Privacy & Legal Information

1. Notices relating to the legal bases and the rights of data subjects

The VHV Group respects the personal rights of the visitors to its website and orientates the data collection, processing and storage to the General Data Protection Regulation (GDPR) and to the Federal Data Protection Act (BDSG) and to the surrounding legal framework.

A principle, which the VHV Group takes into account with the set-up of the internet application, is that of the data economy and data avoidance. Under this we understand that is must principally be possible for users of the website to only request certain information with the specific inputs determined for this purpose. VHV GROUP moreover takes suitable technical and organisational measures for the security of its data.

We use the personal data entrusted in our care for statistical purposes. In addition, we process your personal data in order to fulfil statutory obligations such as e.g. stipulations under supervisory law, storage obligations under commercial and tax law or our consultancy obligation. The respective statutory regulations in conjunction with Art. 6 Para. 1 lit. c) GDPR serve as a legal basis for the processing in this case. We will delete your personal data as soon as they are no longer necessary for the aforementioned purposes. It may occur that personal data are stored for the time, in which claims may be asserted against our company (legal statute-of-limitations of three or up to thirty years). Moreover, we store your personal data as long as we are obligated to do so by law. This can, as a rule, be derived from legal evidence and storage obligations, which among others are regulated in the HGB [German Commercial Code}, the Fiscal Code and the German Money Laundering Act. The storage deadlines are accordingly up to ten years.

Responsible body for the processing:

VHV Vereinigte Hannoversche Versicherung a.G.
VHV-Platz 1
30177 Hanover
T +49.511.907-0
F +49.511.907-4141
Email: info@VHV.de

Your rights as a data subject

You can:

request information in accordance with Art. 15 GDPR about the personal data of yours the we process;
request immediate rectification of inaccurate data or completion of your personal data stored with us in accordance with Art. 16 GDPR;
request erasure of your personal data stored with us in accordance with Art. 17 GDPR, except where processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest, or for the assertion, exercise or defense of legal claims;
request that the processing of your personal data be restricted in accordance with Art. 18 GDPR where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the assertion, exercise or defense of legal claims; or you have objected to processing pursuant to Article 21 GDPR;
receive the personal data that you have submitted to us, in a structured, commonly used and machine-readable format or request their transfer to another controller in accordance with Art. 20 GDPR;
revoke your consent in accordance with Art. 7 (3) GDPR that you have given to us at any time. If you do so, we will no longer in future be able to process any data based on your consent. You will not incur any costs other than the postage or transmission costs in accordance with base rates;
object to this processing in accordance with Art. 21 GDPR if we are processing your data to safeguard legitimate interests and there are grounds arising from your particular situation which oppose it. You can also object to processing for direct marketing purposes at any time without specifying reasons. You can also assert this right through the email address below. Any such objection will normally entail that the service for which the data processing is intended can no longer be rendered.

datenschutzbeauftragter@vhv.de

You have the option of approaching the above-mentioned Data Protection Officer or a data protection regulatory authority with a complaint. The data protection regulatory authority responsible for us and the one to be approaced it: The Data Protection Commissioner for the State of Lower Saxony, Prinzenstr. 5, 30159 Hannover, Germany.

2. Notices relating to the data processing with the use of vhv-gruppe.de

VHV Group stores, if applicable, personal data pertaining to users of the website during the visit. According to Article 4 No. 1 GDPR “personal data” are all items of information, which refer to an identified or identifiable natural person. This includes e.g. the name, the address, email or the telephone number. According to prevailing opinion it also concerns the IP address, which is individually allocated to each computer by a provider, data that can be referred to a person. Not deemed as personal data are those, with the help of which you are not identifiable (anonymised data), or also for example the sole detail of the age or the sex and this without reference to your person.

We use the following methods to gain information:

Applicants' portal:

We use your personal data in our career portal for the purpose of processing and managing the application process.

You can find further details on the purposes of the processing as as your rights as a data subject with the application procedure here.

Personalized offers:
At various places of its internet offer the VHV Group offers the possibility to call personal information directly by the use of applications. It is necessary to enter personal data in this respect – depending on the type of the requested information - These data recorded for the purpose requested by the visitor pursuant to Art. 6 Para. 1 lit. a) GDPR within the called application and are transmitted to processing programs or to employees obligated to non-disclosure of the VHV Group. These will then make the requested information directly (in the internet) or indirectly (by using other communication channels) available to the user again. Both the personal data as well as the thus resulting results are filed in corresponding databases and thus stored.

