As a company, the protection of your personal data is a priority for us. We are committed to protecting all your information and to acting in accordance with your rights and the data protection regulations.
In this information notice, we explain how and when we collect data and detail how we use it so that we can always provide you with the best service. It also tells you what rights you have and how you can exercise them.
Where we use the term 'you', 'your' or 'yours' in this document, it means you, any authorised person acting on your behalf or any beneficiary, and other individuals in your household or business.
When we use the term 'we', 'our' or 'us', it means MyprotectionHub (Mph).
1. Who is the data controller?
The data controller is the natural person or legal entity that controls and is responsible for collecting and processing personal data in electronic or paper form. MyprotectionHub (Mph) is the data controller within the meaning of the applicable laws and regulations on the protection of personal data.
2. Collection and processing of your personal data
The personal data we collect varies depending on how you use our services.
The data we collect or hold about you will be provided to us directly by you, will come from third parties or will be collected from your activity on our websites and your use of our services.
The collection and processing of personal data is carried out in accordance with personal data protection legislation and based either on applicable insurance legislation or on your explicit consent, unless applicable laws and regulations exempt us from collecting it as explained below.
Thus, for insurance contracts that do not contain sensitive data or special categories of personal data, in accordance with Art.6 (1) (b) of the General Data Protection Regulation (hereinafter GDPR), your explicit consent is not required.
For insurance contracts that contain sensitive data or special categories of personal data, explicit consent is required pursuant to Art. 9 (2) (a) GDPR.
a. What personal data is collected?
In particular, we may collect and process the following personal data about you:
- Name and surname
- Address
- Date of birth
- Type
- Identity documents
- Telephone numbers
- E-mail address
- NIR - social security number
- References to your credit cards and bank accounts
- Information about your lifestyle
We may also collect and/or process so-called sensitive data such as medical reports, your claims history etc.
b. Purposes
We need to collect and process your personal data if you wish to subscribe to contracts and services. There is no legal requirement for you to provide us with this data, but if you do not, we will not be able to provide you with the products and services you want or are likely to be interested in, to monitor your claims or to tailor offers to your particular needs.
We use your information for the following purposes:
- Manage your insurance contracts (offer, quotation, subscription, management etc.),
- To send communications about insurance-related products and services for marketing purposes. These communications may take the form of an e-mail, a letter, a text message or a telephone call,
- Preventing and detecting cases of fraud,
- Comply with legal obligations (anti-money laundering and combating the financing of terrorism).
Our use of your information as described above is permitted under applicable data protection regulations. In most cases, our processing of your personal data for marketing purposes is based on our legitimate interest, although it may, in certain situations (including where required by law), be based on your consent (for example, where you agree to receive communications from us).
c. Collection via the website
We collect and process the following information about you: your IP address, your postcode, your telephone number and, if applicable, a general description of your lifestyle.
We only use your information to contact you and arrange a meeting with one of our experts to make a personalised, no-obligation quotation and to follow up after the contact has been made. We will do this by telephone, video conference, or during an appointment.
As before, our use of your information as described above is permitted under the applicable data protection regulations. The processing of your personal data in this case is based on your consent. However, if you do not consent to the processing of your information or do not complete the requested fields, we will not be able to fulfil your request.
d. Who has access to your personal data?
We will ensure that your personal data is processed in a manner consistent with the purposes stated above.
In this context and apart from authorised personnel within MyprotectionHub (Mph), your personal data may be disclosed, if necessary, to the following third parties in their capacity as "data controllers": public authorities, TRACFIN, insurers, mutual insurance companies, provident institutions, wholesale brokers, reinsurers, insurance intermediaries/brokers, management platforms, fund managers, consultancy and management companies, investment companies.
Your data may also be disclosed, if necessary, to third parties who operate as processors on our instructions:
- Legal advice and service companies (data hosting, IT, postal, document management).
- Advertisers and advertising networks for the transmission of our marketing communications in accordance with local legislation and your communication preferences. We do not share your personal data, without your consent, with third parties for their own commercial use. We do not sell your information to third parties.
These companies are committed to protecting your data to the same level as we are. Furthermore, we remain responsible to you for the use and security of your data.
Finally, we may share your personal data:
- In the event of a reorganisation, merger, sale, joint venture, assignment or any other transaction that affects all or part of our business/activity, assets or shares (including in the event of insolvency proceedings)
- To comply with our legal obligations, including to the relevant ombudsman or supervisory authority in the event of a complaint about any of our products or services.
e. Where is your personal data?
Subject to applicable contractual and legal constraints relating to data privacy and security, your personal data may be processed within or outside the European Economic Area (EEA) by the recipients mentioned.
We store your data in the European Economic Area (EEA) or in countries with an appropriate level of data protection (Please check). These countries have laws equivalent to those of France regarding your information.
If we transfer your information to companies outside the EEA or countries with an appropriate level of data protection, we contractually require those companies to treat your information in a similar manner to us. In such situations, we will ensure that the information transferred is protected. Upon request, we can provide you with further information about any transfer.
3. Your rights
You have a number of rights with regard to the use of your data:
- The right to access your data and to know its origin, the purposes of collection and processing, as well as the contact details of the controller(s) and subcontractors, and the parties to whom your data may be disclosed,
- The right to withdraw your consent at any time where the processing of your personal data is based on it,
- The right to object to the processing, in particular when your personal data is not useful or is no longer necessary for our contractual relationship,
- The right to rectify your data if it is inaccurate or incomplete,
- The right to have your personal data deleted in certain circumstances, such as when the retention period for your personal data has expired or when it is no longer necessary for the purpose for which it was collected and processed,
- The right to have the processing of personal data restricted in certain circumstances (e.g. the restriction of the processing of personal data whose accuracy is disputed, for a period of time that allows us to verify it),
- The right to portability of your personal data, i.e. the right to receive your personal data in a structured, commonly used and readable format or to have it transmitted directly to another controller,
- The right to lodge a complaint with us or the relevant data protection authority.
You can exercise these rights by contacting us (see point 5) and providing us with your name, e-mail address, contract reference and the reason for your request.
4. How can you object to the processing of your personal data?
Where permitted by applicable law or regulation, you have the right to object to the processing of your personal data (including for direct marketing purposes). Once you have informed us of this request, we will cease processing your personal data unless required by applicable laws and regulations.
You can exercise this right in the same way as your other rights listed in point 3.
5. How long your personal data will be kept
We keep your data for the duration of your contract. It will be kept for a period of 5 years from the expiry or termination of the insurance contract or the end of the business relationship.
This period may be extended in the event of a legal requirement. In the context of a prospecting relationship, the data will be kept for a minimum of 3 years.
In any event, we will only keep your data for the purposes for which it was collected and no longer than necessary.
6. How to contact us?
To object to the use of your data, to request their deletion, to ask a question about the processing of your data or to make a complaint, you can contact us directly or write to our personal data manager:
- by e-mail to: contact@myprotectionhub.com
- by post to the following address
MyprotectionHub (Mph)
Service responsible for the right of access
40 rue Alexandre Dumas 75 011 PARIS
For all your applications, do not forget to enclose a proof of identity.
7. Updating of this manual
This information notice was updated in April 2022. We reserve the right to amend it at any time to provide you with up-to-date information on how we collect and process your data.
The most recent version of the legal notice is alsoavailable here.