurly uses to process personal data.

9Your rights

The privacy legislation gives you many rights when Ensurly collects and uses personal data about you.

• You have the right to be informed
• You have the right to access
• You have the right to rectification
• You have the right to erasure
• You have the right to restrict processing
• You have the right to reject processing
• You have the right to your own automated choices
• You have the right to data portability

If the processing of your personal data is based on consent, you can at any time withdraw this consent. In case you have questions or would like to complain about Ensurly's processing of personal data, we recommend you to direct such inquiries via e-mail to the address provided in point 1 above. You also have the right to complain about Ensurly's processing of personal data to the Data Protection Authority, but we hope you choose to contact us first. You can read more about your rights in the privacy legislation.