1. Personal data

We, Jurkowitsch GmbH, will collect, process and use your personal data only with your consent and in accordance with your mandate or order, and only for the purposes agreed with you or in fulfilment of a legal obligation imposed upon us by the GDPR; in doing so, we will always comply with the applicable provisions of data protection and civil law.

We will only collect the personal data necessary for the performance and processing of our insurance brokerage services or voluntarily provided to us by you.

In addition, we will use your personal data to provide you with ancillary services, such as information about changes in the legal framework, provided that these are relevant to your insurance contract. Whenever you apply to us for insurance, you will be providing us with your personal data and, if applicable, personal data of your family members, employees or other third parties.

We collect the following personal data:

• Contact details, i.e. data that we can use to identify or contact you. This data includes name, address, telephone number, email address, username and password, date of birth, gender, preferred language and any other contact details that we receive directly from you.
• Health data as defined in sections 11a, c and d of the Austrian Insurance Contract Act (Versicherungsvertragsgesetz, VersVG), for the purpose of enabling us to assess whether and on what terms an insurance contract should be concluded or modified, for managing existing contracts and for assessing and processing contractual claims; we do not collect genetic analysis data.
• Account data, i.e., data that you have transmitted to us in order to be able to take advantage of insurance services. This includes your account number and sort code, as well as your billing address.
• General usage data is defined as information generated during your use of our products and services, e.g. when you surf the Internet and access our website. We do not employ any personal data for general use except for the purpose of providing and invoicing our products and services, such as technical support, accounting, debt collection or credit checks.
• Other personal data is data that we are able to obtain from public sources or from associations for the protection of creditors (Kreditschutzverbände) in accordance with applicable laws.
• Even though trade and business secrets are not directly covered by the term “personal data”, we protect such information to the same extent, and we expect our business partners and customers to do the same.

2. Scope of data processing

If you apply for insurance with us, you will provide us with personal data and, if applicable, also trade and business secrets, both your own and those of your family members, employees or other third parties. We have a legitimate interest in using your data and the data of such third parties named by you, since we are the data controller responsible for the processing of your personal data; we will only do so to the extent that this may be necessary to establish and process your insurance contract.
in accordance with any separate declarations of consent that you may have given, we will also use your data to inform you of product offers from us or from our business partners.

For some insurance products, it may be necessary to process specially protected categories of your personal data. This primarily includes data regarding your health, which we need for determining coverage and for processing claims in the personal insurance sector with regard to, e.g., accident insurance, health insurance, life insurance and flight license loss insurance (LOL).
We will always process these special categories of personal data exclusively in accordance with the provisions of the Austrian Insurance Contract Act, and only with your consent as given in the insurance application.

In an event of damage, we will also store and process information on the damage itself (facts, type and amount of damage) as well as information from witnesses, authorities and third parties charged with assessing the damage and the claim (expert witnesses) or with repairing the damage. In some cases, we may also be legally obliged to disclose personal data in order to support legal proceedings or to comply with official requirements/requests. In the course of pending legal proceedings, the data may have to be disclosed without your consent and without any notification to you. If permitted under applicable law, we may also be entitled to use personal data for purposes of fraud and money laundering prevention.

3. Information and deletion of data

As the data subject, you are entitled, at any time, to demand information about your stored personal data, its origin and recipient(s) and the purposes for which your data are being processed. You are also entitled to raise objections and to demand correction, data transfer, restriction of processing and blocking or deletion of incorrect or inadmissibly processed data.

Please notify us of any changes to your personal data.

You are entitled, at any time, to withdraw your consent to the use of your personal data. Please address your objections and your requests for information, deletion, correction, and/or data transfer (as regards the latter, with the proviso that such transfer would not require a disproportionate effort on our part), as directed in Section 12 of this declaration.

If you are of the opinion that the processing of your personal data by us violates applicable data protection law or that your data protection claims have been violated in any other way, you may file a complaint with the competent supervisory authority. In Austria, the competent authority is the data protection authority (Datenschutzbehörde).

