Lockton Insurance Brokers Denmark Aps Privacy Notice

Section 3: Where we might collect your personaldata fromWe might collect your personal data from varioussources, including: you (for example by filling in forms or bycorresponding with us by post, phone, email orotherwise. This includes personal data you providewhen you:-make enquiries about or request our services;-subscribe to receive our newsletters orpublications;-request marketing to be sent to you;-give us some feedback);your family members, employer (including trade orprofessional associations of which you are a member)or representative; other insurance market participants; credit reference agencies; anti-fraud databases, sanctions lists, courtjudgements and other databases; government agencies such as the Borgerserviceand SKAT; Technical Data from analytics providers such asGoogle; forms on our website, and Technical Data and UsageData about your equipment, browsing actions andpatterns from your interaction with our website. Wecollect this personal data by using cookies and othersimilar technologies. Please see our Cookies Noticefor further details; search information providers, e.g.:-Individual Details from publicly available sourcessuch as the open electoral registeranderhvervsstyrelsen ; or-Individual Details from data brokers oraggregators; claims forms; third parties who introduce business to us;Which of the above sources apply will depend on yourparticular circumstances.For example, we might collect your personal data where: you have taken out an insurance policy through us(you are the policyholder), in which case we mightcollect your personal data from you, credit referenceagencies, anti-fraud databases, sanctions lists etc; a third party (such as a family member or youremployer) has taken out an insurance policy throughus for your benefit (you are an insured orbeneficiary), in which case we might collect yourpersonal data from your family member, employeretc; you are a claimant or other person involved in aclaim or relevant to a policy. E.g. you are making aclaim against an insurance policy you have taken outthrough us or that a third party has taken outthrough us for your benefit, or you are making aclaim against a third party’s insurance policy thatwas taken out through us, or a third party is making aclaim against an insurance policy you have taken outthrough us, in which case we might collect yourpersonal data from you, other insurance marketparticipants, witnesses, experts (including medicalexperts), loss adjustors, solicitors, and claimshandlers etc.in the event of a claim, third parties including the otherparty to the claim (claimant/defendant), witnesses,experts (including medical experts), loss adjustors,solicitors, and claims handlers.LOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICE5

Section 4: The purposes, categories, legalgrounds and recipients, of our processing of yourpersonal dataWe set out below the purposes for which we might use your personal data:PurposesRelationship Management - To provide you with information (for example in respect of products andservices) that you request from us, and taking steps at your request prior toentering into a contractQuotation / Inception - Setting you up as a client, including possible fraud, sanctions, credit andanti-money laundering checks- Evaluating the risks to be covered and matching to appropriateinsurer/policy/premium- Payment of premium where the insured/policyholder is an individualPolicy Administration - Client care, including communicating with you and sending you updates- Payments to and from individualsClaims Processing - Managing insurance and reinsurance claims- Defending or prosecuting legal claims- Investigation or prosecuting fraudRenewals - Contacting the insured/policyholder to renew the insurance policy- Evaluating the risks to be covered and matching to appropriatepolicy/premium- Payment of premium where the insured/policyholder is an individualOther purposes outside of theinsurance lifecycle but necessaryfor the provision of insurancethroughout the insurancelifecycle period - Complying with our legal and regulatory obligations- General risk modelling- Transferring books of business, company sales and reorganisationsConsultancy Services - Setting you up as a client, including possible fraud, sanctions, credit andanti-money laundering checks- Client care, including communicating with you and sending you updates- Payments to and from individuals- General risk modelling- Analysis as part of the specific consultancy advice- Transferring books of business, company sales and reorganisations- Complying with our legal and regulatory obligationsLOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICE2

