BERMUDA DATA PRIVACY NOTICE

The policy of Enstar Group Limited and its subsidiaries (“The Company”) is to respect and protect the privacy of individuals on whom we process data in the course of our business, including data relating to employees, customers and claimants. 

To fulfil this policy, The Company agrees to exercise the safeguards and precautions set forth in this written notice (the “Privacy Notice”) to maintain the confidentiality of information we process.

This Privacy Notice sets out The Company’s current policies and practices with respect to:

  • what personal information about you we may hold or collect;
  • how we may use your personal information;
  • who we may disclose your personal information to;
  • contacting us and your rights to access and update your personal information; and
  • how changes to this Privacy Notice will be made.

The Company website may contain links to other third-party websites.  If you follow a link to any of those third-party websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or processing of your personal information. Please check these policies before you provide any personal information to such third-party websites.

Scope of applicability

This notice applies to you if you are a customer, client, claimant or beneficiary.

Processing of Your Personal Data

We process the following of data collected during our relationship with you:

  • information including your name, address, contact details, details relating to the claim (which depending on the nature of the claim may include medical reports and reports of criminal convictions or crime reports (“Claim Details”) that you, your employer or an organisation who we insure or a third-party claimant provides to us in relation to the administration of an insurance / reinsurance policy that we insure or reinsure;
  • information relating to any request for assistance or support, including your name, address, contact details and details of any vulnerabilities (which may include medical reports) and financial information to support the claim;
  • information relating to any criminal or fraudulent activities provided to us by you or third parties (such as anti-fraud agencies or other insurers);
  • details of your visits to our website and information collected through cookies and other tracking technologies including, but not limited to, your IP address and domain name, your browser version and operating system, traffic data, location data, web logs and other communication data, and the resources that you access.

We collect this information from you, or from authorized third parties.

Processing purposes

We process your personal data for the following purposes:

  • policy administration,
  • claim processing,
  • providing payments, and
  • compliance with applicable laws and regulations as well as security and fraud prevention, compliance with corporate financial responsibilities.

Why we process your personal data

Most of the information we process is necessary to fulfil the agreement or contract we have with you.  Should the scope of our processing change, and where the processing is not considered a reasonable extension of our obligation under that contract, we will seek your consent to process data.

Data transfers and recipients and legal justification for such transfers

The Enstar Group is a global group of companies.  We transfer your personal data to other Enstar Group companies and third parties (e.g., business partners, reinsurers, third party administrators), and, in accordance with applicable law, governmental authorities, courts, external advisors, and similar third parties.  Some of the recipients are located in jurisdictions outside Bermuda.

Recipients located outside Bermuda will provide an adequate level of data protection for your personal data.  Onward transfer of data (including our affiliates outside Bermuda) is subject to appropriate onward transfer requirements as required by applicable law.

Retention periods for and deletion of Your Personal Data

Your Personal Data will be deleted once it is no longer needed for the purposes for which it was originally collected or as required by applicable law.

Your statutory rights

You have a number of rights with regard to the processing of your Personal Data.  These may include:

  • the right to access, including medical records: you have the right to submit a request to the Company for copies of your personal data that we process.
  • Rectification – You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.
  • Blocking, to prevent processing of your data if used for marketing or public relations;
  • Erasure and destruction: You have the right to request that the Company erase your personal data, if we no longer have a valid need to process the data.

To exercise these rights, please contact the Data Protection Officer at Enstar: [email protected].

Changes of this notice

This notice is subject to change.  Please revisit this website regularly to view the latest version.

How to contact us

If you wish to exercise your rights or if you have any questions concerning this notice, please address your request to the Data Protection Officer: [email protected].