Legal grounds for processing personal data

We will only collect and use your personal data if at least one of the following criteria is met:

We have your consent;

Examples: Automatic settlement of claims involving health data
You give us permission to automatically process your personal data to take a decision on an application for insurance coverage. Please note that when the legal basis for processing personal data consists of your consent, you have the right at any time to withdraw said consent, without prejudice to the legality of the processing that occurred before consent was withdrawn. However, if you withdraw your consent, it may mean that we are no longer able to provide a particular service to you, which may affect your right to insurance or compensation.

It is necessary for the performance of a contract with you or to take measures upon your request before a contract is concluded.

Examples: To enter an insurance contract 
We may process the necessary data related to the insurance contract, including data about the policyholder and co-insured parties, the insured property and the risk related to the insurance as well as data necessary to establish the right to claims incurred.

The processing is necessary to determine, assert and defend legal claims.

Examples: For processing health information when settling claims

We may process personal data necessary for determining your right to take out certain policies or your right to certain insurance cover.

It is in our own or a third party's legitimate interests and where this does not entail disregard of your interests or rights.

Examples: To improve our adapted offers to you

This legal basis is applied to adapt our offers and communications with you, for direct marketing, to prevent fraud, for cooperation with business partners and for the development of our IT systems.

It is necessary to protect your vital interests, or those of others.

Examples: In an emergency

We may submit data to a healthcare institution in emergency medical circumstances when abroad.

The processing is necessary for compliance with a legal obligation.

Examples: Providing information to government agencies

For example, we are obliged to provide data to the Swedish tax agency about compensation paid in certain circumstances, and we are obliged to prevent money laundering.