Allianz Ayudhya Privacy Notice (For Customers)

Allianz Ayudhya Assurance Public Company Limited and Allianz Ayudhya General Insurance Public Company Limited (the Company“, ”we”, ”us”) is an authorized insurance company providing insurance products and services in Thailand.

Your privacy is important to us. This privacy notice explains how and what type of personal will be collected, used or disclosed (“processing”), processing purposes and with whom it is shared or disclosed, and your rights in this regards and retention period.

Definition

  • Data controller means the legal person or the Company who controls and is responsible to collect, use or disclose personal data in paper or electronic files regarding to personal data protection laws
  • Allianz Group Companies means Allianz SE, associated and affiliated company of Allianz SE, including Allianz Ayudhya Group Companies
  • Allianz Ayudhya Group Companies means Allianz Ayudhya Assurance Public Company Limited, Allianz Ayudhya General Insurance Public Company Limited, and Allianz Ayudhya Capital Public Company Limited and My Health Services (Thailand) Company Limited including associated and affiliated company of Allianz Ayudhya Capital Public Company Limited.

What will your personal data be collected and processed?

  • Personal data that the Company obtained from you on applications, forms, or any other documents when you request for our services through all channels, including electronic channels, such as

          o   Basic personal data such as name, surname, title, identification card number, passport number or other identification card number, addresses, gender, phone number or mobile phone number, email address, date of birth, username or marital status;

          o   Financial information such as source of income, credit/debit card number, bank account number, details of premium payment, or tax information;

          o   Employment information such as position, workplace, work experience, name and address of employer. 

  • Information of backgrounds/records relating to laws on Anti-Money Laundering, Terrorism and Proliferation of Weapons of Mass Destruction Financing, Bankruptcy or Foreign Account Tax Compliance Act (FATCA);
  • Any transactions relating to insurance policy such as premium payment history, insurance policy loan, claim, execution of rights or the use of our services including conversation records from all communication channels of the Company;
  • Sensitive personal data such as health data, disabilities, race or ethnicity, genetic data, biometric data, sexual behavior, criminal records, trade union membership, health records, claim history;
  • Information on the social media platforms that we receive from other social media providers or from the subscription for our services, usage of our website or application such as My Allianz, Healthy Living or My Health;
  • IP address, the type of browser software used, and the date, time and duration of your usage of our website or application, where such details are automatically recorded.

In case you are interested in our insurance products and services, we need you to provide us with personal data and sensitive personal data as necessary in order to offer products or services, underwrite, conduct our obligations under an insurance contract, or fulfil your others requests. In case you cannot provide us your necessary or sufficient personal data or sensitive personal data for the Company’s conduct, we may not fulfil the obligations under the insurance contract or may refuse your requests.In case you give us other personal data (e.g. family member of the insured, premium payer or beneficiary), you acknowledge and confirm that you have the authority to act on their behalf to Process their personal data and provide this Privacy Notice for their acknowledgement.

How will we obtain and use your personal data?

3.1   The Company obtains your personal data from:

  • The Company collects personal data directly from you via your life insurance application, your request submitted to the Company, your interaction with us from all of the Company’s communication channels, and your request to use the Company’s website or applications e.g. My Allianz, Healthy Living or My Health or your participation in marketing or social responsibility activities of the Company.
  • We may also obtain your personal data from third parties or public databases, such as Allianz Ayudhya Group Companies or Allianz Group Companies, business partners, financial advisors, insurance intermediaries or brokers, banks, other insurers, your doctors, hospitals, professional associations such as the Thai Life Assurance Association/Thai General Insurance Association, government authorities, regulator, other authorities under other applicable laws, employer or financial advisor of employer, and social media providers linked with the Company.
3.2   We will use your personal data for the following purposes:

Swipe to view more

Lawful Basis

Purposes

For performance of insurance contract or fulfillment of your request

  • To advise or provide the appropriate product offerings, premium calculation/quotation, underwriting and the administration of your insurance policy, reinsurance including consideration of benefit or claims according to the insurance contract, and our online service at present or in the future, and the communication related to your insurance policy e.g. invoicing for insurance premium, informing details about insurance policy or noticing about changes in the Company’s terms, conditions, and policies;
  • To conduct transaction monitoring for legal or contractual execution according to the insurance contract or law.