PurposesWebsite Management - To administer and protect our business and this website and for internaloperations, including to keep our website safe and secure, data analysis,troubleshooting, testing, system maintenance, support, reporting andhosting of data, research, statistical and survey purposes- To use data analytics to improve our website, products/services,marketing, customer relationships and experiences, including to ensurethat content from our website is presented in the most effective mannerfor you and for your deviceMarketing - To make suggestions and recommendations to you about products orservices that may be of interest to you, to provide industry insight or toinvite you to events- To measure and understand the effectiveness of marketing we serve toyou and others and to deliver relevant marketing to youPlease note that in addition to the disclosures we have identified against each purpose, we may also disclose personaldata for those purposes to our service providers, contractors, agents and group companies that perform activities onour behalf.MARKETINGWe strive to provide you with choices regarding certainpersonal data uses, particularly around marketing andadvertising. We have established the following personaldata control mechanisms:Marketing communications from usWe may use your Individual Details and PolicyInformation to form a view on what we think you maywant or need, or what may be of interest to you. This ishow we decide which products, services, events andindustry insight may be relevant for you.You will receive marketing communications from us ifyou have requested information from us (including forexample where you have provided your explicit consentby way of opting-in to receiving our marketingcommunications in accordance with applicable law) or ifotherwise permitted under the applicable law and youhave not opted out of receiving that marketing. Suchmarketing communications may include risk or insurancerelated information or details of services, or products, orevents, which we think, may be of interest to you.Managing your Marketing Preference(including Opting out)You can manage your marketing preferences or ask us orthird parties to stop sending you marketing messages atany time by following the opt-out links on any marketingmessage sent to you or by contacting our DataProtection Manager at any time.Where you opt out of receiving these marketingmessages, this will not apply to personal data providedto us as a result of a product/service purchase,product/service experience or other transactions, andwill not affect communications relating to any suchmatters on which we are advising you.COOKIESYou can set your browser to refuse all or some browsercookies, or to alert you when websites set or accesscookies. If you disable or refuse cookies, please note thatsome parts of this website may become inaccessible ornot function properly. For more information about thecookies we use, please see our Cookies Notice.Third party marketingWe will get your express opt-in consent before we shareyour personal data with any company outside theLockton group of companies for marketing purposes.We may share your personal data with other companiesin the Lockton group of companies, if allowed andappropriate, for marketing purposes.LOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICE3

CHANGE OF PURPOSEWe will only use your personal data for the purposes for which we collected it, unless we reasonably consider that weneed to use it for another reason and that reason is compatible with the original purpose. If you wish to get anexplanation as to how the processing for the new purpose is compatible with the original purpose, please contact ourData Protection Manager.If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basiswhich allows us to do so.Please note that we may process your personal data without your knowledge or consent, in compliance with theabove rules, where this is required or permitted by law.LEGAL GROUNDS FOR PROCESSINGWe will only use your personal data when the law allows us to. In particular, we will rely on the following legalgrounds to use your personal data:For processing ordinary, non-sensitive personal dataLegal groundDetailsYour explicit consent (optional)You have given your explicit consent to the processing of those personaldata for one or more specified purposes, cf. Article 6(1)(a) in the GDPR.You are free to withdraw your consent, by contacting our DataProtection ManagerPerformance of our contract with youProcessing is necessary for the performance of a contract to which youare party or in order to take steps at your request prior to entering intoa contract, cf. Article 6(1)(b) in the GDPRCompliance with a legal obligationProcessing is necessary for compliance with a legal obligation to whichwe are subject, cf. Article 6(1)(c) in the GDPRFor our legitimate business interestsProcessing is necessary for the purposes of the legitimate interestspursued by us or by a third party, except where such interests areoverridden by your interests or fundamental rights and freedoms whichrequire protection of personal data, in particular where you are a child,cf. Article 6(1)(f) in the GDPR. These legitimate interests are set out nextto each purpose belowYour explicit consent (optional)You have given your explicit consent to the processing of those personaldata for one or more specified purposes, cf. Article 6(1)(a) in the GDPR.You are free to withdraw your consent, by contacting our DataProtection ManagerFor processing special categories of personal dataLegal groundDetailsYour explicit consent (optional)You have given your explicit consent to the processing of those personaldata for one or more specified purposes, cf. Article 9(2)(a) in the GDPR.You are free to withdraw your consent, by contacting our DataProtection ManagerYour explicit consent (necessary)You have given your explicit consent to the processing of those personaldata for one or more specified purposes, where we are unable toprocure, provide or administer insurance cover without this consent.You are free to withdraw your consent by contacting our DataProtection Manager. However, withdrawal of this consent will impactour ability to place or administer insurance or assist with the payment ofclaims. For more detail see Section 6: ConsentLOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICE2

