PRIVACY STATEMENT AND YOUR PERSONAL INFORMATION
Use of personal information
To provide our services we will collect and use information about you or a beneficiary under the policy (e.g. other identified individuals), such as name, address and contact details. This may also include special categories of personal data such as information relating to your health, criminal convictions and offences. All processing (i.e. use) of your personal information is justified by a “lawful basis” for processing. In the majority of cases, processing will be justified on the basis that the processing is necessary for the performance of a contract to which you are a party (for example collecting premiums or settling claims), or to take steps (at your request) to enter into a contract (e.g. where we are processing your insurance application). Or it may be necessary where we have a genuine business need to use your personal information such as maintaining our business records and keeping records of insurance policies taken out and analysing and improving our business model and services. When using your personal information for these purposes, we have considered your rights and ensured that our business need does not cause you harm. We may also have a legal or regulatory obligation to use your personal information (e.g. where we are required to collect certain information about our clients for debt recovery purposes, or where we are required to make a disclosure to courts or regulators).
Use of special categories of personal data
In some circumstances, we (and other insurance market participants) may need to collect and use special categories of personal data such as information relating to your health, criminal convictions and offences. Where this is required, unless another ground applies (e.g. lawful basis) we will establish a lawful exemption which will allow us to use that information. This exemption will typically be by obtaining your explicit consent. Where consent to this processing is necessary for us to provide relevant services whilst this consent may be withdrawn at any time, this may mean we are unable to continue to provide services and/or process enquiries and/or claims and/or insurance applications.
Disclosure of your personal data
We may pass personal data to third parties such as other intermediaries, reinsurers, administration service providers, health service providers, legal advisors, banks, regulatory bodies the police and other law enforcement agencies, fraud and crime prevention and detection agencies. If you require details of the third parties your data has been passed to and how this information is used please contact the Data Protection Officer at General & Medical Insurance Limited, Town Mills, Rue du Pre, St Peter Port, Guernsey, GY1 6HS.
Guernsey is not within the European Economic Area (EEA) but has a robust and effective regulatory framework. General & Medical Insurance Limited is required to comply with the EU General Data Protection Regulation (GDPR) when handling the personal data of European Citizens and secondly the Data Protection (Bailiwick of Guernsey) Law, 2017 which provides an equivalent framework for handling the personal data of non-EU citizen.
In order to provide our services, the information you give us may be transferred to countries outside the EEA. These countries may not have similar data protection laws to Guernsey or the UK. If we do transfer your personal data outside of the EEA, we will ensure that any party with access to your information has implemented the necessary security and privacy measures to ensure that your personal data is kept secure and confidential as outlined in this policy.
In order to provide our services, the information you give us will be handled by our outsourced administration service providers, General & Medical Finance Limited (GMFL) in the UK. GMFL is required to comply with the EU General Data Protection Regulation (GDPR) when handling your personal data.
Where you are providing us with personal data about a person other than yourself, you agree to provide this notice to them and confirm that you have obtained their consent as outlined here.
This statement applies to the operations of General & Medical Insurance Limited (GMIL) and sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed. Please read the following carefully to understand how we will treat your personal information.
- GMIL only collects personal information necessary for us to provide you with the services you require (e.g. processing your application, preparing your policy, claim payment or when requesting information about our products and services in relation to a specific insurance product or to initiate a complaint).
- We collect personal information that you submit when you are using our online services, including payment information or application information processed by our outsourced administration service providers.
- Our online data transfer facilities are secure and the data, once collected, cannot be accessed through the Internet.
- When we need to collect personal information we will, in most cases, collect the information directly from you or subject to your consent from your medical practitioner or other healthcare service provider.
- Your personal information is held in secure environments by GMIL or our outsourced administration service providers who are resident in the UK.
- If you do not supply the information requested we may not be able to process your application for insurance or your claim.
When you visit any General & Medical website we may leave a cookie on your computer in order that your computer will be recognised by our web server. The cookie does not collect personal information it only collects information about what pages you have visited and for how long if you are not a registered user (in these instances we cannot identify the individual user). If you are a registered user it enables us to simplify the 'logging on' process.
- GMIL will use your personal information for any purpose which you have consented to. We will not use your personal information for any marketing purposes.
- GMIL does not share, trade or sell personal information for marketing or any other purposes outside the provision of medical insurance coverage.
- Your personal information will be used in ways that you would reasonably expect, in order for us to provide medical insurance services to you.
- In processing your application for insurance or a claim we may also need to disclose your personal information to other service providers, such as assessors and health service providers. We may also disclose personal information to reinsurers and other insurers, which may be located overseas.
- GMIL will only disclose your personal information to third parties if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or if required to do so by any regulatory body or ombudsman or to any party that provides a service to GMIL (e.g. for outsourced administration services purposes).
- Where we disclose personal information to such administration service providers GMIL will only allow your personal information to be used for the purposes set out above and we will ensure that it is secure and protected from unauthorised access.
We take privacy seriously and have systems in place to ensure the security and accuracy of any personal information we collect.
All information you provide to us is stored on our secure servers. Where our outsourced service administrator has given you (or where you have chosen) a password, you are responsible for keeping this password confidential.
We restrict access to your information as appropriate within GMIL to those who need to know that information for the purposes set out above.
- You may request access to a copy of your personal information that we hold by contacting us.
- Where we have incorrect personal information in our records you may request to have the information corrected.
- Under certain conditions, you may also have the right to require us to:
- delete any personal information that we no longer have a legal ground to rely on;
- object to any processing based on the legal ground of legitimate interests unless our reason for undertaking that processing outweighs any prejudice to your data protection rights;
- provide you or another provider with a copy of your personal information that you provided us with; and
- restrict how we use your personal information whilst a complaint is being investigated.
If you contact us to exercise any of these rights we will confirm your right to do so and respond in most cases within 30 days.
- If you have a complaint concerning the processing of your personal data please contact us and we will make every effort to resolve your complaint or refer you to our independent dispute resolution processes. If you are still not satisfied that your complaint has been appropriately addressed you may have a right to complain to the Guernsey Data Protection Commissioner.
How to contact us
The Data Protection Officer
General & Medical Insurance Limited,
Rue du Pre,
St Peter Port,