Professional Secrecy

Professional Secrecy

AIG Europe S.A. may outsource certain services, activities or tasks to external providers (which may or may not be (a) regulated or (b) located in the Grand-Duchy of Luxembourg) (the “Service Providers”). 

Data provided by clients or policyholders to AIG Europe S.A. (which may directly or indirectly identify the client, a beneficiary under the policy or an authorized representative of the client) may be communicated to Service Providers in the course of such outsourcing.

In order to comply with our professional secrecy obligations, we are providing further information about the types of services we may outsource to Service Providers, the types of information transmitted to Service Providers and the countries in which the Service Providers are located.

1. Type of services outsourced

The types of services that we may outsource include services ordinarily provided by the following categories of Service Providers: 

  • other insurers, reinsurers, insurance and reinsurance brokers, other intermediaries and agents, appointed representatives, distributors, affinity marketing partners and financial institutions, securities firms and other business partners;  
  • external third party service providers, such as medical and security professionals, accountants, actuaries, auditors, experts, lawyers and other professional advisors; travel and medical assistance providers; call centre service providers; IT systems, support and hosting service providers; printing, advertising, marketing and market research, human resources, and data analysis service providers; banks and financial institutions that service our accounts; third party claim administrators; document and records management providers; claim investigators and adjusters; construction consultants; engineers; examiners; jury consultants; translators; and other third party vendors and outsourced service providers that assist us in carrying out business activities
  • intragroup service providers such as IT applications hosting and support providers, providers of salvage, subrogation, deductibles & overpayments recovery, and marketing
  • payees; emergency providers (fire, police and medical emergency services); retailers; medical networks, organisations and providers; travel carriers; credit bureaus; credit reporting agencies.

2. Type of information transmitted

Any data which a client has provided to AIG Europe S.A. may be transmitted to a Service Provider. This includes data which may directly or indirectly identify the client, the insureds, a beneficiary under the policy or an authorized representative (including present and past employees, directors and officers, if any) of the client. Please see examples of such information listed in the table below.

Type of information Examples
1.     Contact information Name, address, email and telephone number
2.     General information Gender, marital and family status, date and place of birth, and physical characteristics (appropriate to the circumstances) or company’s registered address, number and date of incorporation, activities  and shareholders. 
3.     Education and employment information Educational background, employer or employee details, payroll information and employment history, skills and experience, professional licences, memberships and affiliations.
4.     Insurance and claim information Policy and claim numbers, relationship to policyholder, insured, claimant or other relevant individual, date and cause of property damage, loss or theft, injury, disability or death, activity records (for example, driving records), and other information relevant to insurance policy issuance, and claim assessment and settlement. For liability insurance, this will include details of the dispute, claim or proceedings involving you, the insureds and the company.
5.     Government and other official identification numbers Social security or national insurance number, passport number, tax identification number, driver’s licence number, or other government issued identification number.
6.     Financial information and account details Payment card number (credit or debit card), bank account number, or other financial account number and account details, credit history, credit reference information and credit score, assets, income, and other financial information, account log-in information and passwords for accessing insurance policy, claim and other accounts, and AIG Digital Services, as defined in AIG Privacy Policy www.aig.lu/en/privacy.
7.     Medical condition and health status  Current or previous physical, mental or medical condition, health status, injury or disability information, medical diagnosis, medical procedures performed and treatment given, personal habits (for example, smoking or consumption of alcohol), prescription information, and medical history.
8.     Other sensitive information 

Information about religious beliefs, ethnicity, political opinions or trade union membership (for example, if an insurance application is made through a third party marketing partner that is a professional, trade, religious, community or political organization), sexual life and orientation, or genetic or biometric information.

We may obtain information about criminal records or civil litigation history (for example, for preventing, detecting and investigating fraud).

Information provided voluntarily to us (for example, preferences expressed regarding medical treatment based on religious beliefs) (where collected in accordance with applicable law).

9.     Telephone recordings Recordings of telephone calls with our representatives and call centres.
10.  Photographs and video recordings Images (including photographs and pictures) or video recordings created in connection with our insurance or other business activities, including for claims assessment, administration and settlement, claim disputes, or for other relevant purposes as permitted by law, as well as CCTV recordings captured by equipment on our premises.
11.  Information to detect, investigate or prevent crime, including fraud and money laundering Insurers commonly collect, hold and share information about their previous dealings with policyholders and claimants with the intention of the detection, investigation and prevention of fraud, money laundering and other criminal activities.
12.  Information enabling us to provide products and services Location and identification of property insured (for example, property address, vehicle licence plate or identification number), the activities insured, travel plans, age categories of individuals to be insured, details of the risks to be insured, prior accident or loss history, and cause of loss, status as company officer or director, or partner, or other ownership or management interest in an organisation, history of disputes, civil or criminal proceedings or formal investigations involving you, the insureds and the company and information about other insurance held.
13.  Marketing preferences, marketing activities and customer feedback

Marketing preferences, information relating to competition, prize draw or other promotion entry, or responses to voluntary customer satisfaction surveys.

To improve our marketing communications, we may collect information about interaction with, and responses to, our marketing communications.

14.  Online activity information

We will receive data about you, the insureds and the company when you use AIG Digital Services; this may include your social media account identifier and profile picture, your IP address and other online identifiers (to the extent that they are Personal Information), and other Personal Information that you provide to us online

If you, the insureds or the company choose to connect your social media account provided by another social media service provider to your account on any of the AIG Digital Services, data from your other social media account may be shared with us, which may include data that is part of your social media account profile, or the profiles of your friends and other connected individuals.

3. Countries where the Service Providers are located

Andorra, Australia, Austria, Belgium, Bermuda, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, India, Ireland, Latvia, Lithuania, Italy, Malaysia, Malta, Netherlands, Norway, Philippines, Poland, Portugal, Romania, Slovakia, Slovenia, South Africa, Spain, Sweden, Switzerland, United Kingdom, United States of America.