For legal claimsProcessing is necessary for the establishment, exercise or defence oflegal claims, cf. Article 9(2)(f) in the GDPRWe may process data on criminal offences or convictions about you if you give your explicit consent hereto.Processing may also take place if it is necessary for the purpose of safeguarding a legitimate interest and this interestclearly overrides your interests, cf. Section 8(3) in the DDPA. Furthermore, such personal data may be processedabout you if the conditions for processing of special categories of personal data are met, cf. Section 8(5) in the DDPA.DISCLOSURES OF YOUR PERSONAL DATAWe may have to share your personal data with theparties set out below for the Purposes set out in thetable above. Internal third parties: other companies in the LocktonGroup (which means our subsidiaries and ultimateholding company and its subsidiaries) who provide ITand system administration services and undertakeleadership reporting External third parties:- Service providers who provide IT and systemadministration services;- Professional advisers including lawyers, bankers,auditors and insurers who provide consultancy,banking, legal, insurance and accounting services;- Credit reference agencies;- Anti-fraud and sanctions database providers;- Other insurance market participants such asintermediaries, insurers and reinsurers;- Banks;- Claims handlers;- Solicitors;- Auditors;- Loss adjustors;- Experts;- Third parties involved inclaims/investigations/prosecutions;- Private investigators;- Police;- Courts;- FSA, the Danish Data Protection Agency(Datatilsynet) and other regulators;- Third parties to whom we may choose to sell,transfer, or merge parts of our business or ourassets. Alternatively, we may seek to acquireother businesses or merge with them. If a changehappens to our business, then the new ownersmay use your personal data in the same way asset out in this privacy notice.LOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICETHE PURPOSES, CATEGORIES, LEGALGROUNDS AND RECIPIENTS, OF OURPROCESSING OF YOUR PERSONAL DATAWe have set out below, in a table format, a descriptionof all the ways we plan to use your personal data,including the categories of personal data and which ofthe legal bases we rely on to do so. We have alsoidentified what our legitimate interests are whereappropriate, and the third parties with whom we needto share your personal data.Note that we may process your personal data for morethan one lawful ground depending on the specificpurpose for which we are using your personal data.Please contact our Data Protection Manager if you needdetails about the specific legal ground we are relying onto process your personal data where more than oneground has been set out in the table below.3

PurposeCategories of DataLegal GroundsRELATIONSHIPMANAGEMENTTo provide you withinformation (for examplein respect of products andservices) that you requestfrom us, and taking stepsat your request prior toentering into a contractOrdinary, non-sensitivePersonal Data:- Individual details- Marketing andCommunications DataOrdinary, non-sensitivePersonal Data:- Performance of our contractwith you- Compliance with a legalobligation- For our legitimate businessinterests (to correspond withyou)QUOTATION/INCEPTIONSetting you up as a client,including fraud, credit andanti-money launderingand sanctions checksOrdinary non-sensitivePersonal Data:- Individual details- Identification details- Financial informationOrdinary non-sensitive- Credit referencePersonal Data:agencies- Performance of our contract - Anti-fraud andwith yousanctions databases- Compliance with a legalobligation- For our legitimate businessinterests (to ensure that theclient is within our acceptablerisk profile)- To assist with the preventionof crime and fraudSpecial Categories ofPersonal Data andCriminal Offence Data:- Credit and anti-frauddataSpecial Categories of PersonalData and Criminal Offence Data:- Consent- Our legitimate interests inpreventing fraud and ensuringthat the client is within ouracceptable risk profile. It is ourassessment that suchlegitimate interests clearlyoverride your interests if theprocessing relates toinformation about criminaloffences and convictionsOrdinary, non-sensitivePersonal Data:- Individual details- Identification details- Policy informationOrdinary, non-sensitivePersonal Data:- Performance of our contractwith you- For our legitimate businessinterests (to determine thelikely risk profile andappropriate insurer andinsurance product)QUOTATION/INCEPTIONEvaluating the risks to becovered and matching toappropriateinsurer/policy/premiumLOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICEDisclosures- Other insurancemarket participantssuch asintermediaries,insurers andreinsurers2

