Privacy Policy
Cefund is the data controller for the processing of your personal data. Processing is carried out
by employees of Cefund, but may also be carried out by contractors to Cefund.
In this information text, we describe to you how and why Cefund processes your personal data.
2. Personal data processed and basis for processing
Insurance advice for you as a private customer
We process your personal data to manage our customer relationship with you and to fulfill the
customer agreement you or your employer have entered into with Cefund or the assignment you or your employer have given to
Cefund. The data is used, for example, to identify you as a customer, in preparation and
administration before entering into agreements, provide advice on insurance and assist in entering into insurance agreements
and give you access to your web-based customer portal.
Data processing also occurs when Cefund contacts you and informs you about rule or
terms changes, insurance terms, products and services, etc., related to our assignment
for you. Processing of personal data also occurs when you as a customer electronically receive information from
Cefund, for example via SMS, email, or by logging into the customer portal.
Processing may also occur based on certain legal obligations, such as storing your personal data.
Processing may also occur for Cefund’s legitimate interest in marketing its products and services. See
below regarding your right to object to your personal data being used for direct marketing.
Personal data | Legal basis for processing |
· Identity data (e.g., name, personal identification number) · Contact information (e.g., address, email address, phone number) · Information about your employment and family · Insurance information (e.g., insurance number, customer number) | To fulfill the agreement entered into with you or your employer. To fulfill legal obligations. Legitimate interest for marketing. |
Your personal data is also processed and stored to fulfill legal obligations that Cefund has, such as achieving and ensuring sufficient customer knowledge, conducting checks against sanctions lists, retaining documentation, or disclosing information to authorities upon request.
Personal data | Legal basis for processing |
· Identity data (e.g., name, personal identification number) · Contact information (e.g., address, email address) · Information if you are a politically exposed person | To fulfill legal obligations. |
Personal data about you as a customer may be processed after a balance of interests has been made between Cefund’s legitimate interest in processing and your privacy interest. Such processing may, for example, concern the handling of commissions, fees, and remunerations, where such are agreed between you and Cefund, which are paid or received by another party. Such processing is necessary to meet Cefund’s need to ensure that the correct remuneration and commission are received and/or paid.
Personal data | Legal basis for processing |
· Insurance information (e.g., insurance number, customer number) | After a balance of interests. |
Relative to an insurance advisory customer
We may process certain information about you as a relative of a person who is a customer with us to be able to perform our assignment and to provide advice to our customer.
Personal data | Legal basis for processing |
· Identity data (e.g., name) · Family relationships · Financial information | To fulfill legal obligations. |
Insured and beneficiary
We process certain information about you as the insured/beneficiary. This applies, for example, when an employer takes out a pension insurance solution for you as an employee or when a customer of ours takes out a capital insurance with you as the insured. As an insurance intermediary, we have a requirement in accordance with legislation to tailor our advice to the customer’s wishes and needs and only recommend solutions that are suitable for the customer. To be able to do this, we need to process certain information about you.
We process your information to be able to provide advice to our customer, administer and sign the insurance our customer has chosen, and, where applicable, communicate with you as the insured regarding information from us or from the insurer.
Furthermore, there is a requirement to store the data for at least one year after the statute of limitations of 10 years expires. This means that we need to store your data for at least 11 years from the time our commitment to our customer regarding the insurances taken out for you has ceased.
Personal data | Legal basis for processing |
· Identity data · Family relationships · Financial information · Employment information | To fulfill legal obligations. |
Representative/contact person for a company that is an insurance advisory customer
We process your personal data to manage our customer relationship with the company and to fulfill the customer agreement the company has entered into with Cefund or the assignment the company has given to Cefund. The data is used to identify you as a representative of the company, in preparation and administration before entering into agreements, provide advice on insurance and assist in entering into insurance agreements, and give the company access to its web-based customer portal.
Cefund will process your data after a balance of interests has been made between Cefund’s legitimate interest in processing and your privacy interest. Processing is necessary to meet Cefund’s need to maintain the entered contractual relationship.
Personal data | Legal basis for processing |
· Identity data (e.g., name) · Contact information (e.g., phone number, email) | After a balance of interests. |
Cefund may also process information about you as the owner of a company, either directly or through another company. This is done in cases where Cefund is obliged to identify the company’s beneficial owner according to anti-money laundering regulations. In some cases, you as the CEO or board member may be identified as the beneficial owner.
Personal data | Legal basis for processing |
· Identity data (e.g., name, personal identification number) · Contact information (e.g., address, phone number) · Information if you are a politically exposed person | To fulfill legal obligations. |
You contact Cefund or Cefund contacts you
We will process your personal data when you contact us or when we contact you via email, letter, contact form on our website, or other means. Cefund may, for example, contact you, even if you are not a customer of Cefund, to market our services. See below regarding your right to object to your personal data being used for direct marketing.
