AWP P&C (UK Branch) and AWP Assistance UK Ltd, who trade as BMW Insured Warranty Services and BMW Roadside Assistance Services (“we, “us” “our”), part of the Allianz Group of companies are authorised and regulated by the Financial Conduct Authority in the United Kingdom to distribute insurance products and services. The insurance is provided by AWP P&C S.A. This is a French company authorised in France and acting through its UK Branch.
AWP Assistance UK Ltd also trades as Allianz Assistance, Allianz Partners and Allianz Global Assistance.
Protecting your privacy is a top priority for us. This notice explains how and what type of personal data will be collected, why it is collected and with whom it is shared. Please read this notice carefully.
A data controller is the individual or legal person who controls the use of the dataand is responsible for keeping it safe. The laws apply to personal data in both paper and electronic files. AWP Assistance UK Ltd is the data controller as defined by relevant data protection laws and regulations
We will collect and process different types of personal data about you as follows:
- data relating to the identification of persons who are parties, interested or involved in the contract; and
- any other data necessary for the conclusion and/or performance of the contract.
In this context, we may collect and process ‘sensitive personal data’ relating to you.
NOTE: By subscribing to this contract, you undertake to communicate the information contained in this privacy notice to any third party for whom any personal data could be transmitted to us (e.g. other policyholders, beneficiaries, third parties involved in the claim, people to be notified in the event of an emergency etc.) and you agree not to communicate this information for any other purpose.We collect personal information direct from individuals, their representatives, business partners, digital applications (such as the Allianz Service Partner app and Allianz Provider app) or from information they have made public, for example, on social media. We also collect personal information from other persons or organisations, for example: emergency services, law enforcement agencies, medical and legal practices; fraud prevention agencies and industry registers and databases used to detect and prevent insurance fraud; other insurers or service providers who underwrite the insurance or provide the services for our products, other Allianz Group companies. We use technologyon our website, apps and emails, such as the use of cookies or small text files on our website or pixels within emails.
Depending on the type of insurance product or service we provide to you, we will collect and process various types of personal data about you:
- surname, first name
- address
- place of residence
- date of birth
- gender
- telephone numbers
- email address
- credit/debit card and bank account details
- CCTV / video images (we may collect this if you visit one of our offices)
- location / GPS information
- flight and travel plans
- call recordings
- medical information
- policyholders and anyone named on or covered by the policy
- data relating to children in some circumstances, for example where the child is a beneficiary under a policy or is involved in a claim (sensitive data)
- anyone who may benefit from or be directly involved in the policy or a claim, including claimants and witnesses
- anyone seeking an insurance quote from us or whose details are provided during the quotation process
- identification checks and details including previous claims information
- tracking and location information if it is relevant to the insurance policy or claim
- voice when you use the digital/virtual assistant tool (Voicebot or equivalent)
- customer satisfaction surveys on the services/products
- IP addresses and information about the technology you are using
- where applicable, we’ll collect data relating to criminal offences, including previous criminal convictions, bankruptcies and other financial sanctions such as County Court Judgements
- information collected from your devices relating to your use of our websites, including via the use of cookies
- in the event of a claim under our warranty and roadside assistance products where a hire car is provided, we will collect and process data relating to driving related convictions which may affect our ability to provide a hire car to you
- we may also collect and process special category data about you, such as medical information, where you have purchased a travel product from us or in case of 3rd party electric bicycle and electric scooter rental
- in the event of a claim we may need to obtain and share data with retailers and authorised repairers; where the device was purchased or repaired (for mobile device and retail product insurance)
- we may also need to collect and process special category data about you, such as medical information.
Purpose
Is your express consent required?
Quote and subscription to the insurance contract
No, to the extent that the activities of processing are necessary to execute the insurance contract to which you are a party and to take the necessary steps to put the insurance in place prior to the conclusion of this contract.
Administration of the insurance contract (i.e. handling claims and complaints, investigating claims and seeking confirmations necessary to determine the existence of an insured event and the amount of compensation to be paid or the type of assistance to be provided etc. in relation thereto.