Data in logfiles of webservers:
The data collected in the logfiles of the webservers are stored for statistical purposes pursuant to Art. 6 Para. 1 lit. f) GDPR and evaluated. With the help of the statistical evaluation the VHV Group optimises its website and the supply of visitors from the internet.

Cookies and website analysis:
We use so-called cookies on our website. Cookies are small text files, which are stored locally in the cache of the internet browser of the site visitor. The cookies enable the recognition of the internet browsers. Cookies provide information in order to recognize you automatically again. This recognition is carried out owing to the IP address stored in the cookies. The help function in the menu bar of the majority of web browsers will explain to you how and to what extent you can accept new cookies or can generally refuse the use of cookies. This website uses Tracking-Analyse methods in order to be able to evaluate website activities. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to our server and stored there. The VHV Group will use this information in order to evaluate your use of the website to compile reports about the website activities for the website operator. The VHV Group will also if applicable transmit this information to third parties if this is stipulated by law, or insofar as third parties process these data by order of the VHV Group. You can find a list of our service providers under number 6 of the data protection notices. The VHV Group will in no way connect your IP address with other data of the VHV Group.

You can prevent the installation of the cookies by a corresponding setting of your browser software; however, we would like to point out to you that in this case you can, if applicable, not use all functions of this website in full.

a) Notices relating to used Social Media plugins, Integration of videos and live chat

Social media plug-ins

On vhv-gruppe.de we currently use the following Social-Media plugins: Twitter. For the protection of your personal data we use the so-called 2-click solution. This means if you visit our sites, owing to this visit, principally no personal data are forwarded to the provider of this plugin. You can recognize the provider of the plugin by the marking on the greyed-out box. Only when you click on one of these plugins will personal data be transmitted: By the activation of the plugin the data will be automatically transmitted to the respective plugin-provider and stored there (at US providers in the USA). We neither have any influence on the collected data and data processing, nor are we aware of the full extent of the data collection, the purposes and storage deadlines.

As soon as you activate a plugin, the plugin provider will receive the information that you have called the corresponding sub-site of our online offer. Irrespective whether you have an account at the plugin provider or are not logged into this, there is a high probability that the IP address as well as device-specific information (e.g. hardware, version of the operating system, clear device identifiers) are transmitted and used. In addition, the data collection of the plugin provider is often carried out via cookies, which you can deactivate in the browser settings. If you are logged into the provider, the data will be directly allocated to your account. If you click on the activated plugin button and e.g. link the site, the plugin provider also stores this information in your user account and will publicly notify your contacts hereof. When you do not request the allocation with your profile at the plugin provider you must log-out before clicking on the button.

Note: If you wish to use the social media plug-ins on our website which process your data in third countries (e.g. Facebook, Twitter), we would like to draw your attention to the following. As soon as you click on the relevant social media button, you leave our website and will be forwarded to the website of the plug-in provider. If your data are processed in the U.S., it cannot be guaranteed that an appropriate level of data protection will apply. In particular, there is a risk that it may be possible for U.S. authorities to process your data for supervision or monitoring purposes, possibly with no right of redress. Please note the particular data protection information of the plug-in providers.

You can obtain further information relating to the purpose and extent of the data collection and their processing by the plugin provider in the privacy statements of these providers as notified below. There you will also receive further information regarding your rights in this respect and possibilities for setting for the protection of your privacy:

aa) Twitter, Inc., 1355 Market Street Suite 900, San Francisco, California 94103, USA: http://www.twitter.com/privacy?lang=de

b) Notices relating to the use of your email address and the contact form

aa) If you communicate your email address to us within the scope of the processing of an activity or via the contact form, we will store and use these if applicable for the further communication relating to the relevant contract or activity, if you do not object to this use. A forwarding or use of your data for other purposes is excluded hereby. Furthermore, the data entered by you in the contact form will be processed. In addition, your IP address will be collected. The legal bases for this processing are Art. 6 Para. 1 lit. a) and f) GDPR.

You can also object to this use informally at all times or revoke your consent. You can send your objection or revocation to datenschutzbeauftragter@vhv.de richten.