4. Withdrawal of consent

In cases where we have received and are processing your data with your consent, you are entitled to revoke this consent at any time; after having received your revocation, we will then no longer process your data for the purposes stated in the Declaration of Consent.

If you refuse to sign the Declaration of Consent, or any part of the same, or object to the processing of your data, we will use your data in strict compliance with the applicable legal provisions. If this means that we cannot (or can no longer) make use of automated processing and management of your contract, however, we reserve the right to reject your application or to cancel the contract.

5. Data security

We protect your personal data by establishing appropriate organisational and technical precautionary measures. These precautionary measures are focused, inter alia, on protection against unauthorised, unlawful or accidental access, processing, loss, use and manipulation.
Regardless of the efforts to maintain a consistently high level of due diligence, we cannot rule out the possibility that information that you have provided to us via the Internet may be viewed and used by other people.

Please note that we cannot, therefore, accept any liability whatsoever in connection with the disclosure of information due to errors in data transmission not caused by us and/or unauthorised access by third parties (e.g. hacker attacks on email accounts or telephones, interception of faxes).

6. Confidentiality

Our employees are familiar with the relevant data protection regulations and committed to data secrecy. Access to personal data will only be made available to employees who deal with customers and prospects and who are responsible for processing inquiries, applications and contracts (see Section 7).

7. Transmission of data to third parties

To comply with your requests, we will also be obliged to forward your data to third parties (e.g. insurance companies, licensing bodies, reinsurers, substitutes, courts or authorities, lawyers, notaries, service providers whom we use and to whom we provide data, etc.). Your data will be forwarded in strict compliance with the provisions of the GDPR, chiefly for purposes of fulfilling your order or based on your prior consent.

The complexity of today’s data processing means that we are sometimes obliged to use service providers and to commission them to process your data. Such a service provider could also be located outside the territory of the European Union. In all cases involving service providers, however, we undertake always to ensure that the European level of data protection and the European data security standards will be maintained.

It may also be necessary, as part of our processing of business cases, for us to transfer your data among our business partners, or to process it jointly with them. In these cases, too, European data security standards will always be maintained. If you would like to find out more about how and to what extent we process your data in connection with your specific business case or pass it on to service providers, and which protective measures we have taken, please contact our management.

8. Disclosure of data breaches

We strive to ensure that any data breaches will be recognised early and, if necessary, immediately reported to you or the responsible supervisory authority, stating the respective data categories that have been affected.

9. Data storage

We undertake not to keep data any longer than is necessary to enable us to fulfil our contractual or legal obligations and to avert possible liability claims.

10. Cookies

This website uses or may use “cookies” to make it more user-friendly, effective and secure.

A “cookie” is a small text file that we transfer via our web server to the browser’s cookie file on your computer’s hard drive. This enables our website to recognise you as a user when a connection is established between our web server and your browser. Cookies help us to determine the frequency of use and the number of users of our website. The content of the cookies we use is limited to an identification number, which no longer permits identification of the user. The main purpose of a cookie is to recognise visitors to the website.

Two types of cookies are used, or may be used, on this website:
• Session cookies: these are temporary cookies that will remain in your browser’s cookie file until you leave our website and will automatically be deleted after your visit.
• Permanent cookies: to achieve a higher degree of user-friendliness, cookies may remain stored on your device; this will allow us to recognise your browser the next time you visit.

You have the option of activating settings in your browser that will ensure that you are informed about the setting of cookies and will allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

11. Server log files

To optimise this website in terms of system performance, user-friendliness and the provision of useful information about our services, the provider of the website automatically collects and stores information in so-called server log files, which your browser will automatically transmit to us. This includes your Internet protocol address (IP address), browser and language setting, operating system, referrer URL, your Internet service provider and date/time.

This data will not be merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

12. Our contact details

The protection of your data is very important to us. Should you have any questions or wish to revoke your declaration of consent, please contact us using the following contact details:

Jurkowitsch GmbH

1300 Flughafen Wien
Office Park 3/ 1.St./ TOP 145
Phone: +43 (1) 713 3674
Email: datenschutz(at)jurkowitsch(dot)eu