Yes, if necessary (i.e. for sensitive data). However, in cases where we need to process your personal data in the context of the processing of your claim and or complaint and/or need to monitor the treatment of vulnerable customers and those with protected characteristics, we will not request your express consent.
To conduct quality surveys on the services provided, in order to assess customer satisfaction and improve it
No. We have a Legitimate Interest in contacting you after handling a request or after providing a service in order to ensure that we have executed our contractual obligations in a satisfactory manner. However, you have the right to object by contacting us as explained in section 10 below.
To comply with any legal obligations (for example, those arising from laws that apply to insurance contracts and insurance activities, compliance with tax obligations, accounting laws and administrative obligations.
No. In these circumstances, the processing activities are expressly and legally permitted without the requirement for express consent.
For verifications purposes, to comply with legal and/or contractual obligations or internal procedures
No. We may process your personal data as required to comply with both internal or external audit requirements that are required by law or external/internal procedures. We will not request your express consent for these purposes if the reason for processing is justified under the regulations in force or under our Legitimate Interest. However, we will ensure that only personal data that is strictly necessary will be used for this purpose and that the data will be held in strict confidentiality.
To analyse the data for the purposes of carrying out statistical and qualitative analysis based on the rate of compensation claims
No. In these circumstance, we will only be processing anonymised personal data. Anonymized data is not considered to fall into the category of personal data and your express consent is therefore not required.
For debt collection management (i.e. to request payment of the premium or claims from third parties, allocating compensation between different
insurance companies covering the same risk)
No, if the processing of your data, even sensitive categories of personal data, is necessary for the purposes of the establishment, exercise or defence of legal proceedings, which are necessary for the purposes of our Legitimate Interest then we will not require your explicit consent.
For the purposes of detecting and preventing fraud, compliance with anti-money laundering requirements and compliance with applicable civil and/or criminal regulations, including, economic sanctions and where applicable, the comparison of your information to that appearing on previous requests/claims with us or other organisations.
No. It’s understood that processing data for the purposes of the detection and prevention of fraud, anti-money laundering and compliance with applicable regulations such as economic sanctions, constitutes a Legitimate Interest of the Data Controller.
To transfer risk via reinsurance and co-insurance
We may process and share your personal data with other insurance or reinsurance companies with which we have signed, or will sign agreements of coinsurance or reinsurance. Coinsurance is where a risk is covered by several insurance companies by means of a single contract, each assuming each a percentage of the risk or in dividing the covers between them. Reinsurance is an insurance policy covering an insurer's exposure to a policy or lass of policies that it has insured. However, this is an internal agreement between us and the reinsurer and you have no direct contractual link to it. These risk transfers occur under the Legitimate Interests of an insurance company which are generally authorised by law (including sharing personal data strictly necessary for this purpose).
We will ensure that your personal data is processed in a manner that is compatible with the purposes indicated above.
For the reasons stated above, your personal data may be disclosed to the following parties who operate as third party data controllers depending on the type of policy you have bought from us:
- other Allianz Group companies, industry governing bodies, regulators, fraud prevention agencies and claims databases, for underwriting and fraud prevention purposes; and
- the manufacturer of your vehicle and their franchised dealers, authorised repairers and vehicle recovery operators;
- the manufacturer of your mobile device and their franchised dealers and authorised repairers;
- retailers of insured products;
- doctors and other health professionals concerning your medical conditions, in the event of a medical emergency, or personal accident;
- other business partners such as banks and mobility companies linked to your product for reporting purposes and product performance analysis to help identify ways to improve the product and customer experience (where they are also a Data Controller and they carry out processing on the basis of their and our legitimate interest to improve our products and services). In some instances, this may also include the sharing of special category data to ensure that we arrive with fair outcomes for you;
- any organisation where you have agreed for them to receive that data as part of the terms and conditions of your membership or affiliation;
- airline companies in the event of repatriation.
