Depending on the occasion and purpose, we process various data from various sources. Information on the purposes of this processing can be found in sub-paragraph 4.
We primarily collect this data directly from you, for example, when you submit a contract application to us, when you communicate with us or when you contact us through an intermediary. However, we may also obtain data from other sources (referred to as "third parties"). You will find further details below.
We primarily process the categories of data described below, although this list is not exhaustive. If data changes over time (for example, if an address changes or in the event of another modification), we may retain the previous status in addition to the current status.
Master data: We use the term "master data" to refer to the basic data that we require, in addition to the contractual data (see below), to process our contractual and other business relationships or for marketing and advertising purposes. We process your master data if, for example, you are a contractual partner or a contact person of one of our contractual partners or an employee of a supplier, or because we want to address you for our own purposes or the purposes of a contractual partner (such as in marketing and advertising, with invitations to events, with vouchers, with newsletters, etc.; you will find further details on this in sub-paragraph 4).
Master data primarily includes information such as your name, address, email address, telephone number and other contact details, date and place of birth, age, gender, nationality and hometown, details from identification documents (such as from your passport or ID card), or your customer number.
Details regarding relationships to third parties, who are also affected by the data processing also fall under this data, e.g. information on recipients of correspondence and other persons involved in the contract or on family members.
In the case of customers and other contractual partners who are companies, we process data concerning our contact persons, this may include name and address, details of titles, position in the company, qualifications and, where applicable, details of supervisors and employees. Depending on the area of activity, we are also required to check the company in question and its employees more closely, for example, by carrying out a security audit. In this case, we collect and process additional data, if necessary also from third party providers. We often obtain master data from you, for example in application documents, but we may also obtain data from third parties such as address dealers or the commercial register.
Contract details: These are disclosures that arise in connection with the conclusion of the contract (including, for example, consultation) or the execution of the contract. This may also include information about third parties. We may also obtain such data from other parties such as distributors, public authorities and agencies, employers, insurers or banks, if necessary on the basis of a corresponding power of attorney.
This data includes information about contract conclusion, about contracts (for example, the type and date of contract conclusion, and other information about the contract in question), as well as information from the administration, processing and enforcement of contracts (e.g., information related to invoicing, consulting and customer service as well as payments, reminders, debt collection and enforcement). Contract data also includes information on complaints about and adjustments to a contract, as well as information about customer satisfaction, which we may collect, for example, by means of surveys.
Behavioral and preference data: Despite our large number of customers, we strive to get to know you better and to tailor our advice and offers to you in the best possible way. We may therefore process certain data about you and your behavior. By ‘behavioral data', we mean data about your behavior in the context of your interactions with us. We may combine this information with other information – including information from third parties – to determine whether you may have an interest in or need for certain Zurich products or services (preference data).
Behavioral data is information about certain actions, for example, payments, your use of electronic communications (such as whether and when you opened an email), your use of our websites (such as your location and other information when you use a website of ours; please see the relevant separate privacy policies), your purchases of products and services from us, your interaction with our social media profiles, contact with distributors and your participation in events, competitions, contests and similar events. Further information on the processing of behavioral data in connection with our website is available at www.zurich.ch/data-protection.
Preference data tells us, for example, what your needs are likely to be, what products or services might be of interest to you, or when and how you are likely to respond to messages from us; this helps us to get to know you better, tailor our advice and offers more accurately to you and generally improve our offers. We obtain this information from the analysis of existing data such as behavioral data. In order to improve the quality of our analyzes, we may combine this data with other anonymous or personal data that we also obtain from third parties, such as the postal services, credit agencies, websites and government agencies.
Communication data: This is data related to our communication with you. If you contact us via the contact form, email, telephone or chat, by letter or by any other means of communication, we process the data that is exchanged between you and us, your master data (e.g. duration of a contractual relationship, customer number, etc.) and other information about the communication. If we record telephone conversations, we will draw your attention to this fact. If we want or need to establish your identity, for example, in the context of a request for information, application for media access, etc., we collect data to identify you (such as a copy of an identity document).
Communication data includes your name and contact details, the manner, place and time of the communication and its content, such as details in emails or letters from you or to you or from third parties or to third parties, if the latter also relate to you. We collect communication data, for example, when you contact us via our Customer Service or a Customer Consultant or via a website or app, or chatbot on the internet.
Further data depending on the product or service: In connection with the provision and operation of the Z Volt app, we process further contractual data collected as part of the registration process. This includes, for example, information on the license plate or on an existing customer relationship with ZIC or our partners, e.g. to check a discount entitlement. We also process data on electricity consumption, payment information and data relating to the installation and use of the Z Volt app, e.g. details of the browser and device used, details of the approximate region of access or approximate details of the age category. We use this data on a non-personal basis and involve service suppliers for this purpose, i. a. Google for Google Analytics or Tealium. In connection with the provision and operation of the Z Volt app, we may also disclose personal data to our partner autoSense AG, Badenerstrasse 141, CH-8004 Zurich, to the extent necessary.
Other data: We also collect data from you in other situations, which we cannot exhaustively list in this Privacy Policy.
For example, data (such as files or evidence) accrues in connection with official or judicial proceedings, and some of this data may also relate to you. We may also collect data for health protection reasons (for example, in the context of protection concepts). We may obtain or produce photographs, videos and audio recordings in which you may be identifiable (for example, at events, via security cameras etc.). We may also collect data about who enters certain buildings and when (including in the case of access controls, on the basis of registration data or visitor lists, etc.), who participates in events or campaigns (such as contests) and when or who uses our infrastructure and systems.
We obtain the above information from you, but may also obtain it from other areas.
These areas may include other Zurich Group companies and distributors, credit reporting agencies, media monitoring companies, financial service suppliers and banks from which you transfer assets to us or make transfers to us, address dealers, internet analysis services, public authorities, other insurers, parties to proceedings and publicly available sources such as the commercial register, media and sources on the internet, public registers, media, etc.
The data we process in accordance with this Privacy Policy relates not only to our customers, but also in part to third parties (you will find information on this in sub-paragraph 1). If you provide us with information about third parties, we will assume that you are authorized to do so and that the information is accurate. By transmitting data about third parties, you confirm this fact. Therefore, please inform these third parties about our processing of their data and provide them with a copy of this Privacy Policy. If we notify you of a new version of these documents, please also provide these new versions to the respective third parties in each case.
With the exception of certain individual cases, such as in the context of binding protection concepts (legal obligations), you are not obliged to disclose data to us. However, for legal and operational reasons, we must process data to establish and process the contractual relationship. Therefore, if you do not wish to provide us with this data (in particular master data, contract and general behavioral data), we will be unable to review, enter into or continue a contractual relationship. When using our website, technical data processing is unavoidable. If you wish to gain access to certain systems or buildings, you will need to provide us with registration details.
The use of certain offers may require registration, e.g. if you accept an invitation to an event or if you log in to our website. If you or someone you represent (such as your employer) wish to enter into or perform a contract with us, we need to collect relevant master, contract and communication data from you, and we process technical data when you use our website or other electronic offers. If you do not provide us with the data required to conclude and perform the contract, you must expect that we will refuse to conclude the contract, that you will be in breach of contract or that we will be unable to perform a contract. Likewise, we can only send you a response to a request you have made if we process the relevant communication data and, if you communicate with us online, technical data as well. Using our website without providing us with technical data is not possible. And when you interact with us or we interact with you, behavioral data is generated.