 

For compliance with laws relating to the business operation or other laws of authorities

  • To verify or identify a status of individual as required by laws e.g. laws relating to the supervision of life insurance business, Anti-Money Laundering, Counter-Terrorism and Proliferation of Weapons of Mass Destruction Financing law, Bankruptcy, or Foreign Account Tax Compliance Act: FATCA, Securities laws etc.  the Company may refuse to provide the service as  you request if the law specified it;
  • To disclose or submit information, documents or any reports to regulators or other government authorities as required by laws;
  • To perform or cooperate with the competent officers according to other laws as requested from time to time; or to comply with the government report or regulations concerning personal data disclosure;
  • To collet, use and/or disclose personal data to the Office of Insurance Commission (“OIC”) for the purpose of supervision on insurance businesses in accordance with insurance commission laws, insurance laws according to OIC privacy notice as shown on  www.oic.or.th 

For legitimate interest of the Company

  • To perform statistical analysis, satisfaction survey, conducting market research or data or financial analysis, actuarial research, pricing, underwriting, claim consideration or to formulate strategies related to product design and development, or service or to analyze the use of website, application, social media in order to cater the usability of website, application or social media to align with your usage;
  • Examination or investigation or protection or investigateion of suspicious transactions on fraud or financial crime or compliant handling e.g. transaction examination on suspicious transaction, conducting fact finding as well as disclosing or reporting the wrongful or fraud cases complaint data or result of the complaint management to the relevant authorities;
  • For Allianz Group Companies or Allianz Ayudhya Group Companies to operate business efficiently and appropriately, including testing the Company's systems, managing our financial position, business capability, planning, communications, corporate governance, internal audit, and organizational restructuring. These activities would involve data management, record keeping, making copies, or the destruction of personal data;
  • For marketing purposes under the provision of law e.g.  contacting to inform you about information, giving a special offer on product or service, offering special benefits or privilege, and informing about the marketing information or other marketing promotion activities occasionally arranged by the Company or Allianz Ayudhya Group Companies that may benefit for you without violating your fundamental right.
If you do not want to receive any marketing communication from us, you can let us know anytime by contacting Allianz Ayudhya Customer Care Center at 1373 everyday 24 hours;

Consent

  • The Company may process sensitive personal data only to the extent necessary for legitimate purposes and within the scope of consent given, unless such processing of sensitive personal data is exempted by law from consent requests.

In the event that the Company cannot process sensitive personal data or does not receive enough, accurate and complete sensitive personal data to fulfil obligations under the insurance contract law, the Company may refuse to act on your requests;

  • For marketing purposes e.g. disclosing your personal data to Allianz Ayudhya Group Companies or business partners for contacting or offering products and services. Privilege of the Company, Allianz Ayudhya Group Companies or business partners;
  • For any other purposes where consent is given from time to time, unless the Company can process for such purposes lawfully under applicable law or personal data protection law.
If you would like to withdraw the consent for disclosure of personal data for marketing purpose, please contact the Company at Allianz Ayudhya Customer Care Center at 1373 everyday 24 hours.

The Company may process the personal data for other purposed as specified by laws such as the prevention or suppression of dangers to your life, body or health or the public interest of the Company or for the exercise of the state power granted to the Company;

When you use our products or receive our services, the insurance application you filled out or the insurance contract made with us may have additional conditions related to how we do the Processing of your personal data. These may be used in addition to the objectives specified in this Privacy Notice.

Who will have access to your personal data? Or who do we share your personal data with?

Your personal data may be disclosed to the following parties who operate as third party data controllers or data processors under our instruction as prescribed by laws or in accordance with the aforesaid purposes:

  • Government authorities, regulatory bodies, Allianz Group Companies, Allianz Ayudhya Group Companies, other insurers, co-insurers, re-insurers, life insurance intermediaries/brokers, employer as a group policyholders, professional associations, or banks/financial institutions;
  • Other external contacting parties or service providers e.g. cloud service provider, data/document management, call center, payment service provider, information technology service provider, post, marketing research/analysis companies, rating agencies; 
  • Technical consultants, experts, lawyers, auditors, physician, hospitals, third party claim administration, lost adjustors/surveyors, garages;
  • Business partners to send you information for marketing purposes or marketing information;
  • Business purchaser or business transferee, in the event of reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stocks (including in any insolvency or similar proceedings)

Where will my personal data be processed?