PurposeCategories of DataLegal GroundsSpecial Categories ofPersonal Data andCriminal Offence Data:- Risk details- Previous claims- Credit and anti-fraudchecksSpecial Categories of PersonalData and Criminal Offence Data:- Consent- Our legitimate interests inpreventing fraud and ensuringthat the client is within ouracceptable risk profile. It is ourassessment that suchlegitimate interests clearlyoverride your interests if theprocessing relates toinformation about criminaloffences and convictionsQUOTATION/INCEPTIONandPOLICY ADMINISTRATIONPayments to and fromindividuals, includingcollection or refunding ofpremiums, paying onclaims, and processingother paymentsOrdinary, non-sensitivePersonal Data:- Individual details- Financial informationOrdinary, non-sensitivePersonal Data:- Performance of our contractwith you- For our legitimate businessinterests (to recover debtsdue to us, and ensuring ourclients are able to meet theirfinancial obligations)POLICY ADMINISTRATIONGeneral client care,including communicationwith you regardingadministration andrequested changes to theinsurance policy. Sendingyou updates regardingyour insurance policy.Notifying you aboutchanges to our terms orprivacy noticeOrdinary, non-sensitivePersonal Data:- Individual details- Policy informationOrdinary, non-sensitive- Other insurancePersonal Data:market participants- Performance of our contractsuch aswith youintermediaries,- For our legitimate businessinsurers andinterests (to correspond withreinsurersclients, beneficiaries andclaimants in order to facilitatethe placing of and claimsunder insurance policies)- Compliance with a legalobligation- ConsentSpecial Categories ofPersonal Data andCriminal Offence Data:- Risk details- Previous claims- Current claimsSpecial Categories of PersonalData and Criminal Offence Data:- ConsentOrdinary, non-sensitivePersonal Data:- Individual details- Identification details- Financial information- Policy informationOrdinary, non-sensitivePersonal Data:- Performance of our contractwith you- For our legitimate businessinterests (to assist our clientsin assessing and makingclaims)CLAIMS PROCESSINGManaging insuranceclaims including fraud,credit and anti-moneylaundering and sanctionschecksLOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICEDisclosures- Other insurancemarket participantssuch asintermediaries,insurers andreinsurers- Banks- Other insurancemarket participantssuch asintermediaries,insurers andreinsurers- Claims handlers- Solicitors3

PurposeCLAIMS PROCESSINGDefending or prosecutinglegal claimsCategories of DataLegal GroundsSpecial Categories ofPersonal Data andCriminal Offence Data:- Credit and anti-frauddata- Risk details- Previous claims- Current claimsSpecial Categories of Personal- Loss adjustorsData and Criminal Offence Data: - Experts- Consent- Third parties- For legal claimsinvolved in the claim- Our legitimate interests in(such as health carepreventing fr

LOCKTON INSURANCE BROKERS DENMARK APS PRIVACY NOTICE 3 Section 2: The data we may collect about you (Your Personal Data) In order for us to obtain insurance quotes, place and administer insurance policies, and/or deal with any claims or complaints, we need to collect and process personal data about you. The types of personal data that are processed may include: