Data Protection

Privacy Notice for the Use of Our Website

Thank you for visiting our website and for your interest in our company. Protecting your personal data is important to us. The following information explains how we process personal data in connection with your use of our website.

Personal data means any information relating to an identified or identifiable natural person, for example a name, contact details, an IP address or usage data.

1. Data Controller

The controller responsible for processing personal data in connection with this website is:

Talanx AG
HDI-Platz 1
30659 Hannover
Germany
Email: [email protected]

Where this website refers to separate privacy notices for specific business areas or products, those notices apply in addition to this Privacy Notice.

2. Data Protection Officer

If you have any questions about data protection or wish to exercise your rights as a data subject, you may contact our Data Protection Officer at any time:

HDI AG
Data Protection
HDI-Platz 1
30659 Hanover
Germany

Email: [email protected]

3. Competent Supervisory Authority

The data protection supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hanover
Germany

You have the right to file a complaint to the data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

4. Processing of Access Data and Log Files

When you visit our website, the browser you use automatically transmits information to our website server. This information is temporarily stored in log files.

In particular, the following data may be processed:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file accessed
• Website from which our website was accessed
• Browser and browser version used
• Operating system used
• Name of the internet access provider
• Volume of data transferred
• HTTP status code

The data is processed to establish a connection to the website, ensure system security and stability, support the technical administration of the website, and enable us to detect and investigate attacks or malfunctions. The IP address is analysed only in the event of attacks on the network infrastructure and, without allowing us to identify you, for statistical purposes.

The legal basis is Art. 6 sec. 1 f EU General Data Protection Regulation “GDPR”. . Our legitimate interest is to provide our website securely, reliably and in full working order.

As a general rule, log file data is stored only for as long as necessary for the purposes stated above. It may be stored for longer where this is necessary to investigate security incidents or attacks on our IT infrastructure, or to establish, exercise or defend legal claims.

5. Cookies and Similar Technologies

We use cookies and similar technologies on our website. Cookies are small text files that may be stored on your device. Similar technologies may include pixels, local storage technologies or scripts that store information on, or retrieve information from, your device.

Section 25 of the German Telecommunications Digital Services Data Protection Act (“TDDDG”) applies to storing information on your device or accessing information already stored on it. As a general rule, consent is required unless the storage or access is strictly necessary to provide a digital service that you have expressly requested.

Where personal data is processed in connection with cookies or similar technologies, the requirements of the GDPR also apply.

6. Cookie Categories

We use different categories of cookies and similar technologies on our website.

6.1 Strictly Necessary Cookies

Strictly necessary cookies are technically required for our website to function properly. These may include, in particular, cookies required for page navigation, security features, storing your privacy preferences or providing certain basic functions.

The legal basis for accessing your device is Sec. 25 (2) TDDDG. The subsequent processing of personal data is based on Ar. 6 sec. 1 f GDPR. Our legitimate interest is to provide our website securely and in full working order.

These cookies cannot be disabled through our consent tool because they are required for the operation of the website.

6.2 Functional Cookies

Functional cookies enable additional features and make our website more convenient to use, for example by storing language or country settings.

Where these cookies are not strictly necessary, we use them only if you have given your prior consent.

The legal basis for accessing your device is Sec. 25 (1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6 sec. 1 a GDPR.

You may withdraw your consent at any time with effect for the future via the cookie settings.

6.3 Analytics and Performance Cookies

Analytics and performance cookies help us understand how our website is used. This enables us, for example, to identify which pages are visited most frequently, which content is relevant and how we can improve our online offering.

We use analytics and performance cookies only if you have given your prior consent.

The legal basis for accessing your device is Sec. 25 (1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6 sec. 1 a GDPR.

You may withdraw your consent at any time with effect for the future via the cookie settings.

7. Consent Management and Cookie Settings

We use a consent management tool to obtain, manage and document your consent to cookies and similar technologies.

When you visit our website for the first time, you will be shown a cookie banner. There you can decide whether to allow only strictly necessary cookies or also consent to additional categories of cookies and similar technologies.

Your selection is stored on your device so that we can take your preferences into account on future visits. Your consent preferences are stored for 14 months, unless you change your settings or delete the relevant cookies beforehand.

You can view and change your cookie settings at any time:

8. Google Analytics

Where you have consented, we use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse how our website is used. This may involve processing information about page views, time spent on pages, devices and browsers used, approximate location and interactions with our website. Google Analytics uses cookies or similar technologies for this purpose. Google states that Google tags and SDKs may use cookies or app instance IDs to measure user interactions.

Google Analytics is used only on the basis of your prior consent.

The legal basis for accessing your device is Sec. 25 (1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6 sec. 1 a GDPR.