Personal data | Legal basis for processing |
· Identity data (e.g., name) · Contact information (e.g., address, email address) · Other information provided when contacting us | After a balance of interests or to fulfill an agreement you have entered into with Cefund. |
Cefund will process your data after a balance of interests has been made between Cefund’s legitimate interest in processing and your privacy interest.
Personal data may be processed for Cefund’s legitimate interest in establishing, asserting, and defending legal claims.
Partner to Cefund
Cefund may process personal data about you as an employee of a partner to Cefund in order to communicate with the partner, manage the contractual relationship, and handle the services the companies have agreed upon. This may, for example, concern invoice management or participation in conferences and other activities.
Personal data | Legal basis for processing |
· Identity data (e.g., name) · Contact information (e.g., email address) | After a balance of interests. |
Cefund will process your data after a balance of interests has been made between Cefund’s legitimate interest in processing and your privacy interest. Processing is necessary to meet Cefund’s need to maintain the entered contractual relationship.
Personal data may also be processed for Cefund’s legitimate interest in establishing, asserting, and defending legal claims.
3. Collection of data
We collect information about you from various sources.
We collect information about you as a customer from yourself when you become a customer and when you receive advice on insurance. Collection also occurs when you sign up for a product or service through us, when you contact us, or when you use any of our digital channels (e.g., email, customer portal, and electronic signing).
In order to maintain good customer and register care, Cefund may supplement personal data by collecting from private and public registers.
To fulfill legal obligations, Cefund may cross-check your personal data against sanctions lists to conduct checks.
We also collect information from other actors, such as insurance companies, to the extent necessary to provide you with advice. Such information is collected only to the extent necessary for the fulfillment of assignments related to the entered customer agreement. The information is collected from the insurance company you have chosen and in accordance with the transparency authorization and/or management authorization you have given to Cefund.
4. Actors with whom Cefund shares data
Cefund shares data with partners, such as insurance companies, in connection with you signing up for a product or service through us. In these cases, Cefund and our partner are both data controllers, and you will, in addition to the information you receive from us, also receive information from the actor you have chosen to enter into an agreement with.
Data may also be shared with certain service providers to Cefund, such as system providers and cloud service providers. In these cases, the service provider acts according to instructions from us and may not use the data for their own purposes.
We may also share personal data with authorities, including law enforcement authorities, in cases where we are obliged to do so. Such processing is necessary to fulfill legal obligations.
Personal data may also be shared with courts, counterparties, and other actors in connection with legal disputes. Such processing is done for Cefund’s legitimate interest in establishing, asserting, and defending legal claims.
Cefund may also share data with potential buyers and sellers if the business is sold or merged with another company. Such processing is necessary to meet our legitimate interest in carrying out the divestment or merger.
5. Place of processing
The processing carried out by Cefund takes place within the EU/EEA. In cases where Cefund or a service provider to Cefund would transfer your personal data to a country outside the EU/EEA, Cefund ensures that safeguards are in place.
6. Storage of personal data
Your personal data will be stored as long as you are a customer with Cefund and also after your agreement is terminated, to the extent required by law. This may, for example, concern the retention of customer documentation and agreements that show what Cefund and you have agreed upon. Such data related to the insurance mediation that Cefund has performed for you will be saved by Cefund for at least 11 years from the time you are no longer a customer with Cefund. Data related to customer due diligence measures required by anti-money laundering regulations will be saved by Cefund for at least 5 years after you are no longer a customer with Cefund.
Personal data will otherwise only be processed as long as necessary.
7. Your rights
Access to your Data
You have the right to request access to the personal data we process about you, a so-called register extract.
Request Correction
You have the right to request that incorrect data registered about you be corrected.
Withdraw Consent
You have the right to withdraw any consent to the processing of personal data at any time.
Object to Processing for Direct Marketing, Including Profiling
You have the right to object to your personal data being used for direct marketing and unsubscribe from any customer mailings.
Request Restriction of Processing
Under certain circumstances, you have the right to request that Cefund restricts the processing of your personal data. Under such circumstances, Cefund may not be able to fulfill the obligations we have under the agreement with you.
Data Portability
Under certain circumstances and if technically possible, you have the right to obtain the personal data registered about you in a structured, commonly used, and machine-readable format and have the right to transfer this data to another actor.
Deletion
Under certain circumstances, you have the right to have the data registered about you deleted. However, this does not apply if Cefund is obliged to retain the data by law.
8. Contact and complaints
You can always contact Cefund if you have questions about the processing of your personal data.
Contact information:
Cefund AB
Nybrogatan Business Center
Nybrogatan 6
114 34 Stockholm
Phone number: +46 730 79 07 17
Email: cecilia.frolund@cefund.se
The Swedish Authority for Privacy Protection is the supervisory authority for the processing of personal data. If you believe that data about you has been processed in violation of the General Data Protection Regulation, you can file a complaint with the Swedish Authority for Privacy Protection.