Data Protection

Real Garant Versicherung AG attaches great importance to the protection of your personal data. As a company of Zurich Group Germany, we process personal data carefully, transparently and in accordance with the applicable data protection requirements. With this Privacy Policy, we inform you which personal data is processed in connection with our online services and in the context of our insurance products, for which purposes and on which legal basis this is done, and which rights you have. The information on the processing of personal data in connection with our insurance products can be found in the supplementary data protection information linked at the end of this Privacy Policy. If you have any questions about data protection, you may contact the data protection coordinators of Real Garant Versicherung AG or the Group Data Protection Office of Zurich Gruppe Deutschland at any time.

The controllers responsible for the processing of personal data in connection with realgarant.com, Real Garant’s online services that refer to this Privacy Policy, and the processing of personal data in the context of our insurance business within the meaning of the General Data Protection Regulation (GDPR) and the relevant data protection provisions are:

Real Garant Versicherung AG/Real Garant GmbH Garantiesysteme

Legal and Data Protection
Marie-Curie-Str. 3
73770 Denkendorf
Germany

Telefon: +49 711/ 490 63-0 
E-Mail: dataprotection@realgarant.com

You can contact our Data Protection Officer at the following address:

Zurich Gruppe Deutschland 
Group Data Protection
50427 Köln
Germany

E-Mail: dataprotection[at]realgarant.com

3. Contact form

Various requests can be submitted to us via the forms provided on our website, for example claims notifications, changes to personal data, withdrawals or general contact enquiries. The information you enter is transmitted to us and stored for the purpose of processing the respective request. In addition, we collect accompanying technical information such as the date and time of the request.

• Salesforce

For the technical provision and processing of form enquiries, we use Salesforce, Inc. The service supports the transmission, structuring and allocation of form data in the background. This enables enquiries to be processed securely, reliably and efficiently, forwarded to the responsible contact persons and documented in a traceable manner.

An agreement on commissioned processing pursuant to Art. 28 GDPR has been concluded with Salesforce. Personal data may be transferred to countries outside the European Union or the European Economic Area in this context. Where data is transferred to the USA, this is done on the basis of Salesforce, Inc.’s participation in the Data Privacy Framework (DPF) pursuant to Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745. Further information on data processing by Salesforce can be found at Salesforce Privacy Information | Salesforce.

a. Legal Basis for Data Processing

The processing of data transmitted via a form is carried out on the basis of Art. 6 para. 1 lit. f GDPR. If the contact is aimed at the conclusion or performance of a contract or at the processing of a claim, the processing is additionally based on Art. 6 para. 1 lit. b GDPR.

b. Purpose of Data Processing

The information transmitted is used to process your request and to conduct the communication required for this purpose. Supplementary technical information also serves to protect our systems and prevent misuse.

c. Storage Period and Withdrawal of Your Consent

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of information from the contact form, this is generally the case when the respective communication has been completed and no statutory retention periods prevent deletion. Where the processing is based on consent, you may withdraw this consent at any time. In this case, communication can generally no longer be continued. Statutory retention obligations remain unaffected by the withdrawal.

This data protection information explains how personal data is processed when using the online platforms RG-Next, the GT-Motive claims reporting portal and the Real Garant apps. The provider of RG-Next and the apps is Real Garant GmbH Garantiesysteme, Marie-Curie-Str. 3, 73770 Denkendorf, Germany a company of Real Garant Versicherung AG. The provider of the claims reporting portal is Real Garant Versicherung AG, Marie-Curie-Str. 3, 73770 Denkendorf, Germany. Please note that app stores through which apps are downloaded may carry out their own data processing. We have no influence over these procedures and assume no responsibility for them.

1. Scope of Data Processing

a. RG-Next

Through the online platform “RG-Next”, Real Garant enables end customers to conclude insurance contracts. Following advice from an intermediary, the intermediary may arrange for an offer link to be sent by email. Via this link, users access RG-Next and can conclude the offered insurance contract online. During registration, the email address and a password are collected via an input form, transmitted to us and stored. After registration and activation of the customer account, we additionally store the following information: vehicle identification number, HSN, TSN, licence plate number depending on the country either optional or mandatory, information as to whether the main residence is located in the country in which the contract is concluded, information as to whether the vehicle is registered in the country in which the contract is concluded, current mileage, date of first registration and, optionally, the date of the last vehicle check. When an insurance contract is concluded online via RG-Next, the following data is also processed: title, first name, last name, company name in the case of companies, tax number depending on the country of main residence mandatory, street and house number, postal code, city, country and, optionally, telephone number. In the case of one-off payment of the premium, this information is transmitted to our payment service provider Unzer as part of the payment process. Unzer independently processes the data required for payment processing, such as invoice amount, payment method, IBAN, credit card data, name and transaction number. Further information on data processing by Unzer, in particular on storage periods and data subject rights, can be found at Data protection - Unzer. In the case of monthly premium payment, Real Garant processes the payment data, in particular name and IBAN, itself. We also process usage data generated in the context of managing your insurance contracts, for example changes to the password. RG-Next offers various functions. Users can view concluded insurance contracts and withdraw from them within the withdrawal period using a corresponding function. The data entered in this context is collected and stored by Real Garant. If you are supported by an intermediary in relation to your insurance contracts, personal data may be passed on to this intermediary to the extent necessary for support and advice in insurance matters, for example when concluding a new contract or when your contact details change.