Your personal data may be processed both inside and outside of Thailand by the parties specified in section 4 above, subject always to contractual restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. We will not disclose your personal data to parties who are not authorized to process them.

Whenever we transfer your personal data for processing outside Thailand or sending to any company in Allianz Group companies, we will do so on the Binding Corporate Rules (BCRs) of Allianz which establish adequate protection for personal data.

The BCRs and List of Allianz Group companies that comply with the BCRs can be accessed under www.allianz.com/en/privacy-statement.html#bindingcorporaterules

Where the BCRs do not apply, we will instead take steps to ensure that the transfer of your personal data outside of Thailand receives an adequate level of protection as it does in Thailand e.g. Standard Contractual Clauses 

What are your rights in respect of your personal data?

Under the Personal Data Protection Act, or the effective regulations, you have the right to:

  • Access or request a copy of your personal data held about you including disclosure of the acquisition of your personal data;
  • Cancel or withdraw your consent at any time where your personal data is processed with your consent;
  • Update or correct your personal data so that it is always accurate, complete and not misleading;
  • Delete, destroy or anonymize your personal data from our records if it is no longer needed for the purposes indicated above;
  • Restrict the processing of your personal dataRestrict the processing of your personal data in circumstances where you have contested the accuracy of your personal data;
  • Object to the collection, use, and disclosure of your personal data in certain circumstances, including the Processing for the objective of direct marketing;
  • Obtain your personal data in an electronic format for you or for your new insurers; and
  • File a complaint with us and/or the relevant data protection authority if you believe that there is violation of the Personal Data Protection Act.

You may exercise these rights by adjusting your privacy preference settings where you have created an online account with us. You can change privacy preferences by accessing online account and adjusting profile settings, or contacting us as detailed in section 13 below if you need any assistance.

Your withdrawal of any previously given consent, your request to delete, destroy and anonymize your personal data, your request to restrict or your objection to the processing of your personal data could mean that the Company is unable to perform our obligations under an existing contract with you, and that there may be restrictions on certain transactions or services, which may result in the loss of your privilege from the insurance contract or other agreements, and may restrict you from services offered by us.

The Company may refuse to comply with your request in the circumstances where there are legal restrictions, or the Company has compelling legitimate grounds for the processing of your personal data as permitted by applicable laws. The Company reserves the right to charge a reasonable fee to complete your request.

How long is personal data retained for?

We will retain your personal data as long as it is necessary for the Processing in accordance with aforesaid purposes and continue storing at least ten (10) years from the date the insurance relationship between you and the Company ends, the date of obtaining arbitral award, or the date that the court issues the final judgement, as the case may be. However, the Company may continue to retain your personal data after such period if it is necessary to store your data longer for the purpose for which it is collected, or for other reasons deemed appropriate e.g. enforcement under the law or our insurance contract.

In the circumstance where the Company rejects to underwrite your application for insurance, where you withdraw your application for insurance, or where permitted by law or regulation, the Company may retain your personal data to the extent necessary to comply with our legal obligations, such as anti-money laundering, and the establishment of legal claim, compliance with, or excersing a legal claim or trial.

Are cookies used on the Company’s Website?

The Company uses tracking technology such as cookies or tags to gather usage information to understand how visitors use the Company’s Website.

Tracking technology helps us manage and improve the usability of the Company’s Website, for example by detecting whether there has been any contact between your computer and us in the past or to identify the most popular sections of the Company’s website.

When you save your cookie settings, they should also apply to your future visits to the Company’s Website. However, for technical reasons beyond our control of the Company which will impact your setting, for example, if you reset your browser, delete your cookies or access the Company’s Website from another browser or device, your cookie settings may be lost. To comply with applicable laws and regulations, in some countries you may be asked to confirm your cookie settings when you first visit the Company’s Website. If you are in a country where you are automatically required to set your cookie settings, you may be asked to set them again on a future visit.