For the reasons stated above, we may also share your personal data with the following, who act as data processors under our instruction:
- other Allianz Group companies; experts such as technical consultants, lawyers and loss adjustors; repairers, taxi companies and car hire companies in the event of a claim under our warranty or roadside assistance products; ticket sellers under our event cancellation products; engineers to provide boiler breakdown and repair services under our home emergency products; third party repairers in respect of our appliance protection products; service companies to discharge operations (claims, IT, postal, document management);
- advertisers and advertising networks to send you marketing communications, as permitted under local law and in accordance with your communication preferences. We do not share your personal data with non-affiliated third parties for marketing purposes without your permission; and
- providers of data services and data analysts who support us with developing our products and enhancing customer service and experience.
Finally, we may share your personal data in the following instances:
- in the event of any contemplated or actual reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in any insolvency or similar proceedings); and
- to meet any contractual and/or legal obligation, including to the Financial Ombudsman Service if you make a complaint about the product or service we have provided to you.
Your personal data may be processed both inside and outside of the United Kingdom (UK) or European Economic Area (EEA) by the parties specified in section 4 above, subject always to contractual restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. We will not disclose your personal data to parties who are not authorised to receive it.
Whenever we transfer your personal data for processing outside of the UK or EEA by another Allianz Group company, we will do so on the basis of Allianz’s approved binding corporate rules known as the Allianz Privacy Standard (Allianz’s BCRs) which set out our commitment to maintain the same high level of protection for personal information regardless of where it is processed. The BCR’s are legally binding on all Allianz Group companies. Where Allianz’s BCRs do not apply, we will instead take steps to ensure that the transfer of your personal data outside of the UK or EEA receives the same level of protection as it does in the UK or EEA. If you would like more information on the BCRs, please see section 10 below.
Where permitted by applicable law or regulation, you have the right to:
- access the personal data held about you and to learn the origin of the data, the purposes and ends of the processing, the details of the data controller(s), the data processor(s) and the parties to whom the data may be disclosed;
- withdraw your consent at any time where your personal data is processed with your consent;
- update or correct your personal data so that it is always accurate;
- delete your personal data from our records if it is no longer needed for the purposes indicated above;
- restrict the processing of your personal data in certain circumstances, for example where you have contested the accuracy of your personal data, for the period enabling us to verify its accuracy;
- obtain your personal data in an electronic format for you or for your new insurer; and
- file a complaint with us and/or the Information Commissioner’s Office.
You may exercise these rights by contacting us as detailed in section 10 below.
You have the right to object to us processing your personal data, or tell us to stop processing it (including for purposes of direct marketing). Once you have informed us of this request, we shall no longer process your personal data unless permitted by applicable laws and regulations.
You may exercise this right in the same manner as for your other rights indicated in section 6 above.
Except for voice recordings, which will be kept for two years, we will retain your personal data for a maximum of 10 years from the date the insurance relationship ends. If we are able to do so we will delete or anonymise certain areas of your personal data as soon as that information is no longer required for the purposes for which it was obtained.
We may use automated decision making, including profiling, to assess insurance risks, detect fraud, and administer your policy. This helps us to decide whether to offer the insurance and determine prices.
For example, when you buy a travel insurance product, we carry out automated decision making. We may accept or reject a potential policyholder for cover based on their age. We do not offer insurance for customers above a certain age in the UK. If accepted, the automated calculation of a person’s age may be used to calculate the premium payable.
In online medical screening, we ask customers to respond to a series of medical questions. This then determines whether the customer is accepted or rejected for cover and whether the customer needs to pay an additional premium to have their medical condition covered.
If you have any concerns regarding the decision reached, please let us know at the contact details set out in section 10 below and we will arrange for a person to check the accuracy of the result.
If you have any queries about how we use your personal data, you can contact us as follows:
By email: AzPUKDP@allianz.com
By post: Customer Service (Data Protection), AWP Assistance UK Ltd, 102 George Street, Croydon CR9 6HD
By telephone: 0208 603 9853
We will need details of your name, email address, policy number, and purpose of your request.
We regularly review this privacy notice. This privacy notice was last updated in October 2024.