b.GT Motive Claims Reporting Portal for Dealers

Real Garant provides the claims reporting portal to connected dealers so that claims notifications in connection with warranty and insurance products can be recorded digitally and transmitted to Real Garant. The portal supports the structured reporting and processing of claims as well as the technical assessment of the vehicle and contract information relevant to the respective claim. For registration and use of the claims reporting portal, Real Garant processes personal data of the respective dealers or the users created there. This may include, in particular, username, password, name of the user, business email address, optionally a telephone number, company name, address, postal code and city. No personal data of end customers is processed as part of a claim notification via the portal. The claim notification relates to vehicle- and contract-related information required for reviewing, allocating and processing the reported claim. This may include, in particular, the contract number, the vehicle identification number, the current mileage, the date of loss, the date of receipt and further information required for the technical assessment and calculation of the claim. Where vehicle data is retrieved or supplemented on the basis of the vehicle identification number, this serves exclusively the technical allocation and assessment of the vehicle in the event of a claim.

c. Apps

Real Garant provides customers with apps that serve, among other things, contract management, contract renewal and the planning of vehicle-related services. When registering a contract in the app, the contract number and the last seven characters of the vehicle identification number are collected via an input form and transmitted to us. Subsequently, vehicle data already stored by us is loaded into the app.

After contract registration, we additionally process the following data in the context of a contract renewal: title, first name, last name, address, email address, the country of your main residence, the country of registration of the vehicle and the current mileage. For the payment process, the data required for this purpose is passed on to our payment service provider Unzer. Unzer independently processes payment data such as invoice amount, payment method, IBAN or credit card data, name and transaction number. Further information can be found at Data protection - Unzer. In addition, we collect usage data generated when managing your contracts and documents, for example which types of documents are delivered to the mailbox. Where you are supported by an intermediary, personal data may be transmitted to this intermediary if this is necessary for support and advice in your insurance matters, for example in the event of changes to contract data. For the use of individual app functions, we also require device identifiers, for example the UDID for Apple devices or the DeviceID for Android devices. Information such as the IMEI of the end device may also be processed; under certain circumstances, this may be assigned by network operators.

2. Legal Basis for Data Processing

Where processing is necessary for registration, use of the respective portal, conclusion of an insurance contract or payment processing, it is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Where consent has been given, Art. 6 para. 1 lit. a GDPR applies. Processing operations for the protection of legitimate interests are based on Art. 6 para. 1 lit. f GDPR.
 

3.  Purpose of Data Processing

The processing of personal data in connection with RG-Next, the claims reporting portal and the apps serves registration, contractual structuring as well as the provision and use of the respective digital offerings. In addition, we process data where this is necessary to protect legitimate interests of Real Garant or third parties. This concerns, in particular, ensuring IT security and IT operations, the holistic consideration of your customer relationship with Real Garant companies in Germany as well as advertising for our own insurance products and insurance products offered jointly with partners, including market and opinion surveys, to the extent permitted by law.
 

4. Storage Period and Termination Option

You may end the use of the respective online platform at any time and thereby end the further storage of personal data within the platform. An informal notification via one of our usual contact channels is sufficient for this purpose. The provider may terminate the use of the respective portal with a notice period of four weeks in text form. The right to extraordinary termination remains unaffected. After termination of the respective online platform, the customer account will be deleted immediately and permanently. Data remains stored in Real Garant’s administrative systems for as long as an active business relationship exists or statutory retention periods require this.

If we process personal data concerning you, you have the rights provided for under the General Data Protection Regulation. These include, in particular, rights of access, rectification, erasure and restriction. You may request information about the data stored about you at any time via the contact options stated above.
 

1. 1. Right to Object to Direct Advertising

You may object at any time to the use of your personal data for direct advertising purposes. If processing is carried out on the basis of legitimate interests, you also have the right to object on grounds relating to your particular situation. In this case, we will generally no longer process the data concerned unless compelling legitimate grounds override this or the processing serves the establishment, exercise or defence of legal claims.

2. Withdrawal of Your Consent

You may withdraw any data protection consent you have given at any time with effect for the future. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.

3. Right to Lodge a Complaint with the Supervisory Authority

You may contact the Data Protection Officer named above with any data protection concerns or complaints.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work or the place of an alleged infringement, if you believe that the processing of your personal data violates the GDPR.
 

The data protection supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Post Office Box 10 29 32
70025 Stuttgart
Germany

In certain cases, Real Garant offers the option of receiving contract-related information and documents electronically by email. In doing so, we attach particular importance to an appropriate level of protection for the transmitted data. The General Data Protection Regulation requires appropriate technical and organisational measures to be taken in order to protect personal data in accordance with the respective risk. This also includes, in particular, the use of encryption procedures. To secure the transmission of emails, Real Garant uses the Transport Layer Security (TLS) procedure. TLS protects the connection between the email servers involved and makes it more difficult for third parties to access or modify content or attachments during transmission. The prerequisite for encrypted transmission is that the respective receiving email provider also supports TLS. Real Garant’s mail server generally attempts to establish the most secure available connection to the target server. If the recipient server does not support TLS encryption, data transmission may, under certain circumstances, take place unencrypted. Please note that TLS only protects the transmission path. Emails may still be stored unencrypted in the mailbox of the respective provider. The provider of the email service may therefore technically have access to the messages stored there.

In addition to this Privacy Policy, we provide below our information on the use of your data in connection with our insurance products for download. The documents contain additional information on the processing of personal data and on the service providers used by Real Garant:

• Information regarding the use of your data Download
• List of service providers Download