In many cases you can also control tracking technologies using your browser. Please ensure that your browser setting reflects whether you wish to be warned about and/or accept cookies. The specific capabilities of your browser and instructions on how to use them can usually be found in the manual or help file of your browser.

Refusing, disabling or deactivating of cookies may result in a reduced availability of the services provided by the Company’s Website, or parts of the Company’s Website may no longer function correctly.

How are social media plug-ins used on the Company’s Website?

The Company’s Website uses the following social media plug-ins ("plug-ins"):

Swipe to view more

Plug-ins

Operator

Privacy Notice

ปุ่มแชร์ไปยังเฟซบุ๊ก

(Facebook)

Meta Platforms, Inc.Facebook Inc.

1 Hacker Way, Menlo Park, California, U.S.

https://facebook.com/privacy/policy

 

ปุ่ม ทวีต

(Tweet)

Twitter Inc.

795 Folsom St., Suite 600, San Francisco, CA 94107, USA

https://x.com/en/privacy

ปุ่มยูทูบ

(YouTube)

YouTube

901 Cherry Ave, San Bruno, CA 94066, United States

 

https://www.youtube.com/about/policies/

All plug-ins are indicated with the brand names of the respective operators: Facebook, Twitter, YouTube ("Operator"), If you interact with the plug-in, e.g. by clicking on the YouTube video, the data will be transferred directly from your browser to the Operator and saved by the Operator.

What security measures have we implemented to protect your information collected through the Company’s Website?

We have implemented technical and organizational security measures as prescribed by laws to protect your personal data collected by us via the Company’s Website against unauthorized access, misuse, loss or destruction.

How do we treat electronic messages sent to and from the Company?

All electronic messages sent to and from the Company are protected by appropriate technical and organizational security measures and may only be accessed in justified cases in line with applicable laws and regulations to specific persons in defined functions (e.g. Legal, Compliance, Risk Management). Every step of the process, as well as the search criteria used, are logged in an audit trail. All information is disposed of after the applicable retention period has expired.

What should you consider when sending data over the Internet?

The Internet is generally not regarded as a secure environment, and information sent via the Internet (such as to or from the Company’s Website or via electronic message) including downloading information or files from the Company’s website, may be accessed by unauthorized third parties, potentially leading to disclosures, changes in content or technical failures. Even if both sender and receiver are located in the same country, information sent via the Internet may be transmitted across international borders and be forwarded to a country with a lower data protection level than in your country of residence.

The Company cannot take responsibility or liability for the security of your information whilst in transit over the Internet to the Company. In order to protect your privacy, you may choose another means of communication with the Company, where you deem it appropriate

How can you contact us?

If you wish to exercise your rights relating to your personal data, you can contact us by phone, email or post via the details specified below:

Allianz Ayudhya Assurance Public Company Limited

  • 898, 1st Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
  • During Monday to Friday from 8.30 to 17.00; or
  • Allianz Ayudhya Customer Care Center at 1373, available 24 hours every day; or
  • Email: [email protected]

Allianz Ayudhya General Insurance Public Company Limited

  • 898, 1st Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
  • During Monday to Friday from 8.30 to 17.00; or
  • Allianz Ayudhya Customer Care Center at 1292, available 24 hours every day; or
  • Email: [email protected] for Non-life Insurance customer or
  • Email: [email protected] for Health Insurance customer

If you have any queries about this privacy notice or would like to file complaints relating to personal data protection, you can contact Data Protection Officer at [email protected]

How often is this notice updated?

We regularly review this privacy notice. We will ensure the most recent version is available on the Company’s Website at https://www.allianz.co.th/th_TH/privacy-notice.html

The Company may revise or make changes to this privacy notice. In such cases. We will post a notice of those changes on the above website. If a change may significantly affect you, we will notify you about the change via the specified communication channels. The change thereof will be in force for personal data that we collect, use, or disclose after changes have been posted on our website.

This privacy notice is made in both English and Thai language. In the event of any conflict or discrepancy between the Thai and English versions, the Thai version shall prevail.

This privacy notice was last updated on 24 October 2023