Privacy Policy

We will process any personal and / or sensitive data supplied to us in an application or proposal form or subsequently supplied by yourself, whether orally or in writing, for all or any of the following purposes:

• provision of information, including marketing communications;

• answering your questions and request for services, and soliciting your feedback;

• sending important notices, such as changes to our terms, conditions and policies;

• sending you technical notices, updates, security alerts and support and administrative messages;

• making sure we have up-to-date contact information for you;

• underwriting and issuing contracts of insurance, collecting premiums and submitting other bills, claims handling purposes, paying benefits, reinsurance, co-insurance and actuarial activities;

• the proper performance of your contract of insurance;

• underwriting of subsequent insurance applications or proposal forms which you may lodge with us;

• preventing, detecting and / or prosecuting fraud and any other criminal activity which we are bound to report (e.g. if you provide false or deceptive information about yourself or attempt to pose as someone else, we shall disclose any information we may have about you in our possession so as to assist any type of investigation into your actions) and to meet any other specific legal or contractual obligations including but not limited to protecting and defending our rights and property and that of our policyholders or users of our website;

• establishing, exercising or defending any legal action;

• internal purposes, including auditing, risk assessment purposes, internal management, research and statistics, systems administration and the development and improvement of our products and services;

• the protection and promotion of our legitimate interests and the proper conduct of our business;

• as may be allowed or required by or under any law.

We may also be required to process your personal data for the purpose of:

• compliance with applicable laws, rules, regulations, guidance and codes;

• compliance with demands or requests made by local and foreign regulators, governments, courts and law enforcement authorities, and complying with a court process, or in connection with any litigation.

 

On what basis do we use your personal information?

• When you specifically give us your consent to do so;

• For legitimate business purposes: using your personal information helps us to provide you with the products and services you seek. Where we use your personal information for this purpose, rest assured that we will take measures to protect your personal information;

• For the performance of a contract;

• In compliance with a legal obligation.

 

Recipients and sharing of your personal information

Your personal information will be received by Aurora Insurance Agency Limited’s representatives and employees. We may also share your personal information with any of the following:

• our intermediaries, agents and suppliers strictly as required in order to carry out the purposes outlined in this privacy notice, including your broker, if any;

• our professional advisors and auditors strictly as required for consultation purposes or for compliance with our legal obligations;

• regulators, governments and law enforcement authorities as and when this is required under applicable laws and regulations;

• The Malta Insurance Association;

• The Malta Financial Services Authority;

• Other insurance companies and other third parties, if pertinent to any of the purposes listed above;

• courts, tribunals, arbitrators or other competent bodies who may have authority to request such personal information.

Relevant data will be disclosed or shared as appropriate with our employees and with affiliated companies, associates, agents and Tied Insurance Intermediaries, your broker if any, the Malta Insurance Association, other insurance companies and other third parties if pertinent to any of the purposes listed above.  Should you have availed yourself of the services of one of our agents or sub-agents, you confirm that you are aware that such agents and sub-agents will process your personal data pursuant to their legal obligations.

When you complete and forward to us an online form which includes also information of another person, you confirm that you are giving your explicit consent, in terms of the Data Protection Act (Cap. 586 of the Laws of Malta) and the General Data Protection Regulation on your own behalf and all the other persons specified in the form, for us to process the said personal information as outlined above, and you confirm that you have brought this Data Protection Notice to the attention of these other persons and obtained their respective consents.

 

Access And Changes To Your Personal Data

Your Rights

You have the right to:

• Ask Aurora Insurance Agency Limited about the processing of your personal information, including to be provided with a copy of your personal information held by Aurora Insurance Agency Limited;

• request the correction and / or deletion of your personal information, or restrict or object to the processing of your personal information: you are required to inform us immediately of any such correction, alteration or deletion relating to your personal data which we are processing by writing to the Data Protection Officer at Aurora Insurance Agency Ltd., 136 St. Christopher Street, Valletta, Malta, VLT 1463, Malta, and the letter must be signed by yourself as the data subject to whom the particular data relates;

• request to obtain and reuse your personal information for your own purposes across different services;

• complain to a competent supervisory authority, or to a court of law, if your data protection rights are violated or you have suffered as a result of unlawful processing of your personal information.

In addition to those rights outlined above you also have an unconditional right to object at any time to the processing of your personal information for direct marketing purposes by contacting us via one of the methods set out under the “Get in Touch” page of this website.

​

Transfers outside the European Union

We may transfer your personal information outside of Malta. The countries to which your personal information is transferred may not offer an equivalent level of protection for personal information to the laws of Malta. Where appropriate, we will take steps to ensure your information is transferred subject to appropriate safeguards, such as by entering into data transfer agreements. Where we have put data transfer agreements or similar safeguards in place, we may be able to make a copy of this available to you if you contact us via one of the methods set out under the he “Get in Touch” page of this website.

​

How long will we keep your personal information?

We have a data retention policy that sets out how long we keep your information. This policy is based on the type of information, the purpose of collection, and the system within our digital platforms in which the information is held. As a general rule, we keep your personal information for as long as we need to in order to carry out those purposes for which your data has been collected.

​

Security

We use reasonable efforts to safeguard the integrity, availability and confidentiality of all personal data that we process relating to you and regularly review and enhance our technical, physical and managerial procedures so as to ensure that your personal data is protected from:

• unauthorised access;

• improper use or disclosure;

• unauthorised modification;

• unlawful destruction or accidental loss.

To this end we have implemented security policies, rules and technical measures to protect the personal data that we have under our control. All our employees and data processors, who have access to and are associated with the processing of personal data, are further obliged to respect the confidentiality of our clients’ and visitors’ personal data.

By its very nature, however, the Internet is not a secure medium and data sent via this medium can potentially be subject to unauthorised acts by third parties. We cannot guarantee the privacy or confidentiality of any information passing over our website.

Moreover, data sent via the Internet may be transmitted across international borders even where sender and receiver of information are located in the same country. Consequently, data relating to you may be transmitted via a country having a lower level of data protection than that existing in your country of residence. We shall accept no responsibility or liability whatsoever for the security of your data while in transit through the Internet.