Google Analytics is used on this website with IP anonymisation enabled. According to Google, for access from the EU, Switzerland and the United Kingdom, IP addresses are neither logged nor stored in Google Analytics. They are used to derive location data and are then deleted.

Google processes the information collected on our behalf to evaluate the use of our website, compile reports on website activity and provide other services relating to website and internet use.

The transfer of personal data to Google LLC in the United States cannot be ruled out. Where data is transferred to the United States, this is carried out on the basis of EU Standard Contractual Clauses.

Data stored in Google Analytics is retained for 14 months.

You may withdraw your consent at any time with effect for the future via the cookie settings.

Further information is available in Google’s Privacy Policy:
https://policies.google.com/privacy

Information about Google Analytics:
https://support.google.com/analytics/answer/6004245

9. Social Media and External Platforms

Our website may include links or buttons to social networks and external platforms, such as LinkedIn or Xing.

Where our website merely links to our profiles, no personal data is generally transmitted to the relevant provider simply by visiting our website. Only when you click the relevant link do you leave our website and are redirected to the platform of the respective provider.

Where social media plug-ins or similar integrations are used on our website, we implement them so that data is not transmitted to the relevant provider merely when our website is accessed. Personal data is transmitted to the relevant provider only when you actively use the function concerned, for example by clicking the plug-in.

Please note that social network providers may also process personal data outside the European Union or the European Economic Area. We have no influence over the nature or extent of the data processing carried out by these providers.

Further information about data processing by the respective providers is available in their privacy notices:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Xing: https://privacy.xing.com/en

10. Communicating with Us / Contact Form

This may include, in particular, the following data:

• Name
• Email address
• Telephone number, if provided
• Insurance policy number, if provided
• Contents of your message
• Any other information you provide

The data is processed in order to handle your enquiry and communicate with you.

Where your enquiry relates to a contract or pre-contractual measures, the legal basis is Art. 6 sec. 1 b GDPR. In all other cases, processing is based on Art. 6 sec. 1 f GDPR. Our legitimate interest is to handle and respond to your enquiry.

Where we obtain consent in an individual case, the legal basis is Art. 6 sec. 1 a GDPR.

Your data will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations or legitimate interests requiring further storage. The specific retention period depends on the subject matter of your enquiry.

Communications via our website are encrypted. You can identify this, in particular, by the use of “https://” in your browser’s address bar.

11. Applications, Customer Portals or Special Online Services

Where our website refers to application portals, customer portals, reporting channels or other special online services, additional privacy notices may apply. These provide separate information about the nature, scope and purposes of the relevant data processing.

12. Recipients of Personal Data

Within our company, personal data is accessible only to those departments and functions that require it for the purposes set out above.

Personal data may also be disclosed to service providers that support us in operating and maintaining the website, such as IT service providers, hosting providers, consent management providers or analytics providers. Where required, these service providers are engaged under a data processing agreement in accordance with Art. 28 GDPR.

Otherwise, personal data is disclosed to third parties only where permitted by law, where you have given your consent or where we are legally required to do so.

13. Transfers to Third Countries

Where personal data is transferred to recipients outside the European Union or the European Economic Area, this takes place only where the applicable data protection requirements are met.

This may be the case, in particular, where the European Commission has adopted an adequacy decision for the third country concerned, appropriate safeguards within the meaning of Art. 46 GDPR have been agreed, or a statutory derogation applies.

For certain services, particularly those provided by companies based in, or forming part of a corporate group in, the United States, a transfer of data to the United States cannot be ruled out. Where applicable, we provide separate information about this in the section relating to the relevant service.

14. Retention Period

We retain personal data only for as long as necessary for the relevant processing purposes.

We also retain personal data where statutory retention obligations apply or where further retention is necessary to establish, exercise or defend legal claims.

Specific retention periods, or the criteria used to determine them, are set out in the relevant sections of this Privacy Notice.

15. Your Rights

Subject to the applicable statutory requirements, you have the following rights:

• Right of access under Article 15 GDPR
• Right to rectification under Article 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to data portability under Article 20 GDPR
• Right to object under Article 21 GDPR
• Right to withdraw consent under Article 7 sec. 3 GDPR
• Right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR

Where you have given us your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

16. Right to Object under Article 21 GDPR

Where we process personal data on the basis of Art. 6 sec. 1 f GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

Where we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing. In that event, we will no longer process your personal data for these purposes.

To exercise your right to object, you may use the contact details set out above.

17. Current Version of and Changes to this Privacy Notice

We reserve the right to amend this Privacy Notice where this becomes necessary as a result of legal, technical or organisational changes.

Last updated: August 2026