3. Notices relating to the webtracking and external services
On our website we use so-called “tracking technologies” for the purpose of personalised advertising. Your data are processed pseudonymised in order to assess certain personal aspects and in particular to analyse or foresee person preferences and interests as well as personal conduct. Pursuant to Art. 6 Para. 1 lit. f) in conjunction with Art. 5 Para. 1 lit. a) GDPR this is permitted as we have a legitimate interest in this processing and to use or have used suitable technical and organisational measures to secure the processing. As the website operator we have a legitimate interest in creating usage profiles for fading in target-oriented advertising coordinated to the individual user. You can object to this processing of your personal data for the purpose of advertising under the links enclosed for the external services below informally at all times.

Google Analyitcs

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). The information generated by the cookie regarding use of this website by users is generally transmitted to a Google server in the U.S. and stored there. IP anonymization has been activated on this website with the result that users’ IP addresses are first truncated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be transferred to a Google server in the U.S. and truncated there. Google will use this information on behalf of the operator of this website in order to evaluate users’ use of the website, compile reports on website activity and provide further services relating to use of the website and internet usage for the website operator. The IP address transmitted from your browser by Google Analytics is not combined with other Google data. You can prevent the storage of cookies by a corresponding setting in your browser software; however, this offer draws users' attention to the fact that in this case you might not be able to use all functionalities of this website to their full extent.

Users can also prevent the data generated by the cookie relating to their use of the website (incl. their IP address) from being transmitted to Google and processed by Google by downloading and installing the browser plug-in which is available on the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de

You can find more detailed information on terms of use and data protection at: http://www.google.com/analytics/terms/de.html or at: https://www.google.de/intl/de/policies/. We would point out that Google Analytics has been extended on this website to include the code „anonymizeIp“ to guarantee that the registration of IP addresses is anonymized (so-called IP masking).

We also use Google Analytics to evaluate data from Adwords and the double-click cookie for statistical purposes. If you do not wish this, you can deactivate it via Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).

You can prevent Google Analytics from recording data by clicking on the following link. An opt-out cookie is placed on your computer which prevents your data from being registered on future visits to this website.

4. Technical and organisational security measures

In order to guarantee the confidentiality of the communication with you, we use with the transmission the status of technology in line with encryption. This standard of security is achieved by all browsers of the younger generation. If applicable you should update the browser on your PC.

The employees of the VHV Group are obligated to confidentiality of the data. The data processing and our technical security precautions are adjusted regularly to the most recent conditions and requirements.

As a company of the VHV Group the VHV Group exclusively sends encrypted emails. Uses common encryption procedures such as PGP, S/MIME, TLS, which the majority of providers support. If the encryption does not work automatically with you, we offer you as alternative a procedure with password-protected PDF. Here you can find out more about the email encryption.

5. List of service providers
Bodies, at which the data processing is the main object of the order:

Bodies	Object / Purpose of the Commission
VHV solutions GmbH	Offer processing/contract management, service processing, IT services
VHV Holding AG	Distribution, controlling, internal audit
VHV Vereinigte Hannoversche Versicherung a.G.	Debt collection/dunning procedure, compliance, group law, Human Resources, data protection and information security
Hannoversche - Consult GmbH	Pension expert’s opinion
Hannoversche Direktvertriebs-GmbH	Telephone customer service
arvato direct services GmbH	Incoming post and data entry, offer creation and entry of applications in the life insurance
Canon Deutschland Business Services GmbH	Printing of documents
DATEN PARTNER Gesellschaft für Direktmarketing und Informations-Technologie mbH	Printing of documents
Deutsche Post E-Post Solutions GmbH	Digitalisation and classification of physical incoming post
Rhenus Mailroom Services GmbH	Processing of letter returns
Rhenus Office Systems GmbH	Storage and delivery of archived files
REISSWOLF International AG	Destruction of files
Deutsche Post Adress GmbH & Co. KG	Address comparison, deceased information
Schufa Holding AG	Address comparison, creditworthiness information

Categories of bodies, with which the data processing is not the main object of the processing or which only operate occasionally:

Categories of Bodies	Tasks
IT service providers	Support, maintenance, programming services
Lawyers	Legal advice
Market research companies	Market research
Marketing agencies	Marketing actions
Letter shops	Processing and finishing of printed matter for advertising purposes
Banks	Financial services